Privacy Policy — Critical Worker

Effective date: April 20, 2026

This Privacy Policy describes how Critical Marketing, LLC ("Critical Marketing," "we," "us," or "our") handles data when the Critical Worker application (the "Application") accesses third-party services on our behalf, including Intuit QuickBooks Online.

1. Scope

The Application is a private, internal tool operated by Critical Marketing for its own business operations. It is not offered to, installed by, or used by third parties. This policy covers data that Critical Worker accesses, processes, or stores as part of those internal operations.

2. What Data We Access

Through authorized integrations, Critical Worker may access:

• QuickBooks Online accounting data of Critical Marketing, including customer records, invoices, payments, line items, products and services, and reports;
• OAuth 2.0 access tokens and refresh tokens issued by Intuit for the Critical Marketing company account;
• Associated metadata such as company identifiers (Realm IDs) and timestamps of API requests.

The Application does not access data belonging to entities other than Critical Marketing. It does not use, copy, transmit, or retain data for any party other than Critical Marketing.

3. How We Use the Data

Data accessed through the Application is used solely for Critical Marketing's own business operations, including:

• Creating, editing, and reviewing invoices and customer records;
• Reporting on financial performance;
• Automating routine accounting tasks that Critical Marketing staff would otherwise perform manually.

We do not sell, rent, lease, trade, or disclose accessed data to any third party, and we do not use it for advertising or marketing purposes unrelated to Critical Marketing's own business.

4. How We Protect the Data

We protect accessed data with the following practices:

• All API communication with Intuit QuickBooks Online uses TLS encryption in transit;
• OAuth credentials and tokens are stored locally on authorized machines only, with operating-system file permissions restricted to the owning user (mode 0600) where supported;
• Credentials are never transmitted outside of authorized API requests to Intuit or committed to version control;
• Access to the machines that run the Application is limited to authorized personnel only;
• Refresh tokens are rotated automatically by the Intuit OAuth 2.0 flow on expiration.

5. Data Retention

The Application retains only the credentials and tokens necessary to continue authorized integrations. No separate persistent copy of QuickBooks Online data is maintained by the Application beyond what is cached in memory for the duration of a single operation, except where Critical Marketing's own accounting records require retention under applicable law.

6. Third-Party Services

Use of Intuit QuickBooks Online is subject to Intuit's own privacy policy. Critical Marketing has no control over Intuit's handling of data.

7. Children

The Application is not intended for and does not knowingly process the personal data of children under 13.

8. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will reflect the date of the most recent change.

9. Contact

Questions regarding this Privacy Policy may be directed to: [email protected]