Back to Home
Legal

PRIVACY POLICY

RynoCharge Application

Last Updated: August 18, 2026

1. INTRODUCTION

Frick Fractional, LLC ("Company," "we," "us," or "our"), a South Carolina limited liability company, operates the RynoCharge application ("App"). This Privacy Policy describes how we collect, use, store, share, and protect your personal information and data when you use the App.

RynoCharge is a third-party application and is not developed, endorsed, or affiliated with Intuit Inc. or HCSS. This Privacy Policy applies solely to data processed by the RynoCharge application.

By using the App, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, do not use the App.

2. INFORMATION WE COLLECT

2.1 Account and Authentication Data

The App uses Google Single Sign-On ("Google SSO") as the sole method of authentication. When you sign in, we receive the following from Google:

  • Name — Your display name from your Google account
  • Email address — Your Google account email address
  • Google account identifier — A unique identifier used to associate your Google account with your App account

We do not collect, store, or have access to your Google account password. Authentication is handled entirely by Google's OAuth 2.0 system.

2.2 Third-Party Integration Data

To provide the App's billing functionality, we collect and process data from integrated third-party services upon your authorization:

QuickBooks Online (Intuit):

  • OAuth 2.0 access tokens and refresh tokens (encrypted — see Section 5)
  • Realm ID (QBO company identifier)
  • Invoice data (invoice numbers, line items, amounts, customer/project information)
  • Products & Services data (item names, codes, account assignments)
  • Chart of Accounts data (account names and types, cached locally)

HCSS HeavyJob:

  • OAuth 2.0 access tokens (encrypted — see Section 5)
  • Job data (job numbers, job names, job IDs)
  • Pay item data (codes, descriptions, contract quantities, unit prices, linked cost codes)
  • Cost code progress data (completed quantities per cost code)
  • Change order data (affected pay items, quantity changes)

2.3 App-Generated Data

Through your use of the App, the following data is created and stored:

  • Billing records (draft and posted invoices, quantities billed, retainage amounts, driver snapshots)
  • Job configurations (retainage percentages, billing settings)
  • Product/Service format templates and billing preferences
  • User role and permission assignments

2.4 Activity and Diagnostic Logs

We collect activity logs for error debugging and system integrity purposes. These logs include:

  • User ID — Identifies who performed the action
  • Action performed — The specific operation (e.g., "created invoice," "refreshed data," "authorized QBO")
  • Timestamp — When the action occurred
  • Object affected — The entity acted upon (e.g., job ID, invoice ID, pay item ID)
  • QBO/HCSS metadata — Related identifiers and response data from third-party APIs relevant to the action (e.g., QBO invoice ID returned on creation, HCSS job ID queried)
  • Result — Whether the action succeeded or failed, including error details for failed actions

We do not collect: Device information, IP addresses, browser fingerprints, geolocation data, or usage analytics beyond the activity logs described above.

3. HOW WE USE YOUR INFORMATION

We use the information collected for the following purposes:

| Purpose | Data Used | |---|---| | Authenticate your identity | Google SSO data | | Provide core App functionality | QBO data, HeavyJob data, billing records, job configurations | | Create and manage QBO invoices | Pay item data, cost code progress, billing records, QBO tokens | | Calculate progress billing quantities | HeavyJob pay items, cost code progress, driver factors | | Reconcile billing records with QBO | QBO invoice data, internal billing records | | Enforce role-based access control | User ID, role assignments, job visibility permissions | | Debug errors and maintain system integrity | Activity and diagnostic logs | | Communicate with you about the App | Email address |

We do not use your data for:

  • Advertising or marketing to third parties
  • Profiling or automated decision-making unrelated to App functionality
  • Selling, renting, or leasing to any third party
  • Any purpose beyond the functional use of the App

4. HOW WE SHARE YOUR INFORMATION

4.1 Third-Party Services (Functional)

We transmit data to the following third-party services solely as necessary for the App's core functionality:

  • Intuit (QuickBooks Online): Invoice data, line items, customer/project references, and Product/Service information are sent to QBO to create and manage invoices via Intuit's API.
  • HCSS (HeavyJob): Authentication credentials are used to query job, pay item, cost code, and change order data from HeavyJob's API. No data is written back to HeavyJob.
  • Google: Authentication requests are processed through Google's SSO service. We do not send App data to Google beyond what is required for authentication.

4.2 Infrastructure Provider

App data is stored on Base44 servers, our application hosting platform. Base44 is SOC 2 Type II certified and ISO 27001 certified, with servers located in the United States.

4.3 We Do Not Share Data With Third Parties

Beyond the functional integrations described in Sections 4.1 and 4.2, we do not:

  • Provide any third party with access to your QuickBooks data via external API calls or any other means
  • Share, sell, rent, or disclose your personal information or business data to third parties for their own purposes
  • Use third-party analytics, advertising, or tracking services

4.4 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud.

5. DATA SECURITY

5.1 Encryption

  • OAuth tokens (QBO refresh tokens, HCSS tokens) are encrypted using AES-256 symmetric encryption before storage. Encryption keys are stored separately from token data in the platform's secure environment variable system.
  • Data in transit is protected via TLS encryption (HTTPS) for all communications between the App, your browser, and third-party APIs.
  • Data at rest is stored on Base44's SOC 2 Type II and ISO 27001 certified infrastructure with platform-level encryption.

5.2 Access Controls

  • Role-based access control (RBAC) restricts App functionality based on assigned user roles
  • Server-side permission validation is enforced on every action — UI-level restrictions are not relied upon as sole security measures
  • Job-level visibility controls restrict which billing data each user can access

5.3 Session Management

  • Sessions have defined expiration policies
  • Expired sessions require re-authentication via Google SSO
  • Session tokens are invalidated on logout

5.4 Credential Handling

  • We do not store your Google password — authentication is delegated entirely to Google SSO
  • OAuth tokens are the sole credentials stored by the App, and they are encrypted as described in Section 5.1
  • No user credentials or QuickBooks data are written to application logs

5.5 Infrastructure Security

The App is hosted on Base44, which maintains:

  • SOC 2 Type II certification
  • ISO 27001 certification
  • U.S.-based data centers
  • Platform-managed security patching and infrastructure maintenance

6. DATA RETENTION

6.1 Active Use

While you are an active user of the App, we retain all data described in Section 2 as necessary to provide the App's functionality.

6.2 OAuth Tokens

  • QBO refresh tokens expire after 100 days of inactivity per Intuit's policy. Expired tokens are replaced upon re-authorization.
  • HCSS access tokens expire per HCSS's token lifecycle policy and are refreshed automatically.
  • Upon account termination, all stored OAuth tokens are invalidated and deleted.

6.3 Billing Records and App Data

Billing records, job configurations, and historical invoice data are retained for as long as the account is active. Upon account termination or upon written request, this data will be deleted. See Section 8 for deletion request procedures.

6.4 Activity Logs

Diagnostic and activity logs are retained for a reasonable period necessary for debugging and system maintenance purposes. Logs are periodically purged in accordance with our internal data management practices.

7. CHILDREN'S PRIVACY

The App is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

8. YOUR PRIVACY RIGHTS

8.1 All Users

Regardless of your location, you have the right to:

  • Access — Request a copy of the personal information we hold about you
  • Correction — Request correction of inaccurate personal information
  • Deletion — Request deletion of your personal information and App data
  • Portability — Request your data in a structured, commonly used format

8.2 Colorado Privacy Act (CPA)

If you are a Colorado resident, you have additional rights under the Colorado Privacy Act, including:

  • The right to opt out of the processing of personal data for targeted advertising (we do not engage in targeted advertising)
  • The right to opt out of the sale of personal data (we do not sell personal data)
  • The right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling)
  • The right to appeal a denial of a privacy request

8.3 California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose
  • Request deletion of your personal information
  • Non-discrimination for exercising your privacy rights
  • We do not sell personal information as defined by the CCPA
  • We do not share personal information for cross-context behavioral advertising

8.4 Exercising Your Rights

To exercise any of the rights described above, contact us at:

Email: legal@frickfractional.com

We will respond to verifiable requests within forty-five (45) days. We may request additional information to verify your identity before processing your request.

9. THIRD-PARTY LINKS AND SERVICES

The App integrates with QuickBooks Online, HCSS HeavyJob, and Google SSO. Each of these services has its own privacy policy:

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

  • We will update the "Last Updated" date at the top of this policy
  • We will notify you via email or through a notice within the App
  • Continued use of the App after notification constitutes acceptance of the updated Privacy Policy

11. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Frick Fractional, LLC 1813 Towne St Johns Island, SC 29455 Email: legal@frickfractional.com

By using RynoCharge, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and storage of your information as described herein.