Privacy Policy

This Privacy Policy explains how Tradeline Consulting Inc. ("Tradeline", "we", "us", or "our") handles information in connection with our website, InfoSight products, hosted business applications, WholesaleOrders integrations, and support services. Product-specific notices and written agreements may provide additional information about a particular service.

For business records processed on behalf of a customer organization, that organization determines which users and integrations are authorized and is responsible for its own notices and permissions. If your employer or supplier provides your account, contact that organization about its use of your information. You may also contact Tradeline with questions about our processing.

Syntra ODBC has a product-specific Privacy Policy. Software use is also subject to the applicable End User License Agreement.

The information handled depends on the service and features you use. It may include:

• Contact and account information, such as names, business email addresses, organization details, account identifiers, roles, and authentication information.
• Business records, such as products, inventory, prices, customer and supplier details, delivery addresses, orders, estimates, invoices, and shipment information.
• Integration information, such as company identifiers, authorized record mappings, authorization tokens, and transaction or synchronization history.
• Support requests, messages, attachments, screenshots, and diagnostic material you choose to provide.
• Technical information, such as IP addresses, browser or device information, application versions, access logs, errors, and website usage information.

We receive information from you, your authorized organization, connected services, and the operation of our applications. Provide only information appropriate to the service and remove unnecessary sensitive information from support materials.

We use information to provide requested services, authenticate users, enforce permissions, process authorized business operations, maintain integrations, communicate about accounts and support, diagnose errors, protect systems, and meet applicable legal obligations.

Website usage information helps us understand and improve the website. Business records accessed through an integration are used to provide and support the authorized business functions. Connecting an account does not authorize unrelated advertising uses of its business records.

Where consent is required, you may withdraw it by contacting us or disabling the relevant optional feature, subject to legal and contractual requirements. Withdrawing access needed for a service may prevent that service from working.

A permitted administrator must authorize a QuickBooks Online connection. Depending on the enabled features, the application may read company settings, customers, products, currencies, tax configuration, and existing transactions; maintain customer and product mappings; and create or update estimates and invoices from reviewed orders. Available shipping charges and tracking details may be included when authorized.

Hosted integrations store the authorization information and operation records needed to maintain the connection and reconcile results. Desktop or customer-hosted deployments may keep records on systems controlled by the customer. The deployment arrangement depends on the product and agreement.

Use the application's connection settings to disconnect, and the provider's own settings to revoke access. Disconnection does not delete invoices or other records already created in QuickBooks, nor does it automatically erase local order history or audit records. Contact us about export or deletion of information retained by Tradeline.

QuickBooks and other connected providers handle information under their own terms and privacy policies. Tradeline does not control those providers' retention or account-management practices.

Information may be shared with authorized users in your organization, connected providers you authorize, and service providers used for hosting, identity, email, customer support, diagnostics, analytics, or other functions needed to deliver the service. Information sent to a connected provider is limited to what the selected operation requires.

We may also disclose information where required by law or where reasonably necessary to protect legal rights, investigate abuse, or address security incidents. Information may be transferred as part of a business restructuring or sale, subject to applicable privacy obligations.

Our website and applications use cookies or similar storage for sign-in, session security, preferences, and related functionality. The public website also uses Google Analytics and Crisp chat, which may receive browser, usage, and communication information under their own privacy policies.

You can manage cookies through your browser. Blocking necessary storage may prevent sign-in or other features from working. You can use available provider controls to manage analytics preferences and unsubscribe from optional marketing communications. Service, security, and account notices may still be necessary.

We use technical and organizational safeguards appropriate to the service and information, including encrypted connections and access controls. Hosted QuickBooks integration authorization tokens are handled server-side and encrypted in application storage. Users and customer organizations are responsible for protecting their own credentials, devices, backups, and permissions.

Information may be processed in Canada or other countries where the customer-selected deployment, hosting, or service providers operate. It may be subject to the laws of those countries. A written agreement may specify additional hosting or processing arrangements.

No system can guarantee absolute security. This policy does not waive privacy rights or responsibilities imposed by applicable law.

We retain information for the purposes described in this policy, including delivering services, maintaining business and audit records, resolving support and transaction issues, and meeting legal obligations. Retention depends on the type of record, deployment configuration, applicable agreement, and those requirements.

You may request account closure, data export, or deletion by contacting us. We will verify your identity and authority, explain available options and any applicable restrictions, and coordinate with the customer organization where it controls the records. Some information may need to be retained for legal obligations or unresolved transactions. Deleted information may remain in protected backups until it is removed through the applicable backup lifecycle.

Revoking an integration removes future access; deletion of previously stored records is a separate request. Records held by QuickBooks or another provider must also be managed through that provider.

Subject to applicable law, you may request access to personal information held about you, correction of inaccurate information, information about its use or disclosure, or other available privacy rights. Contact us using the details below. We may need to verify identity before acting and may refer requests concerning organization-controlled records to the relevant organization.

Our services are intended for business users and are not directed to children. Contact us if you believe a child has provided personal information through our services.

We may update this policy when services or data practices change. The date at the top identifies the latest version. Material changes will be communicated as required by applicable law or the relevant customer agreement.

For access, correction, deletion, or other privacy questions, contact:

We will investigate privacy concerns raised with us. You may also contact the applicable privacy regulator, including the Office of the Privacy Commissioner of Canada.