Privacy Policy

WiseCost, Inc. (“WiseCost,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the WiseCost platform and services (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

a. Information you provide directly:

• Account registration data: name, email address, password
• Company information: company name, payroll settings
• Employee data: names, email addresses, compensation information
• Time tracking data: hours worked, project assignments, descriptions
• Financial data: labor cost allocations, journal entries

b. Data imported from QuickBooks Online:

• Chart of accounts, employees, classes, customers, and items
• Historical journal entries

c. Automatically collected data:

• Log data: IP address, browser type, pages visited, timestamps
• Usage data: features used, actions performed within the Service
• Cookies and similar tracking technologies for session management

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process and synchronize data with QuickBooks Online on your behalf
• Generate journal entries and labor distribution reports
• Send transactional notifications (timesheet approvals, reminders)
• Maintain audit trails for DCAA compliance purposes
• Improve and develop new features
• Respond to support requests and communications
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• Service providers: Third-party vendors who assist in operating the Service (hosting, email delivery, analytics), bound by confidentiality obligations
• Intuit / QuickBooks Online: Data is transmitted to and from QBO as necessary to provide the integration features you have authorized
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations

4. Data Storage and Security

Your data is stored on Amazon Web Services (AWS) infrastructure located in the United States (us-east-1 region). We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) and at rest
• Access controls and role-based permissions
• Audit logging of all data access and modifications
• Regular security reviews

We retain your data for the duration of your subscription and for 30 days after termination, after which it is permanently deleted. Audit logs may be retained longer as required by applicable law.

5. QuickBooks Online OAuth

When you connect your QuickBooks Online account, WiseCost uses OAuth 2.0 to obtain access tokens. We store these tokens securely to maintain your integration. You may revoke WiseCost's access to your QBO account at any time through your Intuit account settings or through the Company Settings page in WiseCost.

6. Government Contractor Data

We understand that many of our users are Government Contractors subject to specific data handling requirements. WiseCost maintains all data in the United States and does not transfer data internationally. We support DCAA audit trail requirements through immutable logging of all relevant transactions.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)

To exercise these rights, contact us at contact@usewisecost.com.

8. Cookies

WiseCost uses cookies and similar technologies for session management and authentication. We do not use cookies for advertising or cross-site tracking. You may configure your browser to reject cookies, but this may affect Service functionality.

9. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through the Service at least 30 days before they take effect. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related questions or to exercise your rights: