Newbreak Ag Privacy Notice

Information We Use

We use your name, business email, company membership, permissions and authentication information to provide your workspace. We process the business records you submit, connection permissions, reviewed forecasts, reports and activity records needed to operate and protect the service.

Demo workspaces use synthetic or Sandbox data only. An explicitly enabled live pilot uses a separate company workspace, selected source accounts and a limited test period. Only an authorized company owner may connect live sources. Bank sign-in takes place with the provider, never in a Newbreak form.

Bank Connections and Plaid

When you choose to connect a bank, Newbreak uses Plaid Inc. to access account information made available by that connection. The bank-link notice describes the data and purpose and requires your agreement before Plaid opens. This includes account names, types, masked account numbers, balances and transactions, including dates, descriptions, amounts and pending status. The connection notice identifies whether the company uses Sandbox data or an authorized live pilot. Newbreak uses this information for reviewed cash-flow testing and reconciliation. The live pilot requests a configured 30 to 90 days of transaction history. Imported data is reviewed before inclusion in a forecast. Newbreak does not initiate bank payments.

Plaid handles the connection flow. Newbreak does not receive your bank sign-in password. We receive a connection token and store it encrypted on the server. Plaid's handling of information is described in the Plaid End User Privacy Policy.

QuickBooks

If enabled for your company, an authorized administrator may connect QuickBooks Online. We read selected accounting categories: accounts, invoices, bills, customers, vendors and recorded payments. Intuit’s accounting permission permits broader operations, but this connector performs reads only and does not create invoices, payments or other entries in QuickBooks. Disconnect stops future imports and revokes the connection.

Purpose and Access

We use information to authenticate users, connect authorized sources, prepare and review cash forecasts and evidence, maintain a record of changes, respond to requests and investigate security problems. Access depends on company membership and assigned permissions. Administrators and service providers receive access needed for their authorized work.

Our infrastructure providers include Supabase for the database and authentication and Vercel for application hosting. Plaid supplies bank connectivity, and Intuit supplies optional QuickBooks connectivity. We may disclose information when required by law or necessary to protect the service and its users. We do not sell personal or bank information or use it for targeted advertising.

Storage and Security

We use encrypted connections to hosted services, encrypted storage, role-based access controls and authenticator verification for bank management and privileged access. No system can guarantee complete security. Keep your sign-in and authenticator information private and report unexpected access promptly.

Essential session cookies keep you signed in. The bank flow temporarily stores an opaque connection-session reference in your browser so it can resume after a bank redirects you; bank access tokens are not stored there.

Disconnecting, Retention and Deletion

You can use Disconnect in your company's bank controls to revoke its Plaid connection and stop further imports. Disconnecting does not automatically delete records already imported or included in reviewed versions and audit history.

Existing sandbox records are retained for testing and audit review. Account, business and security records are retained while needed to provide the service, resolve disputes or meet applicable obligations. Contact us to request access, correction or deletion, or to ask about a particular record. We verify your authority, review the request and aim to complete approved primary-system deletion within 30 days. We explain any information that must be retained and why. The pilot ends at the agreed time unless renewed; disconnect and deletion are separate steps. Backup copies are subject to the hosting provider's recovery and expiry process. Do not assume a disconnected connection has erased historical records.

Contact and Changes

For privacy requests, contact mathew@missionregen.com and identify the company and request. For security concerns, contact Nick Norris, our security and backup owner, at nick@gridnpixel.com. Do not email bank credentials, authenticator codes or complete financial files. We will arrange a suitable channel if additional information is needed.

We update this notice when the service or its data practices change. The version above identifies the notice you are reading. A material change to bank data use requires a new connection notice and consent.