GlassWing Intelligence Privacy Policy

GLASSWING EXECUTIVE PARTNERS, LLC | GLASSWING INTELLIGENCE

Effective date: October 27, 2026.

GlassWing Intelligence is the business intelligence application administered by GlassWing Executive Partners, LLC (“GlassWing”). This Policy describes the information handling practices for the Application. The QuickBooks Online production connection remains disabled pending verification of production controls and client authorization. This Policy supplements the written Executive Partnership or working agreement between GlassWing and the applicable client.

1. Who this Policy covers

This Policy covers information processed through the GlassWing Intelligence Application, including its dashboard and supported integrations. It does not replace a privacy notice or terms provided by QuickBooks Online, HubSpot, WooCommerce, or another connected provider. It supplements the written Executive Partnership or working agreement between GlassWing Executive Partners, LLC and the applicable client. If a client agreement gives more specific instructions for client information, that agreement controls for the client relationship.

2. Information we may process

Depending on the features the client enables and the permissions it grants, GlassWing may process the following categories:

  • User and account information. Names, work email addresses, account identifiers, organization and role assignments, authentication and access events, and support communications.

  • Client and workspace information. Organization name, account or workspace settings, integration connection status, configuration choices, and records needed to administer client access.

  • QuickBooks Online information. If and when a client authorizes the production connector, the Application may request accounting data needed for agreed dashboards. Depending on the selected features and API requests, this may include company and account identifiers, chart-of-accounts and balance information, financial summaries, transaction or invoice records, and related customer or vendor details.

  • HubSpot information. When enabled for the client, the Application may process CRM records needed for reporting, such as companies, contacts, deals, pipeline stages, and selected operational properties such as production status or owner.

  • WooCommerce information. When enabled for the client, the Application may process e-commerce records used for reporting, such as orders, order status, products, SKUs, fulfillment information, and related customer or shipping details contained in the authorized records.

  • Usage and support records. Dates and times of sign-in, connection and disconnection events, requests to the Application, error or security logs, and messages submitted for support, to the extent generated by the configured service.

GlassWing does not ask users to provide their QuickBooks, HubSpot, or WooCommerce account passwords to the Application. QuickBooks uses Intuit Accounting OAuth authorization initiated by an authorized client representative. HubSpot and WooCommerce connections use API credentials configured for the applicable integration rather than end-user OAuth consent. The exact fields retrieved depend on the client’s enabled features, the configured API credentials or OAuth permissions, and the connector’s requests. The live QuickBooks scope and field list must be verified before activation.

3. How information is used

GlassWing processes information to provide client dashboards and reporting; connect, validate, and monitor client-authorized data sources; administer user access; support the Application; investigate errors and protect service integrity; communicate with the client about the service; and comply with legal obligations. Client information is not used to sell advertising or to build unrelated profiles.

GlassWing may calculate summaries or visualizations from source information. Such outputs are provided for the client’s internal business reporting and executive decision-making and should be checked against the source system before external or high-impact use.

4. Authorization and access controls

A client administrator must authorize a third-party connection and confirm that the client has the rights needed to share the selected information. Users should review the permissions shown by the provider before granting consent and may revoke that consent through the provider or by contacting GlassWing.

The Application uses the user sign-in and organization-access model configured for GlassWing Intelligence. Client users should receive access only to the client workspace and information they are authorized to use. Server-side integration credentials and data access must remain restricted to the configured service and authorized operators. The QuickBooks token-storage configuration, revocation behavior, live disconnection behavior, and tenant-isolation checks have not been verified in live production operation and must be verified before the connection is enabled.

QuickBooks Online’s Accounting OAuth authorization is not inherently read-only. GlassWing intends to use the QuickBooks connection only for read operations required to provide agreed reporting and does not intend to write or change QuickBooks records or initiate payments or transfers. That behavior must be confirmed in code and tested before production use.

5. How information is shared

GlassWing may disclose information only as reasonably needed to provide or support the Application, at the client’s direction, with the client’s authorized users, to the relevant third-party provider to establish or maintain an integration, or as required to comply with law, enforce an agreement, or protect rights and security.

The Application currently uses Vercel for application hosting and Supabase for configured authentication and database services. These providers may process information as service providers under their applicable terms and privacy notices. QuickBooks Online, HubSpot, and WooCommerce separately process information under their own terms and privacy notices when the client uses those systems. GlassWing does not control those providers’ independent data practices.

GlassWing does not sell client financial, CRM, or order information. This Policy does not authorize public disclosure of Client Data or its use for advertising.

6. Security

GlassWing is preparing the Application for client-authorized integrations using authenticated users and organization-based permissions. The QuickBooks connection’s token-storage configuration and production access controls have not been verified in live operation. This Policy does not claim that the QuickBooks connection is storing live tokens or that any particular security certification, encryption configuration, audit standard, or data-residency location is in effect.

No method of electronic storage or transmission is completely secure. Before a live connection is enabled, GlassWing must verify token protection and rotation, user and tenant access restrictions, logging, revocation and deletion behavior, and the configured infrastructure settings. Clients should not connect a production QuickBooks account until GlassWing confirms that the connection is ready and the client separately authorizes it.

7. Retention, disconnection, and deletion

GlassWing intends to retain information only as long as reasonably needed to provide the agreed service, maintain security and service records, meet contractual obligations, and comply with law. The precise retention periods for imported or cached source data, application logs, backups, and revoked integration tokens have not yet been approved and must be documented before production launch.

A client may revoke QuickBooks authorization through Intuit’s account authorization controls. The Application’s QuickBooks disconnection flow has not been verified in live operation; GlassWing does not represent that app-side disconnection has been production-validated. Until live behavior is verified, the client should revoke authorization directly through Intuit and contact GlassWing to confirm that further retrieval has stopped. Disconnection does not necessarily delete information already shown in a report, exported by the client, held in backups, or required for legal or security purposes. The client may request return or deletion through its designated GlassWing administrator or contact. GlassWing will handle such requests under the Client Agreement and applicable law; the operational deletion timeframe and backup cycle remain subject to confirmation before production launch.

8. Client and user requests

The client’s designated administrator should submit requests concerning access, correction, export, or deletion of client information to GlassWing through the existing client relationship or by contacting GlassWing Executive Partners, LLC at (336) 303-0238. Individual users may contact their client administrator first, since the client generally controls the information it connects and the user’s access. GlassWing will coordinate with the client and respond as required by the applicable agreement and law.

For a request concerning information held by QuickBooks Online, HubSpot, WooCommerce, or another provider in that provider’s own service, the requester may also need to contact that provider directly. A client’s disconnection of GlassWing does not close or delete the underlying third-party account.

9. Children and public access

The Application is intended for business users and is not designed for children. Clients must not authorize a child to use the Application or submit children’s information through it.

10. Changes and contact

GlassWing may update this Policy when the Application, connected providers, legal requirements, or data practices change. A revised “Last updated” date will identify the current version. If a material change affects how client information is collected or used, GlassWing will provide notice through the Application or to the client’s administrator when appropriate.

Questions or privacy requests may be directed to GlassWing Executive Partners, LLC at (336) 303-0238.