Privacy Policy

This Privacy Policy describes how Supply Chain Warehouses ("SCW," "we," "us") collects, uses, stores, and protects information within our internal warehouse-operations and human-resources applications (the "Application"), including data obtained through our authorized integration with Intuit QuickBooks.

1. Information We Collect

To administer payroll, staffing, and warehouse operations, the Application maintains employee and operational records, which may include:

• Identity & contact: name, home address, phone number, personal email, date of birth, emergency contact.
• Employment: employee ID, hire date, position, department, employment type and status, separation information, pay type and rate.
• Sensitive identifiers: Social Security Number and bank/direct-deposit details, where provided by the employee for payroll purposes.
• Operational data: time worked, scheduling, attendance, and related warehouse records.

Where you authorize a connection to Intuit QuickBooks, we access a read-only subset of employee records (such as name, contact details, address, hire/termination dates, employment status, and pay rate) to keep our internal records current. We do not request more data than is necessary for these purposes.

2. How We Use Information

Information is used solely for legitimate internal business purposes, including payroll and HR administration, staffing and scheduling, attendance and labor reporting, maintaining accurate employee files, and complying with applicable legal and tax obligations. We do not sell personal information, and we do not use it for advertising.

3. QuickBooks / Intuit Integration

Our integration uses Intuit's authorized OAuth process; access is granted only by an SCW administrator and can be revoked at any time from within QuickBooks or by disconnecting the integration. We access QuickBooks data strictly to synchronize employee records into our internal system and handle that data in accordance with this Policy and Intuit's applicable terms.

4. SCW QR Stamper (Chrome Extension)

The SCW QR Stamper browser extension collects no data at all. It is a separate tool from the Application described above, and none of the records in Section 1 are accessible to it.

The extension runs only on app.skuit.com. When a document is open there, it adds an option to place a QR code on the page. To do that it reads the document file from the Amazon S3 address that Skuit itself provides, draws the QR code, and saves the result to the user's own computer.

• Everything happens in the browser. The document is never uploaded anywhere, and SCW operates no server that receives it.
• Nothing is stored. The extension writes no cookies and keeps no browsing history, analytics or usage data.
• Nothing is transmitted. The only network request it makes is to fetch the document from the address the Skuit page supplied.
• It is inert elsewhere. On any site other than Skuit the extension does nothing.

5. How We Store & Protect Information

• Encryption in transit: all data is transmitted over HTTPS/TLS.
• Encryption at rest: data is stored in a managed Postgres database (Supabase) that encrypts data at rest.
• Additional field-level encryption: the most sensitive fields — Social Security Numbers and bank account/routing numbers — are additionally encrypted with AES-256, using a key held separately from the database.
• Access controls: employee records are protected by database row-level security and are accessible only to authenticated HR/administrator accounts. Application access is further restricted behind a private gateway and invite-only authentication.
• Least privilege: access is limited to personnel with a business need.

6. Service Providers (Sub-processors)

We rely on a small number of reputable providers to operate the Application: Intuit (QuickBooks data source), Supabase (database and authentication), and Netlify (application hosting). These providers process data only to provide their services to us.

7. Data Retention

We retain employee and operational records for as long as needed for the purposes described above and to meet legal, tax, and recordkeeping requirements, after which records are deleted or archived.

8. Your Choices & Rights

Employees may request to review or correct the personal information we hold about them by contacting us at the address below. Because this is an internal HR system, requests are handled through SCW's HR department.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the effective date above.

10. Contact Us

Questions about this Policy or your information can be directed to:
Supply Chain Warehouses — HR
cory@supplychainwarehouses.com