Privacy Policy

Wonderfly Ops Dashboard — Privacy Policy
Effective date: October 1, 2026

This Privacy Policy explains how Wonderfly Events LLC ("Wonderfly," "we," "us") handles information in the Wonderfly Ops Dashboard (the "App"), an internal application used only by Wonderfly and its authorized staff. It focuses on the information the App accesses from QuickBooks Online.

1. Who uses the App. The App is not available to the public. Users are Wonderfly's owner, general managers and other staff Wonderfly authorizes. We do not knowingly collect information from children.

2. Information we access from QuickBooks Online. When a Wonderfly administrator connects the App to Wonderfly's own QuickBooks Online company, the App may access:

• Company identifiers needed to make the connection (such as the QuickBooks company ID).
• Customer records for Wonderfly's preferred vendors, used to prepare invoices.
• Invoices the App creates, and their status.
• Accounting report data — transaction dates, amounts, accounts, classes, payee names and memos — used to compare spending against Wonderfly's internal budgets, and income totals by class.
• Products and services needed to build invoice lines.

3. Authorization tokens. Intuit issues access and refresh tokens when the connection is authorized. We store them in a restricted database table that only the App's server can read. They are never shown in the App or sent to anyone other than Intuit.

4. How we use the information. Only to run Wonderfly's own operations:

• Preparing monthly vendor invoices in QuickBooks Online. These are created unsent; a Wonderfly team member reviews and sends them from QuickBooks.
• Showing Wonderfly managers how actual expenses compare with planned budgets for each venue and brand.
• Keeping the connection working (refreshing tokens, checking connection health).

We do not use QuickBooks data for advertising, profiling, or training artificial intelligence models, and we do not sell it.

5. Who can see it. Within Wonderfly, access is limited by role: budget and expense views are visible to Wonderfly's owner and general managers; billing and connection settings are limited to the owner. Outside Wonderfly, information is processed only by the service providers that host and run the App — Vercel (application hosting) and Supabase (database) — under their own security and confidentiality terms. We may disclose information if required by law.

6. Security. Data is encrypted in transit (HTTPS/TLS). Database access is restricted with row-level security, and connection tokens are readable only by the App's server. Access to the App requires an individual login.

7. Retention and disconnection. We keep synced QuickBooks data for as long as it is needed for Wonderfly's budgeting, billing and record-keeping. Wonderfly can disconnect the App at any time from within QuickBooks Online. When disconnected, the App stops accessing QuickBooks data, and stored connection tokens are deleted within 30 days. Previously synced data may be deleted on request.

8. Changes. We may update this policy. The current version, with its effective date, will always be posted at this page.

9. Contact. Questions or requests: Wonderfly Events LLC, 4811 Benson Ave, Arbutus, MD 21227 — jon@wonderflygames.com