WIPforge Privacy Policy
Last updated: October 25, 2026
Effective date: October 25, 2026
1. Introduction
This Privacy Policy describes how WIPforge, operated by Archon Interactive LLC ("WIPforge," "we," "us"), collects, uses, shares, and protects information in connection with our websites and cloud-based services (the "Services"). WIPforge provides job-cost and work-in-progress reporting for businesses using QuickBooks Online. The Services are directed to business customers in the United States. If you use the Services on behalf of an organization, "you" refers to you and that organization.
2. Information we collect
Account information. When you sign in with Intuit (OpenID Connect), we receive your name and email address from Intuit. We do not receive or store your Intuit password. We also collect company, workspace, and account-administration information you provide.
QuickBooks Online data (customer-directed). When you connect a QuickBooks Online company, you authorize us to access accounting data through Intuit's API under the accounting scope you grant, which may include transactions (invoices, bills, purchases, estimates, journal entries, and time activities), customers, jobs or projects, vendors, accounts, company preferences, connection metadata, and related identifiers. We use this data solely to generate the reports and features you request. Although Intuit may present the connection as an accounting-data authorization rather than a separate read-only scope, WIPforge’s implementation uses the connection only to retrieve data and does not create, update, or delete records in your QuickBooks Online company. OAuth access and refresh tokens and related connection identifiers are encrypted at rest and used only to maintain the connection you authorize. Disconnecting a company revokes our access tokens with Intuit; you can disconnect at any time in the app or via Intuit.
Payment information. Payments are processed by Stripe, Inc.; we do not store full card or bank account numbers. We receive subscription status, plan, and billing metadata.
Usage, device, and diagnostic information. IP address, browser type, pages/features used, and error/diagnostic data (via our error-monitoring provider), used to operate, secure, and improve the Services.
Communications. Support requests and correspondence.
WIP schedule review submissions (prospective customers). If you request a free review of your existing WIP schedule through our website, we collect your email address, the accounting or ERP system you identify, and the document you upload, which may include project names, customer names, dollar amounts, and related financial information. We use these submission materials to prepare and return your review and for related follow-up; you may opt out of marketing email at any time and may request deletion of your submission at any time. We delete the uploaded document, form record, and other identifying submission details when the review is returned and, in any event, no later than seven (7) days after upload. After deletion, we do not retain the uploaded document or information from the submission that identifies you, your customers, or your projects, but general, de-identified observations about WIP-schedule practices may inform improvements to our review criteria and materials.
3. How we use information
We use information to provide and operate the Services (including report generation, exports, and multi-company management); administer billing and accounts; secure the Services, prevent fraud, and maintain audit logs of sensitive operations; improve the Services using aggregated or de-identified data; send service communications (including renewal reminders, security notices, and trial and billing lifecycle emails); respond to support requests; and comply with legal obligations. We do not use your QuickBooks Online data to train machine-learning models, and we do not make automated decisions with legal or similarly significant effects about you.
4. How we share information
We do not sell personal information. We share information only with: service providers (subprocessors) that host, process, secure, analyze, and support the Services — currently Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (transactional email), Sentry (error monitoring), Upstash (rate limiting), and PostHog (product analytics) — each bound to use information only to provide services to us; Intuit, as directed by you through the integration you authorize; professional advisors and authorities where required by law or to protect rights and safety; and a successor entity in connection with a merger, reorganization, or sale of assets, with notice to you. We may update the service-provider list in this policy from time to time as our providers change.
5. Your QuickBooks data
You own your accounting data. WIPforge uses the QuickBooks Online connection only to retrieve data needed to provide the Services and does not create, update, or delete records in your QuickBooks Online company. We use QuickBooks Online data only to provide the Services, retain report outputs you generate, and delete data per Section 7. Revoking access through the app or Intuit's connected-apps settings stops all further access immediately, although data already processed by WIPforge remains subject to the retention and deletion periods in this policy.
6. Security
We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit (TLS) and at rest; OAuth token encryption with key-rotation support; workspace-scoped data isolation enforced at the database layer; append-only audit logging of sensitive operations; rate limiting; security headers; error monitoring with sensitive-data scrubbing; and access controls limiting personal information to personnel and service providers with a business need. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
This Privacy Policy is not intended to serve as a data processing agreement or security addendum. Business customers that need additional privacy or security terms for their use of the Services may contact us; any such terms apply only if separately agreed in writing.
7. Data retention
| Data | Retention |
|---|---|
| Account + workspace data | Life of the account |
| QBO-derived report data and report outputs | Life of the account; regenerable from your QBO file |
| After cancellation | 90-day read-only/export window, then deletion in the ordinary course |
| On deletion request | Deleted, except records we must retain for billing, tax, security, audit, legal, or compliance purposes |
| WIP review submissions (prospects) | Deleted when the review is returned and, in any event, no later than seven (7) days after upload, including the uploaded document, form record, and identifying submission details. Deletion on request at any time; de-identified learnings may be retained. |
| Audit logs | Retained for twelve (12) months after creation, unless longer retention is reasonably necessary for security, legal, compliance, or dispute-resolution purposes |
8. Your rights and choices
You may access, correct, export, or delete your information via the app or by contacting us. You may opt out of non-essential emails. California residents: WIPforge has not determined that it is subject to the CCPA/CPRA, and this section should not be read as a concession that those laws apply. To the extent California privacy law applies, we will honor applicable rights to know, delete, correct, and non-discrimination. We do not sell personal information or share it for cross-context behavioral advertising.
9. US-directed services
The Services are operated from the United States and are directed to business customers in the United States. We do not offer the Services to, or intentionally collect information from, individuals located in the European Economic Area, the United Kingdom, or other jurisdictions where local privacy laws would require materially different disclosures or controls. If you access the Services from outside the United States, you understand that your information will be processed in the United States.
10. Cookies
The app uses essential cookies and similar technologies for authentication, security, and service operation. The marketing site may use privacy-respecting analytics to understand site usage and improve our content. We do not use cookies or analytics for targeted advertising or cross-context behavioral advertising. If we later add advertising or marketing tags, we will update this policy and implement any required consent management.
11. Children
The Services are not directed to children under 18 and we do not knowingly collect their information.
12. Changes; contact
We will post changes with an updated effective date and notify account holders of material changes. Contact us at privacy@wipforge.com or support@wipforge.com, or by mail at Archon Interactive LLC d/b/a WIPforge, 2201 Old Court Road, Baltimore, Maryland 21208.