The HTCS Investor Dashboard is a private, invitation-only web application run by Hot Tub Cover Spot. It shows the business's owner and its capital partner how the business is performing and what each is owed under their agreement. This policy explains what information the dashboard holds and how it is used.
Information we collect
- Account details for people who have been invited: name, email address, time zone, and a password, which is stored only as a one-way hash.
- Hot Tub Cover Spot's own accounting data, read from its QuickBooks Online company once an administrator connects it: the company name, the chart of accounts, monthly Profit and Loss figures, and General Ledger entries for the loan and interest accounts.
- Figures entered by administrators, such as deal terms, distributions, month-close notes and loan details.
- Technical information our servers record when the site is used, such as IP address, browser and the pages requested, kept for security and troubleshooting.
How we use it
Only to run the dashboard: to sign people in, and to calculate and display the business's monthly performance, profit waterfall, distributions and loan balance to invited users. We do not use any of it for advertising, profiling or any other purpose, and we never sell or rent it.
QuickBooks data
- The dashboard connects to QuickBooks only after an administrator signs in with Intuit and approves it.
- Access is read-only. The dashboard never creates, changes or deletes anything in QuickBooks.
- The access tokens Intuit issues are stored encrypted.
- An administrator can disconnect at any time from the dashboard's Settings page, which revokes the access with Intuit, or from QuickBooks itself. Figures already imported stay in the dashboard unless we are asked to delete them.
Who can see it
Only the people Hot Tub Cover Spot invites. The data is hosted on servers we rent in the United States (managed through Hatchbox on DigitalOcean), and those providers process it only to host the dashboard. We disclose information to others only if the law requires it.
Cookies
The dashboard sets only the cookies it needs to keep you signed in and to protect its forms. It uses no analytics, advertising or tracking cookies.
Security and retention
All traffic is encrypted with HTTPS, passwords are hashed, QuickBooks tokens are encrypted, and every account is invitation-only. We keep information for as long as the partnership's reporting needs it. Daily database backups are kept for five days.
Your choices
To see, correct or delete the information we hold about you, or to have an account closed, email justin@communicco.com.
Changes
If the dashboard starts using information in a new way, or reading from other sources, we will update this page and the date at the top before that happens.
Contact
Hot Tub Cover Spot, justin@communicco.com