Mandrex VA Services
Privacy Policy
Mandrex Job Recon ("the app") is operated by Mandrex VA Services ("Mandrex", "we"). It compares a business's QuickBooks Online records with its project-management tool (such as JobTread) and lists where the two disagree. This policy explains what the app collects, why, and what we do with it.
Who uses the app
The app is not open to the public. Access is by invitation only, for Mandrex staff and for people at client businesses that have engaged Mandrex. Each person can see only the businesses they have been given access to.
What we collect
- Account details: name, email address and role of each invited user. Passwords are handled by our sign-in provider and are never visible to Mandrex.
- Accounting data from QuickBooks Online, only after an administrator of that QuickBooks company connects it: invoices, bills, customer payments, credit memos and bill payments, including document numbers, dates, amounts, balances and customer or vendor names.
- Project-tool data (for example JobTread), only after the business connects it: customer invoices and vendor bills with the same kind of details.
- Work in the app: notes, assignments and status changes that users record, with who made them and when.
- Files you upload for a reconciliation are read in your browser; the results are saved, not the files.
What the app does with QuickBooks
The connection to QuickBooks Online requests the accounting scope only and is used read-only. The app never creates, changes or deletes anything in QuickBooks. It reads records to compare them with the project tool and keeps them current when QuickBooks reports a change.
How we use the data
Only to provide the reconciliation service to the business it belongs to: matching records, listing differences, and keeping a history of what was found and done. We do not sell data, use it for advertising, or share it with other clients. Data from one business is never shown to another.
Where it is kept and who can reach it
- Data is stored with our database and hosting providers (Supabase and Cloudflare), encrypted in transit.
- Connection credentials for QuickBooks and the project tool are stored server-side in a place no user of the app can read, administrators included. Only the app's sync service uses them.
- Access to each business's data is enforced by the database itself, not only by the screens.
How long we keep it
For as long as the business uses the service. When a business disconnects QuickBooks or the project tool, the stored credentials are deleted immediately. When a business ends its engagement with Mandrex, its data is deleted on request, and in any case within 90 days.
Your choices
- A QuickBooks administrator can disconnect the app at any time, from the app or from QuickBooks (Settings → Apps).
- You can ask us for a copy of your business's data, or for it to be corrected or deleted.
Contact
Questions or requests: welcome@mandrexvaservices.com.