This Privacy Policy explains how FullBoat collects, uses, shares, and protects information when you use our service. FullBoat is a hosted application that helps organizations track contract value, invoices, change orders, and cash. We act as a processor of the data your organization puts into the service, and as a controller of the limited account information we need to operate.
Account information. When your organization creates users, we store names, email addresses, roles, and authentication data (passwords are stored only as salted hashes, never in plain text).
Content you provide. Contracts, statements of work, invoices, change orders, uploaded documents, and the figures derived from them. This is your Customer Data and it stays within your isolated workspace.
QuickBooks data. If you connect QuickBooks Online, we read invoice and payment information and invoice documents from your QuickBooks company, described in its own section below.
Usage and technical data. Basic logs such as IP address, browser type, timestamps, and actions taken, used to operate, secure, and audit the service.
We use information to provide and maintain the service, authenticate users, keep an audit trail, respond to support requests, secure the service and prevent abuse, and comply with legal obligations. We do not sell your information, and we do not use your Customer Data to train external artificial intelligence models. Where the service uses AI to read an uploaded document, the content is sent to our AI provider only to return the extracted result for that request, and is not used by that provider to train its models.
When you connect QuickBooks Online, FullBoat accesses your QuickBooks data on a read only basis to bring invoices, payment status, and invoice documents into your workspace for review and tracking. We never write to, change, or delete anything in QuickBooks. Access tokens are stored encrypted and are used only to sync data you have asked us to pull. We keep QuickBooks derived data only as long as needed to provide the service to you. You can disconnect QuickBooks at any time in Settings, which stops syncing and removes the stored tokens. Our access and use of information received from Intuit APIs follows the Intuit Developer terms and the limits described here.
We share information only with service providers that help us run FullBoat, under agreements that require them to protect it and use it only for that purpose. These include our cloud hosting and application platform, our managed database, our file storage, our transactional email provider, our error monitoring provider, and our AI document reading provider. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer, with notice where required. We do not sell personal information.
This section covers full-boat.com, our public website, not the FullBoat application.
What we measure. When you visit, we note how you first arrived (for example the campaign tags in a link, a Google ad click identifier, the referring site, and the first page you saw) and keep it in your browser's local storage for up to 90 days. If you send us a form, such as the leak check or the contact form, that information is sent with it so we know which page or campaign brought you. We use Vercel Web Analytics to count page views; it does not use cookies.
Google Ads. We advertise on Google and use Google's conversion measurement to learn whether an ad led someone to book a conversation or send us a form. When this is active, Google may set cookies or read an ad click identifier in your browser for that purpose, under Google's own privacy policy. We do not build remarketing or advertising audiences from our visitors, and we ask Google not to use this data to personalize ads.
Your choices. If your browser sends a Global Privacy Control signal, we do not load Google's advertising measurement at all. You can also clear your browser storage or block cookies at any time, and the site works the same. We do not sell personal information, and we do not share it for cross context behavioral advertising.
Data is processed and stored on infrastructure located in the United States. We retain Customer Data for as long as your organization uses the service and for a reasonable period afterward, then delete or anonymize it, unless a longer period is required by law. You may request an export or deletion of your Customer Data as described below.
We protect information with encryption in transit and at rest for sensitive fields, strict per organization data isolation, role based access controls, login protections, and a detailed audit log. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit access to those who need it to operate the service.
Depending on your location, you may have rights to access, correct, export, or delete personal information we hold about you. Because much of the data in FullBoat belongs to your organization, we will usually direct such requests to your organization's administrator, or act on their instruction. To make a request, contact us at the address below.
FullBoat is a business service and is not directed to children. We do not knowingly collect personal information from anyone under sixteen.
We may update this policy from time to time. If we make material changes we will take reasonable steps to notify you and will update the effective date above.
Questions or requests about privacy can be sent to mike@full-boat.com.