Privacy Policy

Eddie is an executive dashboard operated by JHC Consulting Group ("we", "us", "our"). Eddie reads business data from the services you connect and presents it back to you as a read-only dashboard. This policy explains what data we handle and how.

Account information: your name, email address and role, used to sign you in and control access.

Connected-service data: when you authorise a connection (for example WorkflowMax, Xero or HubSpot), Eddie reads business records from that service, such as jobs, invoices, timesheets, contacts and financial figures, so it can display them. Eddie requests read-only access wherever the service supports it.

Usage information: basic technical logs (for example error and sync status) needed to run the service reliably.

We use your data only to provide the dashboard: to sync, store and display your own business figures to you and the people in your organisation you authorise. Eddie is a reporting tool. We do not sell your data, and we do not use it for advertising.

Eddie does not invent figures. Every number shown is drawn from a source you connected or is transparently derived from it; where a value is unavailable, Eddie shows a pending state rather than a fabricated number.

Your data is stored in a managed PostgreSQL database (Supabase) and served through hosting and worker providers (Vercel and Railway). These providers process data on our behalf to run the service. The connected services you authorise (such as WorkflowMax, Xero and HubSpot) remain the systems of record for the data Eddie reads from them.

Access to your data is restricted to your own organisation through per-tenant isolation and role-based access. Credentials and access tokens are held server-side and are never exposed to the browser. Connections are encrypted in transit.

We keep your data for as long as your organisation uses Eddie. You can ask us to disconnect a source or delete your data by contacting us, and we will action reasonable requests. Disconnecting a source stops further syncing from it.

Consistent with the Australian Privacy Act, you may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Contact us using the details below and we will respond within a reasonable time.

We may update this policy from time to time. The "last updated" date above reflects the current version. Material changes will be notified through the service where practical.

Questions about this policy or your data can be sent to scott@jhc.consulting.