Privacy Policy

1. Scope of This Policy

This Privacy Policy applies solely to myNDC and covers information collected through your use of the Software.
It does not apply to any other products, services, or websites operated by ND Consulting LLC, or to the independent privacy
practices of any third-party services you may connect through the Software.

myNDC is intended for use only by current ND Consulting employees and authorized consultants.
It is not directed at, or intended for use by, external clients or the general public.

2. Information We Collect

We collect the following categories of information in connection with your use of the Software:

• Account and identity information.
  Your name, company email address, and job title or role, provided when your account is created or updated.
• Credentials.
  Login credentials (username and password) used to authenticate your access to the Software.
  Passwords are stored in hashed form and are never stored or transmitted in plain text.
• Connected account data.
  If you connect a third-party account (such as QuickBooks), we may receive and process information
  from that account as described in Section 4.
• Usage and log data.
  Technical information generated by your use of the Software, including IP address, browser or client type,
  pages or features accessed, and timestamps. This information is used for security, troubleshooting,
  and system administration.

We do not collect sensitive personal information such as Social Security numbers,
government-issued identification, financial account numbers, or health information through myNDC.

3. How We Use Information

We use the information we collect for the following purposes:

• To create, maintain, and authenticate your user account;
• To operate, provide, and improve the Software and its features;
• To facilitate integrations with connected third-party services you authorize;
• To monitor for unauthorized access, security incidents, or misuse;
• To communicate with you about your account, updates to the Software, or changes to this Policy; and
• To comply with applicable legal obligations.

We do not sell your personal information, and we do not use it for advertising or marketing to third parties.

4. QuickBooks / Intuit Integration

myNDC may connect to QuickBooks® and other Intuit Inc. products to support time-entry,
billing, and operational workflows. When you authorize this integration:

• We access only the QuickBooks data necessary to perform the functions you have enabled within the Software.
• Data retrieved from QuickBooks is processed on your behalf and is not used for any purpose
  beyond operating the Software.
• We do not store QuickBooks credentials. Authentication is handled through Intuit’s OAuth flow,
  and only access tokens are retained, subject to Intuit’s token expiration policies.
• Your use of QuickBooks remains governed by Intuit’s own Terms of Service and Privacy Policy.
  ND Consulting LLC is not responsible for Intuit’s data practices.
• You may revoke myNDC’s access to your QuickBooks account at any time through your Intuit account settings.
  Revoking access will disable related features within the Software.

5. Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for their own commercial purposes.
We may disclose information in the following limited circumstances:

• Service providers.
  We may engage trusted vendors (such as hosting or infrastructure providers)
  who process information on our behalf under appropriate confidentiality obligations.
  These vendors are permitted to use your information only as directed by ND Consulting LLC.
• Third-party integrations.
  When you authorize a connection to a third-party service (such as QuickBooks),
  information is shared with that service as necessary to provide the integration you requested.
• Legal requirements.
  We may disclose information if required to do so by law, court order, or governmental authority,
  or to protect the rights, property, or safety of ND Consulting LLC, its personnel, or others.
• Business transfers.
  In the event of a merger, acquisition, or sale of all or substantially all of our assets,
  user information may be transferred as part of that transaction.
  We will provide notice of any such change.

Note for legal review:
If myNDC integrates with additional third-party services beyond QuickBooks in the future,
this section should be updated to identify those services and describe the data shared with each.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Software.
If your access to myNDC is terminated — whether by you or by the Company — we will retain your information
for a reasonable period as necessary to comply with legal obligations, resolve disputes,
and enforce our agreements, after which it will be deleted or anonymized.

Usage and log data may be retained for a shorter period in accordance with our standard
system administration practices.

7. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect
the information we hold against unauthorized access, disclosure, alteration, or destruction.
These measures include password hashing, access controls, and encrypted data transmission.

No method of transmission over the internet or electronic storage is completely secure.
While we strive to protect your information, we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials
and for notifying us promptly if you suspect unauthorized access to your account.

8. Your Rights and Choices

As an authorized user of myNDC, you may:

• Access or correct your information.
  You may review and update your account information within the Software,
  or by contacting us at the address below.
• Request deletion.
  You may request deletion of your account and associated personal information
  by contacting us. We will honor such requests subject to any legal obligations
  to retain certain records.
• Revoke third-party access.
  You may disconnect any third-party integration (such as QuickBooks)
  through your account settings or through the applicable third-party platform.

To exercise any of these rights, please contact us using the information in Section 11.

9. Children’s Privacy

myNDC is an internal business tool intended solely for use by ND Consulting employees
and authorized consultants. It is not directed at individuals under the age of 13,
and we do not knowingly collect personal information from children.
If we become aware that a child under 13 has provided us with personal information,
we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices,
the Software, or applicable law.
When we make material changes, we will update the
“Last Updated” date at the top of this page and,
where appropriate, notify affected users directly.
Your continued use of the Software after any changes take effect
constitutes your acceptance of the revised Policy.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices,
please contact us at:

ND Consulting, LLC
8014 Cumming Highway, 403-125
Canton, GA 30115

Email: info@ndconsultingllc.com

Website: www.ndconsultingllc.com