Privacy policy

Effective September 23, 2026

DeskBridge is a product of SC Technology, Irvine, California ("we", "us"). This policy explains what data DeskBridge handles when you install it, what we do with it, and what we don't. Questions go to [email protected].

The short version

• We handle your data only to sync QuickBooks Desktop into your HubSpot portal, and to support you.
• We don't sell it, rent it, use it for advertising, or use it to train AI models.
• We read from QuickBooks. We never write to it.
• Ask us to delete your data and we will, within 30 days.

1. Our role

For the business records that pass through DeskBridge (your customers, contacts, items and invoices), you are the controller and we are your service provider (processor). We process them only on your instructions, which are the sync settings you choose. For the account information we need to run the service and bill you, we're the controller.

2. What we collect

From HubSpot, when you install

• Your portal ID and domain, and OAuth access and refresh tokens. The tokens are encrypted at rest (AES-GCM).
• The email address of the user who installed the app, which we use for sign-in links and alerts.
• The HubSpot record IDs of the objects DeskBridge creates or matches, plus the values it last wrote, so it only sends changes. To avoid duplicates, it also looks up existing companies by name, contacts by email, and records it created earlier.

From QuickBooks Desktop, through the agent

• The company name and company file path, and the QuickBooks and agent versions.
• The records you choose to sync: customers and jobs (name, phone, billing address, email, type, terms, balances, active status), items (name, description, price, SKU fields, type), invoices (numbers, dates, amounts, tax, balance, paid status, memo) and invoice lines. We keep a working copy of these records to tell what changed between syncs.

Operational data

• Sync logs, error messages, agent check-ins and alert history for your install.
• Standard web server and network logs (IP address, time, requested URL) kept by our hosting and Cloudflare.
• Billing details are collected and held by Stripe. We see your name, email, plan and payment status, never your full card number.

Website analytics

This site uses a self-hosted Umami instance to count page views. It sets no cookies and doesn't build profiles. The only cookies we set are a signed session cookie when you sign in and a short-lived security cookie during HubSpot authorization.

3. How we use it

• To run the sync you configured and show its status to you.
• To detect failures and alert you and us by email and internal notifications.
• To answer your support requests. With your permission, this includes looking at your install's records and logs.
• To bill you and meet our legal obligations.

4. Who else processes it

Your data is stored on servers SC Technology operates in the United States. We'll update this list before we add a new processor that handles your business records.

5. Retention and deletion

• We keep your install's data while your subscription or trial is active.
• After you uninstall or cancel, we delete your install's synced records, tokens and logs within 30 days, or sooner if you ask. Database backups age out within a further 14 days.
• Records already written to HubSpot belong to you and stay in your portal. DeskBridge doesn't remove them.
• We keep billing records as long as tax law requires.

6. Security

Connections to DeskBridge use HTTPS. HubSpot tokens are encrypted at rest, and agent tokens are stored only as hashes on our side and encrypted with Windows DPAPI on your computer. Each install's data is kept separate in every database query. The agent opens no inbound ports. Access to production systems is limited to SC Technology staff who need it. If a breach affects your data, we'll tell you without undue delay.

7. Your rights

You can ask us to access, correct, export or delete the data we hold about you or your install. California residents have rights under the CCPA/CPRA, including the right to know and to delete, and we don't sell or share personal information as those laws define it. If you're a HubSpot user whose records we process on your company's behalf, send requests through your company or contact us and we'll coordinate with them. Email [email protected].

8. Children

DeskBridge is a business tool and isn't directed at children under 16.

9. Changes

If we change this policy in a way that matters, we'll update the date above and email active customers before the change takes effect.

Contact

SC Technology · Irvine, California · [email protected]