Privacy Policy

Command (app.douglasharvey.com) is a private, internal business-management platform operated by Douglas Harvey on behalf of his business entities, including HMG Operations (The UPS Store locations in West Monroe and Ruston, Louisiana) and Black Pine LLC (“we”, “us”). This policy describes what information the platform handles and how it is used.

1. Information we collect

• Account information — name, email address, and role for the small number of authorized staff users, used for sign-in and access control.
• Constituent submissions — if you report an issue through the public portal, we collect what you provide (name, contact details, address, description, photos) in order to route and resolve the issue.
• Connected business data — financial reports retrieved from QuickBooks Online and task data retrieved from Asana, for the businesses we operate.

2. QuickBooks Online data

With the account owner’s authorization, the platform connects to QuickBooks Online through Intuit’s API to retrieve accounting reports (such as profit and loss summaries) for our own companies. This data is used solely to display revenue and financial reporting to authorized users of those businesses. OAuth tokens are stored in our database (hosted by Supabase, encrypted at rest), are never exposed to end users or third parties, and access to them is restricted by role. A connection can be revoked at any time from the QuickBooks account’s connected-apps settings or by contacting us; upon revocation the stored tokens cease to function and are removed.

3. How we use information

Information is used only to operate the platform: authenticating users, displaying business reporting to authorized staff, and managing constituent service requests. We do not sell personal information, use it for advertising, or share it with third parties except the service providers that host the platform (Vercel for hosting, Supabase for database and authentication) and as required by law.

4. Retention and deletion

Account records are kept while a user remains authorized. Constituent issue records are kept as needed to provide service and maintain records of the work. You may request a copy or deletion of your personal information by contacting us at the address below.

5. Security

Access to the platform requires authentication, and data access is restricted by role-based permissions enforced at both the application and database layers. Data is encrypted in transit (HTTPS) and at rest by our database provider.

6. Changes and contact

We may update this policy from time to time; the current version will always be available at this page. For questions or requests, contact doug@douglasharvey.com.