PRIVACY POLICY
Privacy Policy
Updated: October 28, 2026.
1. Who is responsible
Ebenezerpro operates Ebenezerpro (“we” or “us”). This policy describes information handled through the website, business-management application, administrative and worker tools, and optional QuickBooks Online integration. For questions or privacy requests, contact [email protected].
2. Information handled by the application
- Customers and business contacts: names, company names, telephone numbers, email addresses, billing or job addresses, customer sources and referrals, and business notes entered by authorized users or received through connected sources.
- Jobs and workforce administration: job descriptions, schedules, assignments, status updates, prices, costs, payments recorded for work, documents and photos, and worker contact, address, specialty, and account information.
- Invoices and catalog records: item descriptions, service or product identifiers, quantities, prices, tax indicators, invoice numbers and dates, customer details, totals, balances, and payment-link information.
- QuickBooks connection: the authorized company identifier, relevant customer/item/invoice identifiers, application credentials, and OAuth access and refresh tokens used for the connection.
- Technical and security information: account identifiers, password hashes, session or access tokens, activity records, IP addresses and request information recorded by hosting and network services.
The billing integration selects the commercial fields needed for its functions. It does not import Social Security numbers or full payment-card details from QuickBooks. Do not place these details, card security codes, passwords, or bank-account credentials in free-text fields or uploaded documents. Those fields are for relevant business information.
3. Where information comes from
Information may be supplied by customers, authorized administrators and workers, imported business contacts, or connected lead and accounting services. QuickBooks data is accessed after the company connection has been authorized. Visiting an external communication or payment link also involves the provider of that service.
4. How information is used
We use information to respond to service requests, organize customers and work, assign jobs, document work, manage business records, prepare invoices, reconcile invoice balances, provide exports, operate authorized integrations, maintain backups, control access, troubleshoot issues, and investigate misuse. The application may use stored job and worker addresses to estimate proximity for assignments.
5. QuickBooks and hosted payments
Authorized administrators can import QuickBooks customers and supported products or services, link them to local contacts, and send customer, catalog, and invoice records to the connected company. The application reads invoice data to update amounts and payment status. It stores selected business fields and references rather than complete accounting API responses.
Intuit sign-in occurs on Intuit's authorization pages. OAuth tokens and the application's Client Secret are stored encrypted in the application database. The encryption key is stored separately from that database and outside the public web directory.
When an invoice offers online payment, its link opens a page hosted by Intuit. The payment provider handles the payment information entered on that page under its own privacy policy. This integration does not provide a local card-entry form or store full card numbers or card security codes.
6. Access and service providers
Authorized staff and workers can access information according to their application roles and assigned responsibilities. Administrators can manage broader business records; workers use the functions and job information made available to them.
Information is processed by infrastructure and service providers as needed to operate the functions used. Current services include Contabo for server hosting, Cloudflare for website traffic protection and delivery, and Intuit for an authorized QuickBooks connection and hosted payment pages. When the proximity feature is used, relevant address text may be sent to the U.S. Census Bureau geocoding service to obtain coordinates. WhatsApp or email providers process messages sent through their services. Lead sources may provide contact information when their integration is used.
Providers' processing locations and practices depend on their services and configurations; information may be processed outside your state or country. Providers' own privacy notices also apply to the services you use directly. We may disclose information when required by applicable law or when necessary to investigate misuse and protect legitimate rights.
7. Cookies and sessions
The application uses session cookies to keep authorized users signed in. Infrastructure providers may also use cookies or similar mechanisms for security. Blocking necessary cookies can prevent sign-in or other functions. External services reached through links have their own cookie practices.
8. Retention, disconnection, and deletion
Business records are retained to support ongoing work, accounting, support, security, and applicable recordkeeping obligations. Records are not automatically deleted simply because an invoice is paid, a user signs out, or QuickBooks is disconnected. Backup copies and security logs may also contain information from earlier periods.
Disconnecting QuickBooks revokes the connection through Intuit and removes the local authorization tokens after successful revocation. Previously imported or created business records remain. Contact us to request a review, correction, export, or deletion of information. We assess requests in light of identity, authority, recordkeeping requirements, other people's information, and applicable law. Deleting a local record does not itself delete a record held independently in QuickBooks or by another provider. Backup copies are not edited immediately when an individual record changes.
9. Safeguards and your responsibilities
The application uses measures such as HTTPS, account and role checks, password hashing, encrypted integration secrets, and server access controls. No system can guarantee complete security. Protect your credentials, use only authorized accounts, and promptly report suspected unauthorized access. This policy does not claim that all stored business data is encrypted or that the service is immune to intrusion.
10. Requests and policy changes
Send privacy requests to [email protected], describing the records and your relationship to the business. Do not email full card numbers, Social Security numbers, or account passwords. We may ask for information reasonably needed to verify your identity or authority. We handle requests and any applicable rights according to the laws that apply to the request.
This application is intended for business operations and authorized business users. If you believe information has been submitted without appropriate authorization, contact us. Updates to this policy will be published with a new effective date; additional notice or consent will be provided when required.
11. SMS & MMS privacy
Ebenezerpro provides customer messaging for Ebenezer Faife Painting Services, Corp at (786) 882-0439. When you text us or otherwise expressly agree to messaging, we process your mobile number, message content, any photos or other MMS attachments you choose to send, timestamps, delivery information, and consent and opt-out records. We use this information to respond to your inquiry, prepare estimates, coordinate the service you request, provide support, and honor messaging preferences.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile information and SMS/MMS consent are not shared with third parties or affiliates for their own marketing or promotional purposes. Twilio, mobile carriers, and contracted infrastructure providers may process the information necessary to deliver and support our messaging service on our behalf. Consent is not sold or transferred to other businesses.
Authorized staff can review your messages and photos in Ebenezerpro. If staff use our AI-assisted estimate feature with selected messages or photos, that selected content is processed by OpenAI to help draft the requested estimate. Please send only information relevant to your project; do not send payment-card details, account passwords, identity documents, or other sensitive information in messages or images.
We retain messages and relevant attachments as needed to handle the requested service, maintain business records, resolve disputes, and meet applicable obligations. Consent and opt-out records are retained as necessary to document permission and honor your preferences. Requests to access, correct, or delete messaging information can be sent to [email protected]; applicable recordkeeping obligations and backup retention may limit immediate deletion.
Message frequency varies with your inquiry and requested service. Message and data rates may apply. Reply STOP to opt out of SMS/MMS messages or HELP for help, or contact [email protected]. Opting out stops further service messages through this program, apart from a final opt-out confirmation, but does not automatically erase existing service records. Consent to messaging is optional and is not a condition of purchase. Visiting our website alone does not enroll you in messaging.