Privacy Policy
Last updated: 12 August 2026
SCA Connect Client Ledgers ("the application") is an internal tool built and operated by SCA Connect for its own staff. It is not offered to the public and is not used by any organisation outside SCA Connect. This policy explains what data the application handles and how it is protected.
What data we collect
- Staff account information — name, work email address, and a securely hashed password for each staff member with access to the application.
- QuickBooks Online financial data — client trust-money ledger entries, invoices, receipts, and account balances, retrieved from SCA Connect's own QuickBooks Online company via the QuickBooks API, solely to reconcile and display client-money records.
How data is used
Data is used exclusively to operate the application for SCA Connect staff: authenticating staff sign-in, enforcing role-based access (Admin vs. User), and displaying/reconciling client trust-money ledgers against SCA Connect's QuickBooks Online records. Data is never sold, shared with third parties, or used for advertising.
How data is stored and secured
- All data is stored in a managed PostgreSQL database (Neon) accessed only by the application server.
- Passwords are never stored in plain text; they are hashed using industry-standard hashing before storage.
- All traffic to and from the application is encrypted in transit via HTTPS/TLS.
- Access to client-money actions (recording receipts, transfers, reversals) is restricted to Admin accounts.
- QuickBooks API credentials are stored as encrypted environment configuration, never exposed to the browser.
Data retention
Ledger records are retained for as long as required for SCA Connect's bookkeeping and regulatory obligations. Staff accounts are removed by an administrator when no longer needed.
Contact
Questions about this policy or the data it describes can be directed to SCA Connect at ben@scaconnect.com.
This is an internal policy statement for SCA Connect's own use and does not constitute legal advice.