Privacy Policy

Effective date: May 24, 2026 · Last updated: May 30, 2026

This Privacy Policy describes how 4x8 Construction, Inc. (“4x8”, “we”, “our”) collects, uses, and protects information when you use the 4x8 Command Center web application (the “App”) at https://4x8-command-center.netlify.app.

The App is an internal-use construction project management tool used by 4x8 Construction and its authorized contractors. It is not a public-facing consumer service.

1. Information We Collect

• Account information: email address, name, role (admin / client), invite history.
• Project data: estimates, invoices, budgets, vendor invoices, schedules, project documents (PDFs, plans), and related records that you (or your team) create or upload.
• Connected service tokens: when you authorize the App to connect to a third-party service (Google Gmail, QuickBooks Online, or Plaid), we store the access tokens necessary to fetch your data on your behalf. We never see or store your password or online-banking credentials for those services.
• Financial account data (via Plaid): when you link a bank or credit-card account, we retrieve account details and transaction history (dates, amounts, descriptions, balances) for the accounts you connect. See Section 4.
• Usage data: standard server logs (timestamps, IP addresses, page paths) generated by our hosting providers (Netlify, Supabase). We do not use third-party analytics or advertising trackers.

2. How We Use Information

• To operate the App and provide its core features (project management, invoice generation, accounting integration).
• To synchronize data between you and your authorized team members (admins, clients shared on a project).
• To write invoice and payment copies into your connected QuickBooks Online file when you trigger a push action.
• To pull supplier invoice emails from your connected Gmail mailboxes into your private Email Review queue.

3. QuickBooks Online Data

When you connect QuickBooks Online, the App receives an OAuth access token from Intuit. We use this token only to:

• Write copies of your Command Center invoices into your QB file (one-way, push only).
• Write payment records into your QB file when you mark an invoice paid.
• Create a single “Command Center” customer and “Construction Services” item on first push, used for all subsequent pushes.

We do not read your existing QuickBooks customers, invoices, reports, or accounting data. We do not share your QuickBooks data with anyone outside 4x8 Construction, Inc.

4. Plaid and Bank Account Data

We use Plaid Inc. (“Plaid”) to securely connect the bank and credit-card accounts owned by 4x8 Construction to the App, so that transaction and balance information can be imported for bookkeeping, classification, and reconciliation.

• Bank authentication happens inside Plaid’s secure Link interface. We never see or store your online-banking username or password.
• Plaid provides the App with an access token, which is stored encrypted on our server and is never exposed to the browser. We use it only to retrieve account details and transaction history for the accounts you have connected.
• The accounts connected via Plaid are accounts owned by 4x8 Construction. The App is an internal-use tool; we do not connect, process, or store the financial accounts or data of any third party.
• You can disconnect a linked institution at any time from the App’s Settings, which invalidates and removes the associated Plaid access token.

Your use of Plaid to connect accounts is also governed by Plaid’s End User Privacy Policy.

5. Data Storage and Security

• All data is stored on Supabase (cloud database + storage) and Netlify (static hosting). Both providers maintain SOC 2 compliance.
• OAuth tokens are stored encrypted at rest and never exposed to the browser.
• Access to your account’s data is gated by Supabase Row Level Security (RLS) policies that scope every read and write to your user ID.
• The App is admin-only and invite-only. There is no public sign-up.

6. Data Sharing

We do not sell, rent, or share your data with third parties for marketing or advertising purposes. We share data only:

• With service providers strictly necessary to operate the App (Supabase, Netlify, Intuit QuickBooks, Google Gmail, Plaid).
• When required by law (e.g. valid court order).

7. Your Rights

You can request export or deletion of your account’s data at any time by emailing vince@4x8.com. Disconnecting QuickBooks, Gmail, or a Plaid-linked bank account from the App revokes our access to those services immediately.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the App’s home screen.

9. Contact

4x8 Construction, Inc.
16631 Martincoit Rd
Poway, CA 92064
Email: vince@4x8.com