PRIVACY POLICY - QB | Tarrant Roofing

Tarrant Reporting

Effective Date: August 12, 2026

Tarrant Roofing and its affiliated companies (“Tarrant,” “we,” “us,” or “our”) respect the confidentiality and security of the business and financial information processed through the Tarrant Reporting application.
This Privacy Policy explains how Tarrant Reporting (“Application”) collects, accesses, uses, stores, protects, and discloses information.
The Application is currently intended primarily as a private business reporting and analytics system for Tarrant Roofing and affiliated or commonly owned companies.

1. Scope
This Privacy Policy applies to information processed through Tarrant Reporting, including information obtained from connected business systems such as QuickBooks Online.
It applies to authorized users of the Application and to information concerning businesses whose systems have been properly connected to the Application.

2. Information We May Collect or Access
Depending upon the features enabled and systems connected, the Application may collect or access the following categories of information.
Account and User Information
This may include:
• Name;
• Business email address;
• User identifier;
• Company or organizational affiliation;
• Role or access level;
• Authentication and authorization information; and
• Application activity.
QuickBooks Online and Accounting Information
When an authorized user connects a QuickBooks Online company to Tarrant Reporting, the Application may access financial and accounting information authorized through that connection.
This information may include:
• QuickBooks company information;
• Company identifiers;
• Chart of accounts;
• Account balances;
• Profit and loss data;
• Balance sheet data;
• Cash-flow data;
• General ledger data;
• Invoices;
• Bills;
• Expenses;
• Payments;
• Customers;
• Vendors;
• Accounts receivable;
• Accounts payable;
• Classes;
• Locations;
• Products and services;
• Transaction information; and
• Other accounting or reporting information available through the authorized QuickBooks connection.
The exact information accessed depends on the reporting capabilities being used and the permissions available through the connected service.

3. Read-Only QuickBooks Use
The current version of Tarrant Reporting is designed to use QuickBooks Online information on a read-only basis.
The Application is intended to retrieve information for reporting, analysis, consolidation, dashboards, and management purposes.
The current Application is not intended to create, change, approve, or delete accounting transactions or other accounting records within QuickBooks Online.
If this functionality changes materially in the future, this Privacy Policy and applicable user disclosures may be updated before the new functionality is made available.

4. How We Use Information
Information processed through the Application may be used to:
• Generate financial reports;
• Create management dashboards;
• Analyze financial performance;
• Compare performance among authorized companies;
• Consolidate information from affiliated companies;
• Analyze revenues, expenses, margins, receivables, payables, cash flow, and other financial measures;
• Identify trends and anomalies;
• Provide historical comparisons;
• Support forecasting and business planning;
• Improve reporting accuracy;
• Diagnose technical problems;
• Maintain security;
• Control user access;
• Maintain and improve the Application; and
• Support legitimate internal business operations.
We do not use QuickBooks data for unrelated advertising purposes.

5. Multiple Tarrant Companies
Tarrant Reporting may process data belonging to multiple Tarrant-owned, affiliated, or commonly controlled companies.
Authorized information from those companies may be combined when necessary to produce consolidated financial statements, group-level dashboards, comparative reports, management analysis, or other legitimate internal reporting.
Access is limited according to the permissions established for the Application.
The Application is not intended to make one company’s confidential information available to unauthorized persons.

6. Sale of Information
Tarrant Reporting does not sell QuickBooks Online financial data or other confidential business information processed through the Application.
We do not provide such information to data brokers or use it for third-party behavioral advertising.

7. Sharing and Disclosure
Information may be disclosed only when reasonably necessary for legitimate purposes, including:
Within Tarrant
Information may be made available to authorized employees, officers, managers, owners, accountants, consultants, contractors, or other authorized personnel who require access for legitimate business purposes.
Service Providers
We may use service providers that support hosting, databases, infrastructure, backups, cybersecurity, authentication, monitoring, software operations, or other Application functions.
Such providers should receive only the information reasonably necessary to perform the applicable service and remain subject to applicable confidentiality, security, or contractual obligations.
Legal Requirements
Information may be disclosed when required by applicable law, subpoena, court order, regulatory requirement, governmental request, or other valid legal process.
Information may also be disclosed when reasonably necessary to investigate fraud, protect security, protect legal rights, or prevent harm.
Business Reorganization
If ownership or operation of the Application or relevant Tarrant business assets changes through a merger, acquisition, restructuring, financing, or similar transaction, information may be transferred as part of that transaction subject to applicable confidentiality and legal requirements.

8. Intuit and QuickBooks Online
QuickBooks Online connections are authorized through Intuit’s authentication and authorization systems.
Tarrant Reporting may receive authorization tokens and company identifiers necessary to maintain authorized connections to QuickBooks Online.
We use these credentials only for legitimate operation of the Application and the authorized QuickBooks integration.
Users should never provide their QuickBooks password directly to Tarrant Reporting when authorization is being performed through Intuit’s OAuth authorization process.
Use of QuickBooks Online itself remains governed by Intuit’s applicable agreements and privacy practices.

9. Authentication Credentials and Tokens
Authentication credentials, access tokens, refresh tokens, API credentials, and similar information used to operate connected services are treated as sensitive information.
Tarrant intends to restrict access to such credentials to systems and persons requiring that access for legitimate technical or security purposes.
Tokens and credentials should not be exposed in reports, dashboards, logs available to ordinary users, or other unnecessary locations.

10. Data Security
Tarrant intends to maintain reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of information processed through the Application.
Safeguards may include, as appropriate:
• Access controls;
• User authentication;
• Least-privilege access;
• Encryption capabilities provided by hosting and communication technologies;
• Secure transmission protocols;
• Credential and secret management;
• Logging and monitoring;
• Software maintenance;
• Backup procedures; and
• Security incident response procedures.
No electronic system or method of data transmission can be guaranteed to be completely secure.

11. Data Retention
Tarrant may retain information for as long as reasonably necessary to:
• Operate the Application;
• Maintain historical reporting;
• Meet legitimate business requirements;
• Maintain financial and accounting records;
• Comply with legal obligations;
• Resolve disputes;
• Maintain security records; or
• Enforce applicable agreements and policies.
The retention period may vary according to the type of information and the purpose for which it is maintained.
When information is no longer reasonably required, Tarrant may delete, de-identify, aggregate, or archive it in accordance with applicable business, security, backup, and legal requirements.

12. Disconnecting QuickBooks
An authorized administrator may disconnect a QuickBooks Online company from Tarrant Reporting.
Disconnecting a company prevents the Application from continuing to retrieve new information through that authorization after the disconnection becomes effective.
Information previously retrieved may remain in Tarrant’s reporting systems, databases, backups, or historical reports where retention is reasonably necessary for legitimate business, accounting, security, historical reporting, or legal purposes.
Requests concerning removal of previously retrieved information may be directed to the contact information below.

13. Data Accuracy
Tarrant Reporting receives information from QuickBooks Online and other source systems.
Corrections to accounting information ordinarily should be made in the applicable system of record. Updated information may then be retrieved by Tarrant Reporting.
Reports generated by the Application should not be considered a substitute for the official accounting records maintained in QuickBooks Online or another applicable system of record.

14. Automated Analysis and Artificial Intelligence
Tarrant Reporting may in the future include automated analytics, anomaly detection, forecasting, natural-language reporting, or artificial-intelligence-assisted features.
If those capabilities materially change how confidential or personal information is processed or disclosed, Tarrant will update this Privacy Policy and implement appropriate controls before making the applicable functionality available.
Confidential QuickBooks information will not be intentionally used to train a publicly available artificial intelligence model on behalf of Tarrant without appropriate authorization and disclosure.

15. Children’s Privacy
Tarrant Reporting is a business application and is not intended for use by children.
We do not knowingly design the Application to collect personal information from children.

16. International Data
The Application is currently intended primarily for business operations in the United States.
If the Application expands to process information subject to additional international privacy requirements, Tarrant may update its privacy practices and this Policy as required.

17. Changes to this Privacy Policy
Tarrant may update this Privacy Policy to reflect:
• Changes to the Application;
• New integrations;
• New reporting functionality;
• Changes in data practices;
• Security improvements;
• New legal requirements; or
• Expansion of the Application to additional organizations or external customers.
The effective date at the top of this Policy will identify the current version.
Material changes will be communicated where appropriate.

18. Future Commercial Availability
Tarrant Reporting is currently intended primarily as a private/internal application.
If Tarrant later offers the Application to unaffiliated customers or external organizations, this Privacy Policy may be revised or supplemented to address customer-specific rights, account administration, data deletion, subscription services, cross-border processing, service providers, artificial intelligence functionality, and other matters appropriate to a commercial software service.

19. Contact Us
Questions, requests, or concerns regarding this Privacy Policy or information processed through Tarrant Reporting may be directed to:

Tarrant Roofing
1900 Handley Ederville Rd
Fort Worth, Texas 76118
Privacy Email: policies@tarrantroofing.com
Support Email: support@tarrantroofing.com
Website: https://tarrantroofing.com
________________________________________
Last Updated: August 12, 2026