Privacy Policy

Effective October 17, 2026

This Privacy Policy explains what information the MRR Platform job board (“the MRR Platform”), operated by Machining and Repair Resource, Inc. (“MRR”, “we”), collects, how it is used and the choices you have. It applies to the people who sign in to the MRR Platform and to the data MRR connects to it.

1. Information we collect

• Account information. When you sign in with Microsoft we receive your name and work email address to confirm you are an authorized MRR user. We do not receive or store your Microsoft password.
• Business records you enter. Jobs, customers, vendors, estimates, purchase orders, invoices, notes, photos and PDFs, and the history of changes to them.
• Connected-service data. If QuickBooks Online or Microsoft 365 is connected, we access the data those permissions allow: QuickBooks accounting records (for example customers, invoices and estimates); Outlook messages and attachments you choose to view, file or send; and OneDrive files and folders. The board writes only the files and QuickBooks records you ask it to create.
• Sign-in tokens. To keep connections working we store the access and refresh tokens that Microsoft and Intuit issue. They are stored on our server with restricted file permissions and are never shown in the interface.
• Usage and diagnostic data. An action journal of what is clicked or changed (with who and when), server logs (request paths, timing, errors and your user name), and any feedback you submit, including optional screenshots.
• Phone uploads. Photos or PDFs sent from a phone through a time-limited scan link (valid 30 minutes) are attached to the job the link was created for.

2. How we use information

• To operate the MRR Platform: identify you, show and update jobs, and send, file or sync data with the services you connect.
• To keep it secure and reliable: audit changes, investigate errors and prevent misuse.
• To improve the product, based on feedback and usage diagnostics.

We do not sell personal information, use it for advertising, or use QuickBooks or Microsoft data to train machine-learning models.

3. Sharing

We share information only with: the services you connect (Intuit QuickBooks Online and Microsoft 365), when the MRR Platform sends data to them on your instruction; our hosting provider (Google Cloud), which stores the application data and encrypted backups on our behalf; and authorities when the law requires it. Email sent from the board goes out through Microsoft from the signed-in person’s own account.

4. Storage, security and retention

Data is served over HTTPS and stored on servers MRR controls in Google Cloud, with access limited to authorized staff. Backups are kept in a versioned storage bucket for up to 180 days after a record is deleted. Action-journal logs are rotated after about 14 days. Business records are kept for as long as MRR needs them for its operations, taxes and legal obligations. No system is perfectly secure, and we cannot guarantee absolute security.

5. Your choices

• Disconnect services. An administrator can disconnect QuickBooks or Microsoft in the MRR Platform at any time, which removes the stored tokens. You can also revoke access from your Microsoft account’s app permissions page or from Intuit’s connected-apps page.
• Access or correction. To see, correct or delete personal information we hold about you, contact us below. Some records may be retained where we are legally required to keep them.
• Sign out. Use “sign out” to end the 30-day session on a device.

6. Cookies

We use only essential cookies: a signed sign-in cookie (30 days) and a short-lived cookie used during Microsoft and QuickBooks connection flows. We do not use advertising or tracking cookies.

7. Children

The MRR Platform is a business tool for employees and is not directed to children under 16.

8. Changes

We may update this policy. The effective date above shows the latest version.

9. Contact

Questions or requests about privacy: ethan@e-10.net.