This Privacy Policy explains how FullBoat collects, uses, shares, and protects information when you use our service. FullBoat is a hosted application that helps organizations track contract value, invoices, change orders, and cash. We act as a processor of the data your organization puts into the service, and as a controller of the limited account information we need to operate.
Account information. When your organization creates users, we store names, email addresses, roles, and authentication data (passwords are stored only as salted hashes, never in plain text).
Content you provide. Contracts, statements of work, invoices, change orders, uploaded documents, and the figures derived from them. This is your Customer Data and it stays within your isolated workspace.
QuickBooks data. If you connect QuickBooks Online, we read invoice and payment information and invoice documents from your QuickBooks company, described in its own section below.
Usage and technical data. Basic logs such as IP address, browser type, timestamps, and actions taken, used to operate, secure, and audit the service.
We use information to provide and maintain the service, authenticate users, keep an audit trail, respond to support requests, secure the service and prevent abuse, and comply with legal obligations. We do not sell your information, and we do not use your Customer Data to train external artificial intelligence models. Where the service uses AI to read an uploaded document, the content is sent to our AI provider only to return the extracted result for that request, and is not used by that provider to train its models.
When you connect QuickBooks Online, FullBoat accesses your QuickBooks data on a read only basis to bring invoices, payment status, and invoice documents into your workspace for review and tracking. We never write to, change, or delete anything in QuickBooks. Access tokens are stored encrypted and are used only to sync data you have asked us to pull. We keep QuickBooks derived data only as long as needed to provide the service to you. You can disconnect QuickBooks at any time in Settings, which stops syncing and removes the stored tokens. Our access and use of information received from Intuit APIs follows the Intuit Developer terms and the limits described here.
We share information only with service providers that help us run FullBoat, under agreements that require them to protect it and use it only for that purpose. These include our cloud hosting and application platform, our managed database, our file storage, our transactional email provider, our error monitoring provider, and our AI document reading provider. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer, with notice where required. We do not sell personal information.
Data is processed and stored on infrastructure located in the United States. We retain Customer Data for as long as your organization uses the service and for a reasonable period afterward, then delete or anonymize it, unless a longer period is required by law. You may request an export or deletion of your Customer Data as described below.
We protect information with encryption in transit and at rest for sensitive fields, strict per organization data isolation, role based access controls, login protections, and a detailed audit log. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit access to those who need it to operate the service.
Depending on your location, you may have rights to access, correct, export, or delete personal information we hold about you. Because much of the data in FullBoat belongs to your organization, we will usually direct such requests to your organization's administrator, or act on their instruction. To make a request, contact us at the address below.
FullBoat is a business service and is not directed to children. We do not knowingly collect personal information from anyone under sixteen.
We may update this policy from time to time. If we make material changes we will take reasonable steps to notify you and will update the effective date above.
Questions or requests about privacy can be sent to mike@full-boat.com.