Privacy Policy
Last updated: August 30, 2026

This Privacy Policy describes how Craft Digital (“Craft Digital,” “we,” “us,” or “our”) collects, uses, and protects information in connection with the Franchise Performance Dashboards web application (the “Service”). Craft Digital operates the Service for Joshua Tree Experts, LLC and its franchise locations, and the Service is made available to Joshua Tree Experts corporate staff and authorized franchisee users. This policy applies to the Service itself; it does not apply to third-party platforms that a user or franchisee connects to the Service, which are governed by those providers’ own privacy policies. This policy is effective as of August 30, 2026.

Information We Collect

We collect the following categories of information in order to operate the Service:

  • Account data. When an account is created for you, we store your name, email address, a salted hash of your password (we never store or have access to your password itself), and the location(s) and role assigned to your account.
  • Business data from sources you connect.The Service reports on data pulled from systems that a franchise location or corporate administrator chooses to connect, including: QuickBooks Online, described in detail below; field-operations data such as jobs, proposals, and invoicing from the location’s operational systems; and advertising performance data from any advertising platforms the location connects.
  • Technical data. Like most web applications, we use a session cookie to keep you signed in and keep basic request logs (such as request timestamps and error information) to operate and secure the Service.

QuickBooks Online Data

A connection to QuickBooks Online is authorized per company by a QuickBooks administrator through Intuit’s own OAuth consent screen. We never see or handle QuickBooks credentials directly. Once authorized, we store the resulting OAuth access and refresh tokens encrypted at rest, and use them to retrieve expense and purchase records and Profit & Loss reports for the connected company through Intuit’s APIs.

QuickBooks Online data is used solely to present financial reporting for that company inside the dashboard. We do not sell QuickBooks data, use it for advertising, or share it with any third party other than the hosting and database subprocessors described below. A company can disconnect QuickBooks at any time, either from the Settings page inside the dashboard (which immediately stops future syncs) or by revoking access directly from Intuit’s connected-apps management page. A company may also request deletion of previously synced QuickBooks data at any time by contacting us at the email address below.

How We Use Information

We use the information described above to provide and operate the reporting service, respond to support requests, and maintain the security and integrity of the Service. We use this information because it is necessary to perform the service agreement between Craft Digital and Joshua Tree Experts (and, where applicable, its franchisees) — we do not use it for any purpose beyond delivering the dashboards you and your organization rely on.

Sharing & Subprocessors

We do not sell personal data. We share information only with the service providers (subprocessors) that host and run the Service on our behalf, and only to the extent necessary for them to provide that hosting:

  • Vercel — hosts the application (United States).
  • Supabase — hosts our database, where account and business data is stored (United States).

We will also disclose information if required to do so by law, such as in response to a valid legal process.

Security

Data is encrypted in transit using TLS, and credentials and OAuth tokens (including QuickBooks tokens) are encrypted at rest. Access within the Service is role-based: each user can only view data for the location(s) their account has been assigned to.

Data Retention

We retain account and connected business data for as long as your organization’s relationship with Craft Digital continues, or until a connected source is disconnected or deletion is requested, whichever comes first.

Cookies

The Service uses a single session-authentication cookie to keep you signed in. We do not use advertising cookies, analytics cookies, or any form of cross-site tracking.

Your Rights

You may request access to, correction of, or deletion of your personal information, including previously synced QuickBooks data, by contacting us at the email address below.

Changes to This Policy

If we make changes to this Privacy Policy, we will post the updated version on this page and update the “Last updated” date above.

Contact Us

Questions about this Privacy Policy, or requests regarding your information, can be sent to jc@craftdigital.ai.