Client Portal Privacy Notice

Scope and contact

Rydder Development LLC operates the Rydder Client Portal at portal.rydderdevelopment.com. This notice supplements the company Privacy Policy at https://rydderdevelopment.com/privacy and explains portal-specific practices. Privacy questions and requests may be sent to j.palmer@rydderdevelopment.com. The company policy continues to apply to Rydder's other products and services.

Information the portal handles

The portal handles account email addresses, names and access permissions; sign-in and account-recovery information; business and client contact details; project intake, project records, messages, updates, approvals, and files users provide through supported features. Rydder uses this information to manage authorized access, deliver agreed services, coordinate projects, communicate with clients, and protect the service.

Authorized Rydder personnel can access client information needed to administer the service. Client users receive access to projects and billing information assigned to them. Do not upload passwords, banking credentials, full payment-card details, or sensitive information unnecessary for your project.

When the business owner authorizes a QuickBooks connection, the portal retains the connected-company identifier and environment, encrypted authorization tokens and their expiry information, and temporary authorization-state records. It also retains linked invoice and customer identifiers, project references, invoice labels and numbers, currency, totals, outstanding balances, due dates, last-check times, and encrypted cached payment links. Invoice PDFs may be retrieved from QuickBooks for authorized download. This does not mean that every downloaded PDF is permanently stored by the portal.

QuickBooks and payments

The portal uses QuickBooks information to display invoices associated with the appropriate client projects, refresh invoice balances, provide invoice downloads, and open Intuit-hosted payment pages. The current integration reads invoice information; it does not create, change, email, or charge QuickBooks invoices. Intuit's Accounting permission is broader than these implemented uses.

Payment credentials are entered on Intuit's checkout, not collected by the portal's payment interface. Intuit processes those payments under its own terms and privacy statement. An invoice balance may reflect recorded payments while a bank transfer is still processing. Returning from checkout does not itself mark an invoice paid.

Disconnection and deletion are different

Disconnecting QuickBooks in the portal removes its local QuickBooks connection, tokens, authorization-state records, and linked invoice records. It does not cancel invoices, reverse payments, delete QuickBooks records, revoke the app's authorization within Intuit, or erase backup copies. The owner can separately remove the app through QuickBooks' connected-app controls. For deletion of other portal information, contact Rydder using the address above.

Providers and disclosures

Rydder uses infrastructure and service providers to host and operate the portal. Intuit supplies QuickBooks invoice information and hosted checkout. Resend supplies transactional email delivery for account invitations, password setup/recovery, and configured service messages. Cloudflare Turnstile is used for bot protection on the request form when enabled; it is not a statement that sign-in CAPTCHA is enabled. These providers receive information needed to provide their services. Their own privacy notices also apply to their independent processing: Intuit, Resend, and Cloudflare.

The company Privacy Policy's existing provisions about necessary service-provider disclosures, legal requests, business transfers, and no sale of personal information continue to apply. This notice does not authorize providers to use project information for unrelated purposes.

Security and browser storage

The portal uses HTTPS, account/session authorization and project-access checks. Stored QuickBooks tokens and cached checkout links are encrypted. Passwords are stored as salted password hashes rather than plaintext; password-setup and recovery links are expiring and single-use. These specific protections are not a claim that every database field or backup is encrypted, or that the service is certified or immune to security incidents.

The portal uses essential sign-in/session functionality to keep authorized users signed in and validate requests. Browser storage may also remember interface preferences. The separate main-website policy explains its theme preference and temporary contact-form draft storage. This notice does not describe optional analytics, advertising or AI processing as enabled; any such additional processing must be assessed and disclosed before introduction.

Retention, access and requests

Rydder retains information only as reasonably needed to operate accounts and projects, provide agreed services, maintain security, respond to disputes or requests, and meet applicable legal, accounting and transaction-record obligations. Removing portal access is not the same as deleting project or billing records. Backup copies may remain separately from live records; a deletion request does not itself erase every backup immediately.

Contact j.palmer@rydderdevelopment.com to request access, correction, export or deletion of portal information. Rydder may verify the requester's identity and authority, will review the request under applicable law, and will explain information that must be retained and any relevant limitations. Do not include your password in a request. Deletion of portal information does not cancel a service agreement, invoice, payment obligation or Intuit account. Rydder does not promise a fixed retention or backup-erasure deadline in this notice.

Changes

The published notice will show its effective/update date. Material changes will be posted with revised wording and, where appropriate, communicated through the portal or service email. The company Privacy Policy's other applicable provisions remain in effect.