Volundai
Privacy Policy
Ops Portal — Client Instance · v1.0
Public Document — Governed by the Client Engagement Letter
This Privacy Policy explains how Volundai handles data in connection with the operations portal application built for Roofers Home & Decor Pte Ltd ("the Client"), including its integration with the Client's QuickBooks Online account. It is published to meet Intuit's requirement that applications connecting to QuickBooks Online disclose their data practices publicly.
This is a private application built for one client's internal use. It is not offered to the public, and this policy does not apply to any other Volundai service or engagement.
1. What Data This Application Processes
The Application reads, and — where separately agreed with the Client — writes, accounting and operational data via the QuickBooks Online API, strictly as needed to operate the features the Client has requested. This may include invoice records, customer records, and financial reports. The Application does not collect data about members of the public, and does not use cookies, analytics, or advertising technologies, because it is not a public-facing marketing site.
2. How This Data Is Used
Data is used solely to operate the Application for the Client's own business purposes — for example, generating invoices from job records, or displaying financial reports. Data is not used for any purpose beyond delivering the Application's functionality to the Client.
3. Legal Basis and the Personal Data Protection Act (PDPA)
Where personal data is processed as part of this engagement, Volundai may act as a data intermediary on the Client's behalf under Singapore's Personal Data Protection Act. Authorisation to access the Client's QuickBooks Online data is granted directly by the Client through QuickBooks' own login and consent screen; Volundai does not independently collect or store the Client's QuickBooks credentials.
4. Where Data Is Stored and Who Can Access It
Data is stored only in named, access-controlled locations agreed with the Client at the start of the engagement. Access is limited to the Volundai partners working on this engagement and the Client's own authorised staff. No third party is given access without the Client's knowledge.
5. Data Retention and Deletion
Copies of Client data used for build and testing purposes are deleted within 30 days of the engagement's close, except records reasonably required for legal, accounting, or dispute-resolution purposes. The Client's own production data, held in the Client's own QuickBooks Online account, is unaffected by this policy — Volundai does not control or alter data in the Client's own systems.
6. What We Do Not Do
Volundai does not sell, rent, or share Client data with third parties for marketing or advertising purposes. Volundai does not use Client data to serve targeted advertising, and does not paste Client data into general-purpose consumer AI tools outside the agreed project tooling without the Client's explicit agreement.
7. Changes to This Policy
If this policy changes materially, the Client will be notified directly, in addition to the update being posted here.
8. Contact
Questions about this policy, including requests relating to data access or deletion, can be directed to aistratconsulting@gmail.com.