Privacy Policy
This Privacy Policy describes how Glass House Technologies, LLC ("GHT", "we", "us", or "our") collects, uses, stores, and shares information when you use OnlyTechs and its integrations, including the integration with Intuit's QuickBooks Online.
Request account or data deletion
To close your OnlyTechs account and request deletion of its associated personal data, email connor.glass@ght.network from your account email address and say that you want to close your OnlyTechs account. You can also request deletion of specific data without closing your account; identify the records you want deleted. We may need to verify your identity.
We delete or anonymize Your Content within 30 days of account closure, subject to the legal, security, and business-record retention exceptions described in Section 3. Records that an organization must retain for accounting or legal obligations may be retained for that purpose. Sections 3 and 6 explain retention and your choices.
1. Information we collect
Account information
When an Owner or Admin creates an OnlyTechs account for you, we collect your name, work email address, role, and any phone number or profile information they choose to add. We also collect authentication metadata (session tokens, last sign-in timestamps) needed to operate the Service securely.
Operational data you submit
OnlyTechs stores the operational data you and your colleagues enter into the platform: customers, jobs, schedules, technician rosters, chat messages, uploads, bug reports, and similar content ("Your Content"). We process Your Content solely to provide the Service.
Depending on the features you choose to use, this includes contact names, addresses, phone numbers and email addresses; calendar event details and attendees; invoices and payment-history entries; job notes, checklists, files and documents; photos and videos; and messages you send or receive. File and email searches send your search terms to the Service so it can return results. These feature-specific submissions are optional.
Location, media, and notifications
With your device permission, job check-in and shift features can send approximate or precise location to OnlyTechs and store it with the relevant field record. Photo, video, and file features send the content you choose to submit. Company-line calling and voicemail use Twilio; answered calls and voicemail may be recorded and transcribed, and OnlyTechs stores recording references and transcripts for authorized communications workflows. Microphone access is requested for supported calling features. Optional push notifications use a device or browser subscription identifier, delivery endpoint, and related technical information. You can decline optional device permissions and use features that do not require them.
Connected Gmail and SMS
If you connect Gmail, OnlyTechs processes the authorization tokens and the email content, recipients, attachments, and search terms needed to provide the mail features you use, including reading and sending mail. Company-line SMS features process phone numbers and message content through Twilio. Service providers process this information on our behalf; messages are delivered to the recipients you choose. Connecting a mailbox and using messaging features are optional. The SMS consent and opt-out protections below also apply.
Data from QuickBooks Online
When you connect a QuickBooks Online company to OnlyTechs, we receive an OAuth access token and refresh token from Intuit and use them to call QuickBooks APIs on your behalf. With those tokens, OnlyTechs reads the following data:
- Company information (name, country, fiscal year start)
- Profit-and-loss and balance-sheet summary figures used on our finance dashboard
- Lists of invoices, payments, customers, bills, vendors, estimates, and items, limited to the fields needed to render summaries
- Webhook notifications announcing that one of the entities above changed
OnlyTechs requests the standard com.intuit.quickbooks.accounting OAuth scope.
OnlyTechs does not request payroll scopes. Authorized users can also
choose actions such as creating an invoice in QuickBooks; those actions send the
necessary invoice information to Intuit. Connecting QuickBooks is optional, and you
can disconnect it as described below. OnlyTechs does not collect payment-card or bank
account numbers through its invoice-payment form; payment links open the payment
provider's own service.
Technical data
Our servers automatically record technical information about your interactions with the Service, such as IP address, browser type, request paths, response codes, and timestamps, for security, debugging, and abuse-prevention purposes.
2. How we use information
- To operate, maintain, and improve the Service;
- To authenticate you and authorize your actions;
- To display live QuickBooks Online data inside the OnlyTechs dashboard;
- To respond to your support requests and bug reports;
- To detect, investigate, and prevent fraud or abuse;
- To comply with legal obligations.
We do not sell your personal information. We do not use QuickBooks data for advertising, and we do not share QuickBooks data with third parties except as described in Section 4.
Optional OnlyTechs text messaging (SMS)
Glass House Technologies operates two separate optional SMS programs in OnlyTechs: user-requested phone-verification and account-recovery codes, and recurring call and voicemail alerts. These programs do not send marketing messages. The GHT Privacy Policy and GHT SMS terms apply to these messages; the disclosures below describe how those protections apply in OnlyTechs.
We collect the mobile number you choose to use, the SMS program you select, the exact disclosure and its version, your consent or opt-out choice, the source of that choice, and its timestamp. We use this information to send the messages you requested, document your consent, and honor opt-outs. Providing a phone number, having a staff account, or consenting to one SMS program does not enroll you in another program.
For verification and recovery codes, read the disclosure and actively select the unchecked SMS agreement in Settings > Password recovery or Notifications > My preferences. Each code is sent only when requested. For recurring call and voicemail alerts, first verify your saved number, then select the separate unchecked alert agreement and choose Enable SMS alerts. The public consent walkthrough shows both disclosures and screenshots of the actual controls. Changing a phone number clears its verification.
Message frequency varies with your requests and, for enabled alerts, call activity. Message and data rates may apply. Reply STOP to opt out or HELP for help. SMS is optional and consent is not a condition of purchase or use of OnlyTechs. Email recovery and in-app notifications remain available without SMS. For help, email admin@ght.network or call 833-342-3743.
We do not share, sell, rent, or provide your mobile phone number or SMS opt-in and consent data to third parties or affiliates for marketing or promotional purposes. Messaging providers, including Twilio, process only the information needed to deliver requested messages and honor opt-out requests. SMS consent is not transferred to another sender or used to enroll you in another program. These SMS protections apply to every data-sharing category described in this policy.
We retain consent and opt-out records as needed to document your choices, prevent messages after an opt-out, and meet applicable recordkeeping obligations. Contact admin@ght.network to request access, correction, or deletion, subject to those obligations.
3. How long we keep data
- QuickBooks access and refresh tokens are stored only while your connection is active. When you disconnect via OnlyTechs or revoke access in your QuickBooks Online "My Apps" page, OnlyTechs deletes the tokens immediately and any cached financial snapshot is dropped on the next request.
- Cached financial snapshots are held in server memory for up to 60 seconds at a time and refreshed on a 5-minute background interval (or sooner when a webhook fires). They are not written to disk except as a single last-known-good copy used to avoid serving stale "seed" data during transient API errors.
- Your Content (the operational data you enter in OnlyTechs) is retained for as long as your account is active. On account closure or written request, we will delete or anonymize Your Content within 30 days, subject to legitimate-business and legal-retention exceptions.
- Server logs are retained for up to 90 days.
4. How we share information
We share information only as follows:
- Service providers that host or operate parts of the infrastructure (e.g. our cloud-server provider) — bound by contract to use the data only to provide services to us;
- Intuit, when we call QuickBooks Online APIs to read your data, as authorized by your OAuth consent;
- Legal authorities, when required to do so by a valid legal process or to protect the safety or rights of GHT, our users, or the public;
- A successor entity, in connection with a merger, acquisition, or sale of all or substantially all of GHT's assets, in which case the successor will be bound by this Privacy Policy or a successor policy at least as protective.
5. Security
We use reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit (TLS), restricted access to production systems, and HMAC-SHA256 signature verification on inbound QuickBooks webhooks. No system can be guaranteed 100% secure. If we discover a breach affecting your data, we will notify affected users without undue delay.
6. Your choices and rights
- Disconnect QuickBooks at any time via our disconnect page, the OnlyTechs Integrations panel, or your QuickBooks Online "My Apps" page. Disconnecting immediately revokes our tokens and stops further QBO data collection.
- Access, correct, or delete your personal information by emailing connor.glass@ght.network. Depending on your jurisdiction (e.g. California, EU), you may have additional rights to portability, restriction of processing, or to lodge a complaint with a supervisory authority.
- Close your account by emailing the address above. We will delete or anonymize Your Content within 30 days, subject to the exceptions in Section 3.
7. Children
OnlyTechs is not directed to children under 16 and we do not knowingly collect data from them. If you believe a child has provided us personal information, contact us and we will delete it.
8. International users
OnlyTechs is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country.
9. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. For material changes, we will provide additional notice (for example, in-app or by email) before the changes take effect.
10. Contact
Privacy questions or requests:
Glass House Technologies, LLC
109 Whaley Ave NE, Hanceville, AL 35077
connor.glass@ght.network ·
833-342-3743