Privacy Policy

Public website enquiries

When you submit a website enquiry, H.M.F. Limited receives the contact details, organization, requirement and optional project information you provide. These records are used to assess your request, communicate with you and manage follow-up. The form records your consent and a submission reference in the corporate enquiry register.

The register uses Supabase database infrastructure and restricts access through application permissions. Website hosting is provided through Vercel. Do not include sensitive financial, medical or identity records in an initial public enquiry. Use the contact route below to ask about access, correction, consent withdrawal or deletion of your enquiry information.

This policy describes how H.M.F. Limited uses information within its Executive OS, including information retrieved from QuickBooks Online through Intuit OAuth 2.0. The Executive OS is used for internal financial management, reporting, reconciliation, governance and decision support.

The QuickBooks integration is read-only. The Executive OS does not use the integration to create, edit, delete, void or post accounting transactions in QuickBooks Online.

Information accessed

When an authorized H.M.F. Limited user connects QuickBooks Online, the Executive OS may retrieve accounting and reporting information needed for its financial-management functions. This can include company information, chart of accounts, customers, vendors, invoices, bills, payments, purchases, sales receipts and financial reports such as the Profit and Loss, Balance Sheet, Cash Flow, Trial Balance, aged receivables and aged payables.

How information is used

QuickBooks information is used only for authorized Executive OS functions such as CFO reporting, management accounts, reconciliation, financial analysis, audit support, cash-flow oversight and management decision support. H.M.F. Limited does not sell QuickBooks data or make it available to third parties for unrelated purposes.

Security

OAuth credentials are handled server-side. QuickBooks access and refresh tokens are encrypted before storage, application secrets are not exposed in the browser, and production traffic is protected with HTTPS. Access to the QuickBooks connection is restricted to authorized H.M.F. Limited users according to Executive OS access controls.

Retention and deletion

While a QuickBooks connection is active, synchronized copies of QuickBooks reports and entities may be retained in the Executive OS solely to provide the functions described in this policy. When an authorized user disconnects QuickBooks, the Executive OS revokes the Intuit OAuth authorization, deletes the stored OAuth credentials, and deletes the synchronized QuickBooks report and entity payload caches associated with that connection.

Minimal technical and audit metadata may be retained where necessary to preserve system security, operational traceability and the Executive OS audit trail. Retained audit metadata does not permit continued access to the disconnected QuickBooks company. The underlying accounting records remain in QuickBooks Online and are governed by Intuit and the account owner.

Service providers

The Executive OS relies on infrastructure and database service providers to host and operate the application. Such providers process information only as necessary to provide those technical services and are not authorized by H.M.F. Limited to use QuickBooks data for unrelated purposes.

Questions or requests

Questions about this policy, access, correction or deletion requests can be submitted through the H.M.F. Limited contact page.