Privacy Policy

Effective September 8, 2026

This policy covers the internal project management and job costing application operated by E & I Consultants, LLC at cms.eiconsult.co (“the application”). The application is private. It is used only by employees and contractors of E & I Consultants. It is not offered to the public, and accounts are created only by E & I Consultants.

What the application stores

• Account information — name, work email address, a cryptographic hash of the password (never the password itself), and the person's role and permissions.
• Work records — projects, clients, budgets, tasks, milestones, and time entries including hours, dates, the service performed, and any notes the person adds.
• Compensation-related rates — internal cost rates used for job costing. Access to individual cost figures is restricted to specific people designated by E & I Consultants.
• Session records — a random session identifier and its expiry, so people stay signed in.

QuickBooks Online data

The application connects to the E & I Consultants QuickBooks Online company file using Intuit's OAuth 2.0 authorization. It connects only to company files a E & I Consultants administrator explicitly authorizes.

• What it reads: the Product/Service item list — item names, descriptions, prices, and active status — plus the company identifier. It uses these to populate timesheet options and set billing rates.
• What it writes: approved time entries, recorded against the corresponding service item and customer job, for invoicing.
• What it does not do: it does not read or store bank account details, payroll records, or customer financial histories, and it does not transmit QuickBooks data to any third party.
• Access tokens issued by Intuit are encrypted at rest using AES-256-GCM. Authorization can be revoked at any time, either from within the application or from the QuickBooks account settings.

How information is used

Solely to operate E & I Consultants's own project tracking, job costing, timekeeping, and invoicing. The application does not profile users, does not serve advertising, and does not use this information to train machine learning models.

Who else can see it

Information is not sold, rented, or shared for anyone else's purposes. It is handled by two service providers in the ordinary course of running the application:

• the hosting provider operating the private server it runs on;
• Intuit, for the QuickBooks Online connection described above.

Information may also be disclosed where required by law, or as necessary to establish or defend a legal claim.

Security

Traffic is encrypted in transit with TLS. Passwords are stored as scrypt hashes. QuickBooks tokens are encrypted at rest. The database is not reachable from the public internet. Access to cost and compensation-related figures is restricted by role and by an explicit per-person permission. Backups are taken nightly and retained on a rolling basis.

No system is perfectly secure, and this describes the measures in place rather than a guarantee against every possible failure.

Retention

Project, time, and job costing records are retained as long as needed for business, accounting, and tax purposes. Account records are retained while a person has access and for a reasonable period afterwards. Deletion requests are honored except where a record must be kept for legal, tax, or accounting reasons.

Questions and requests

To ask about this policy, request a copy of your information, or request deletion, contact tanner@eiconsult.co.

Changes

If this policy changes materially, the effective date above is updated and users of the application are notified.