Privacy Policy
1. Who We Are
SCC Link is operated by Shipping Company Core. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use SCC Link.
2. Information We Collect
- Account information. Your normalized email address and a salted, hashed password when you register. We never store plaintext passwords.
- Session information. A server-side session record (stored as a hash) while you are signed in.
- Operational telemetry. Tenant-reported sync outcomes limited to company code, action type, success or error status, optional error context, and timestamps.
SCC Link does not persist QuickBooks access tokens, refresh tokens, ledger records, invoices, payments, or customer accounting data.
3. How We Use Information
We use the information we collect to: (a) operate, secure, and improve the service; (b) authenticate and authorize dashboard access; (c) monitor pipeline health and detect faults; and (d) send operational alerts and summaries to authorized administrators.
4. Legal Basis
We process the limited information above on the basis of the performance of a contract (providing the service to you) and our legitimate interests in securing and operating the service.
5. Sharing and Disclosure
We do not sell your personal information. We may disclose information: (a) to service providers that operate the platform (for example, Cloudflare and Intuit); (b) as required by law or legal process; or (c) to protect the rights, property, or safety of Shipping Company Core, our users, or the public.
6. Data Retention
Account and telemetry records are retained for as long as needed to operate the service and meet operational or legal obligations. Verification and session tokens are short-lived and single-use where applicable.
7. Security
We use industry-standard safeguards, including salted password hashing, transport encryption, signed and replay-protected token delivery, and account lockout, to protect the information we process. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact the SCC Link operator using the details below.
9. Cookies
We use a single strictly-necessary session cookie to keep you signed in. We do not use advertising or tracking cookies.
10. Third-Party Links
The service links to or integrates with third-party services, including Intuit QuickBooks Online. Their privacy practices are governed by their own policies, which we encourage you to review.
11. Children
SCC Link is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
12. Changes
We may update this Privacy Policy from time to time. We will update the "last updated" date above when we make changes.
13. Contact
Privacy questions may be directed to the SCC Link operator at email@tommygooden.com.