Privacy policy

DJD Renovations Ltd., of Calgary, Alberta, Canada, operates DJD Jobs and is responsible for the information in it. Write to admin@djdreno.ca with any question about this policy.

DJD Jobs is a private app. Only staff of DJD Renovations Ltd. use it, and it is connected to one QuickBooks Online company: the company of DJD Renovations Ltd.. It is not offered to other businesses and it is not sold.

The app holds the records a decking and railing business runs on:

• Jobs. The job number, the site address, the builder, the measured area, the material, the price, and the state of the work.
• Mail. Messages sent to the company mailboxes, and the documents attached to them. The app reads this mail to draft jobs. It never sends mail and never replies.
• Documents. Onsite sheets, plans, purchase orders, safety paperwork and photographs, filed against a job number.
• People named in the work. A builder contact, a site contact, or an installer may be named on a document the app files. The app does not build a profile of any of them and does not use these names for anything except finding the job again.
• Staff. The passcode that opens the app, and the name shown on the desk. There are no personal accounts and no passwords.

The app holds no payment card, no bank account, no social insurance number, and no health information. Nobody is tracked across other websites and there is no advertising anywhere in it.

A person at DJD Renovations Ltd. approves the connection on Intuit's own page. The app asks for one permission — accounting — and uses it for one purpose: to raise an invoice for finished work.

What the app reads from QuickBooks Online. Only enough to match a job to records that already exist:

• The company name, to show which company is connected.
• A customer's name and its identifier, to address the invoice.
• A product or service name and its identifier, to fill the invoice lines.
• A tax code name and its identifier.
• An invoice number, to check whether that invoice already exists before creating anything.

The app does not read customer lists, contact details, balances, payments, bank records, payroll, or any report.

What the app writes to QuickBooks Online. One invoice, when a person presses the button for one job. Nothing else is ever created. A missing customer or a missing product stops the invoice and shows the reason; the app never creates a customer or a product to get around it. The app never sends an invoice to anybody and never deletes anything.

What the app keeps from QuickBooks Online.The identifier of the connected company, the two access tokens in encrypted form, and — on each job — the identifier of the invoice raised for it and the date. No other QuickBooks data is copied into the app's database.

• Every page and every request travels over HTTPS. The app is behind a passcode, checked before any page is drawn.
• The QuickBooks tokens are encrypted before they reach the database, with AES-256-GCM. The key is held as a platform setting and is never in the code. Without the key the app refuses to store a token rather than store it in plain text.
• A token, an authorisation code and the client secret never appear in a web address, in a log, or in an error message shown to a person.
• Connecting and disconnecting answer only a form submission from inside the app, so no link on another website can start or end a connection. The return from Intuit is checked against a one-use value that the app issued, and that value is spent on first use.
• Every table in the database has row-level security enabled, so the database's public web address serves nothing.

The app is built on services that hold data on DJD Renovations Ltd.'s behalf. Each one is used for the purpose named and for nothing else. None of them is permitted to sell the information, and DJD Renovations Ltd. sells it to nobody.

• Vercel — runs the app.
• Supabase — holds the database.
• Anthropic — reads a document when the app cannot read it by position alone, and returns the fields it found. Anthropic does not use this material to train its models.
• Intuit — QuickBooks Online, as described above.
• Dropbox — files the documents where the office already keeps them.
• Google — writes the status tab of the company spreadsheet.

These services run outside Canada, including in the United States, so the information may be held there. Information is disclosed to nobody else, except where the law requires it.

A builder or an installer may be sent a read-only link to one job. The link carries a token, the page shows nothing without it, and it opens no other part of the app. A link can be withdrawn at any time.

Job records, mail and documents are business records and are kept while they are useful to the business and for as long as the law requires. The QuickBooks tokens are kept only while the connection is in place, and are deleted the moment somebody disconnects.

A person at DJD Renovations Ltd. can end the connection in either place. Inside DJD Jobs, open Invoicing → QuickBooks and press Disconnect. In QuickBooks Online, open Apps → My Apps, find DJD Jobs and disconnect it there.

When it is ended inside DJD Jobs, the app hands the token back to Intuit and deletes the stored connection. After that the app can do nothing at all in QuickBooks until somebody approves a new connection. Invoices already raised stay in QuickBooks Online, because they are the company's accounting records.

Anybody named in a document the app holds may ask what is held about them, ask for a correction, or ask for it to be removed. Write to admin@djdreno.ca. DJD Renovations Ltd. answers within 30 days. Records that must be kept for accounting or legal reasons cannot be removed, and the answer will say so.

A change is published on this page with a new date at the top. A change that affects what QuickBooks data is read or written is made in the same release as the change to the app itself.