Privacy policy
This policy explains what data the Decade Geode Connector (the "Integration") accesses, how it is used and protected, and who can see it. The Integration is used only by Decade X LLC ("Decade") and operated on Decade's behalf by Steve Dalforno Consulting ("GeodeIO").
Data the Integration accesses
- QuickBooks Online: Decade's accounting records, such as customers, vendors, items, invoices, bills, purchase orders, payments, journal entries and the chart of accounts.
- Shopify: Decade's store records, such as orders, products, inventory levels, locations and customers.
QuickBooks Online and Shopify are each connected through their own app with its own authorization. Data moves between them only through the Integration's own systems, a server and database that Decade owns. For example, inventory quantities recorded in QuickBooks are sent to Shopify, and Shopify sales are recorded in QuickBooks.
The Integration doesn't collect data from anyone other than Decade's own systems. It doesn't use cookies or tracking on this website.
How the data is used
Only to provide the service to Decade: reporting, reconciling QuickBooks with Shopify, and, where Decade has asked for it, keeping inventory and orders consistent between the two. The data isn't sold, rented, or used for advertising. It isn't used to train artificial intelligence models, and it isn't sent to third-party AI services unless Decade authorizes this in writing.
Where the data is stored
In a database owned by Decade, hosted by DigitalOcean in San Francisco, California, USA. Data is encrypted in transit and at rest. The credentials that connect to QuickBooks are additionally encrypted, and the key is kept separately from the database.
Who can access it
- Authorized Decade staff, through read-only reports.
- GeodeIO personnel who operate and support the Integration, using individual accounts protected by single sign-on or two-factor authentication.
Service providers
The Integration relies on these providers to run. Each only processes data as needed to provide its service:
- DigitalOcean: hosting and database.
- Cloudflare: secure network access.
- Slack: operational alerts to Decade and GeodeIO, which may include record names such as a customer or item name.
- Healthchecks.io: job status signals only, with no accounting or customer data.
Retention and deletion
Data is kept while Decade uses the Integration. If the Integration is disconnected from QuickBooks or Shopify, collection from that system stops immediately. When Decade asks, or when the service agreement ends, GeodeIO will delete the data or hand it over to Decade, as Decade instructs.
Security incidents
If GeodeIO confirms a security incident affecting Decade's data, it will notify Decade within 72 hours.
Changes and contact
Material changes to this policy are agreed with Decade first, and the effective date above is updated. Questions: qbprivacy@decadeeyewear.com.