Privacy Policy
This policy explains how Gibbs Capital, LLC ("Gibbs Capital," "we") handles information in the GC Command Center, an internal web application used to manage Gibbs Capital's own companies and properties. The application isn't offered to the public or to outside businesses.
Who uses the application
Access is limited to Gibbs Capital personnel and its outside accountants and advisors whom we approve by email address. Each user signs in with a one-time code sent to an approved email.
QuickBooks Online data
When an authorized Gibbs Capital administrator connects a QuickBooks Online company, the application uses Intuit's OAuth 2.0 authorization to read accounting data for that company. Connections are made only for companies owned or managed by Gibbs Capital and its affiliates.
- What we read: company information, customers and balances, aged receivables, and financial reports such as profit and loss and balance sheet.
- Read-only use: the application only reads QuickBooks data. It doesn't create, edit or delete any records in QuickBooks.
- Tokens: Intuit access and refresh tokens are stored server-side on Cloudflare infrastructure, are never shown in the browser, and are used only to refresh the read-only data.
Other information
The application also stores the internal operating information Gibbs Capital enters or syncs into it, such as rent rolls, maintenance requests, insurance certificates and task lists, and records the sign-in email of each user for access control and change history.
How we use information
We use the information only to run Gibbs Capital's own businesses: reporting, bookkeeping review, property management and decision-making.
Sharing
We don't sell, rent or share QuickBooks data or other information from the application with third parties for their own purposes, and we don't use it for advertising. Information is visible only to approved users. Service providers that host the application (Cloudflare) and supply the source data (Intuit, Buildium) process it on our behalf. We may disclose information if required by law.
Security
All traffic uses HTTPS. Sign-in is restricted to approved email addresses, and sensitive financial sections are further limited to designated individuals.
Retention and disconnecting
Data is kept while it's needed for Gibbs Capital's business. A company can be disconnected at any time from QuickBooks Online (Apps > My Apps > Disconnect) or by contacting us. After a disconnect, the application stops reading that company's data, and on request we delete its stored tokens and cached QuickBooks data.
Changes
We may update this policy and will change the effective date above when we do.
Contact
Duke Gibbs, Gibbs Capital, LLC — duke@gibbscapital.com