Privacy Policy

We collect the following categories of information:

• Account information — name, email address, and role for the users you authorize to access NexusYard.
• Operational data you enter — customers, contacts, job sites, quotes, jobs, scale tickets, inventory, invoices, bills, suppliers, and payments.
• QuickBooks Online data — when you connect QuickBooks, we access accounting records through Intuit’s API (see the section below for specifics).
• Technical & usage data — log data, IP address, device/browser information, and timestamps used to operate, secure, and audit the service.

If you choose to connect your QuickBooks Online company, you authorize NexusYard to access that company through Intuit’s OAuth 2.0 authorization using the Accounting scope. Depending on the features and settings you enable, we may read and/or write the following QuickBooks records:

• Company information and preferences
• Customers and vendors
• Invoices, bills, and payments
• Items / products and services
• Accounts, terms, tax codes, and payment methods

We use this access to keep NexusYard and QuickBooks in sync — for example, importing customers, creating invoices, and mirroring payment status and balances so you can work in one place. You control which records sync and in which direction through your integration settings, and you can pause or disconnect the integration at any time.

Our access tokens are stored encrypted at rest and are never exposed to other users. We do not use QuickBooks data for advertising, and we do not sell it.

Salespeople can optionally connect their own Gmail account so that quotes are sent as a personal email from their own address rather than from the platform. This is entirely optional and is never required to use NexusYard. When you connect Gmail, you authorize NexusYard through Google’s OAuth 2.0 authorization, and we request a single permission — the gmail.send scope.

We use that permission for exactly one purpose: sending the quote emails you compose and approve in NexusYard, from your own address, with the quote PDF attached.

• We request gmail.send (to send quotes on your behalf) and gmail.readonly, which we use ONLY to read the specific quote email threads you sent — by their thread id — so a customer's reply shows up on the quote. We never search, list, or analyze your inbox.
• No email is ever sent without you first reviewing the recipient, subject, and message.
• Your Google OAuth tokens are stored encrypted at rest and are used only for the sends you initiate.
• You can disconnect Gmail at any time from Settings → My profile, which revokes our access.
• We do not use Gmail data for advertising, and we do not sell it.

NexusYard’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• To provide, operate, and maintain the platform and its features.
• To synchronize records between NexusYard and QuickBooks Online per your settings.
• To secure the service, prevent abuse, and maintain an audit trail of actions.
• To generate, with your data, optional AI-assisted suggestions (e.g., invoice drafts) that you review before they take effect.
• To communicate with you about the service, including operational alerts.

• OAuth tokens and other secrets are encrypted at rest using AES-256-GCM.
• All data is transmitted over encrypted connections (TLS/HTTPS).
• Operational data is stored in a managed PostgreSQL database; real-time transport uses Google Firebase.
• Access is restricted by authentication and role-based permissions, and sensitive actions are audit-logged.
• Webhook notifications from Intuit are verified by signature before being processed.

We share data only with infrastructure providers that process it on our behalf to deliver the service, under their respective terms and security practices:

• Intuit — QuickBooks Online accounting data (at your direction).
• Vercel — application hosting and serverless compute.
• Neon — managed PostgreSQL database.
• Google Firebase — authentication and real-time data transport.
• Anthropic — AI processing for optional assistant features; only the data needed for a given request is sent.

We do not sell your personal information or QuickBooks data to anyone.

We retain your information for as long as your account is active or as needed to provide the service and meet legal, accounting, and audit obligations. When you disconnect QuickBooks, we stop accessing your QuickBooks company and deactivate the stored connection; you may request deletion of the associated tokens and synced data. To request access to, correction of, or deletion of your data, contact us at tarun@ohmplatform.com.

• Connect, pause, or disconnect the QuickBooks integration at any time from Settings.
• Control which records sync and in which direction.
• Request access to, correction of, or deletion of your personal data.

NexusYard is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

Questions about this Privacy Policy or your data can be sent to tarun@ohmplatform.com.