Privacy Policy
Effective August 5, 2026
This policy describes how 108 Performance Holdings, LLC ("the Company," "we," "us") handles information accessed through 108 OS Financial, a private internal application that connects to the Company's own QuickBooks Online accounting records.
1. Scope of this policy
108 OS Financial is an internal tool. It is used only by the Company to access accounting data belonging to the Company and its affiliated entities. It has no external users, no customer accounts, and no public sign-up. It does not collect information from members of the public, website visitors, or the Company's clients directly.
2. Information we access
With the authorization of a QuickBooks Online company administrator, the application retrieves the Company's own accounting information, which may include:
- Financial statement reports and the chart of accounts
- Transaction records such as invoices, bills, payments, deposits, and journal entries
- Names, billing addresses, and contact details of customers and vendors as they appear in the accounting records
- Company profile and entity identification information
The application does not access payroll records, employee compensation detail, tax filings, or stored payment credentials, and it does not request the scopes that would permit it to do so. It does not store full payment card numbers or bank account numbers.
3. How the information is used
Accessed information is used for one purpose: internal financial reporting and analysis by the Company's executive team, board, and authorized advisors. Specifically, it supports consolidated performance dashboards, management reporting, board and investor reporting prepared by the Company, and reconciliation between the Company's operating systems and its books.
The information is not used for advertising, marketing, profiling, automated decision-making about individuals, or any purpose unrelated to the Company's own financial management.
4. How the information is stored and protected
- Data is stored in a managed PostgreSQL database hosted in the United States, encrypted at rest by the hosting provider.
- All data is transmitted over TLS. No accounting data is transmitted or stored in plain text over the open internet.
- OAuth credentials, including client secrets and refresh tokens, are held in encrypted credential storage separate from the reporting tables, and are never written into application source, documentation, or task management systems.
- Access to the database and to the reporting dashboard is limited to named executives and administrators of the Company on a least-privilege basis.
- Access is reviewed when a person's role changes and revoked promptly on separation.
5. Disclosure to others
We do not sell, rent, or trade any information accessed through this application. We do not share it with advertisers or data brokers. Information may be disclosed only in these circumstances:
- To the Company's own officers, directors, employees, accountants, attorneys, and auditors who need it to perform their duties
- To infrastructure providers that host the database and automation used to operate the application, under their standard terms and only to the extent required to provide those services
- To prospective or current investors and lenders, in the form of financial statements and metrics prepared by the Company, under confidentiality obligations
- Where required by law, regulation, subpoena, or other legal process
6. Retention and deletion
Financial data retrieved by the application is retained for as long as it is needed for management, reporting, audit, and tax purposes, consistent with the Company's records retention practices and applicable law. When a QuickBooks Online connection is revoked, the application stops retrieving new data immediately. On request from a Company officer, previously retrieved data and the associated stored credentials will be deleted from the application's database.
7. Revoking access
An administrator of a connected QuickBooks Online company may disconnect the application at any time, directly from within QuickBooks Online. Instructions are provided on the Disconnect page. Revocation immediately invalidates the application's credentials for that company.
8. Changes to this policy
We may update this policy as the application changes. The effective date at the top of this page reflects the most recent revision. Because the application has no external users, changes are communicated internally to the executive team.
9. Contact
Questions about this policy, or requests relating to data held by the application, should be directed to the Office of the Chief Business Officer, 108 Performance Holdings, LLC, Knoxville, Tennessee, at greg@108performanceacademy.com.