Home / Bear Country Metalworks Operations App: Privacy Policy

Bear Country Metalworks Operations App: Privacy Policy

Effective date: November 1, 2026

This Privacy Policy explains how Bear Country Metalworks ("we", "us"), a business in Manitoba, Canada, handles information in the Bear Country Metalworks Operations App (the "App"). The App is our internal web app at app.bearcountrymetalworks.ca. We use it to run orders and production, and to create vendor purchase orders and bills and keep them in step with our QuickBooks Online company. It is used only by our team and the people we give access to. This policy covers the App only. Shopping on our website is covered by our store Privacy Policy.

1. Information the App gets from QuickBooks Online

When a QuickBooks Online admin connects the App, it uses Intuit's accounting permission (com.intuit.quickbooks.accounting). The App only reads and writes what it needs for vendor purchasing and bookkeeping, which can include:

Company details: the QuickBooks company ID and company name, so the App knows which company it is connected to.
Vendors: vendor names, contact names, business email addresses, phone numbers and mailing addresses.
Purchase orders and bills: numbers, dates, line items, amounts, taxes, status and payment due dates.
Lists used on those records: accounts, items, tax codes, terms and similar settings needed to fill in a purchase order or bill correctly.

The App does not ask for or store your Intuit password, bank account numbers or card numbers, and it does not use QuickBooks Payments, payroll or employee data.

2. Other information the App uses

App accounts: name, email address and sign-in details for staff and vendors we give access to, plus basic sign-in records used for security.
Business records we create in the App: purchase orders, vendor quotes, order and production details, and related files and emails.

3. How we use the information

We use this information only to run Bear Country Metalworks, including to:

create vendor purchase orders and bills in QuickBooks Online and match them to our records;
check that vendor, amount and tax details are right before a bill is approved;
show our team the status of purchase orders and bills;
keep accurate accounting records and meet our tax and legal obligations;
keep the App secure and fix problems.

We do not use QuickBooks Online data for advertising, and we do not sell it.

4. Access tokens

Connecting uses Intuit's OAuth 2.0 sign-in. Intuit gives the App access and refresh tokens instead of a password. We store these tokens on the App's server only, encrypted, and use them only to make the requests described above. They are never shown in the browser or shared.

5. Where the information is stored and how it is protected

The App runs on Heroku (a Salesforce service), and its database is a managed Heroku Postgres database. This means information may be stored and processed outside Canada, including in the United States, where it may be subject to the laws of that country. We protect it with:

HTTPS (TLS) encryption for all connections to the App and to QuickBooks Online;
encryption of stored access and refresh tokens;
sign-in required for every staff and vendor account, with access limited to what each person needs;
secrets kept in the hosting provider's protected settings, not in the code.

6. Sharing

We do not sell, rent or trade information from the App. We only share it:

with service providers that run the App for us, such as Heroku (hosting and database), Shopify (our online store) and Google (business email), only as needed for them to provide their service;
with a vendor, when we send that vendor its own purchase order;
with our accountant or bookkeeper, for our own accounting;
when the law requires it.

7. How long we keep it, and deletion

When the App is disconnected from QuickBooks Online, whether in the App or in QuickBooks Online, the App stops using the connection and we delete its stored tokens for that company.
Purchase orders, bills and related records that are part of our books are kept as long as Canadian tax law requires (generally six years) and then deleted.
Other information is deleted when it is no longer needed for the purposes above.

Records already in your QuickBooks Online company are managed in QuickBooks Online and are not deleted by disconnecting the App. To ask us to delete information the App holds, email us at the address below.

8. Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you can ask to see the personal information we hold about you, ask us to correct it, or withdraw consent, subject to legal and contract limits. We will reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

9. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the effective date above.

10. Contact

For privacy questions or requests about the App, contact Bear Country Metalworks, Manitoba, Canada, at contact@bearcountrymetalworks.ca.