Privacy Policy

1. Introduction

Good Samaritan Software LLC ("Company," "we," "us," or "our") operates the FreshBooks MCP Hosted Server service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored securely hashed)

2.2 Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers. Stripe may collect and store payment information according to their privacy policy.

2.3 FreshBooks Data

When you connect your FreshBooks account, we store:

• OAuth access tokens (encrypted)
• OAuth refresh tokens (encrypted)
• FreshBooks account ID
• FreshBooks business ID

Important: We do NOT store your FreshBooks data (invoices, clients, expenses, etc.). We only store the authentication tokens necessary to access your FreshBooks account on your behalf.

2.4 Usage Data

We automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent
• API usage statistics

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process your subscription payments
• Authenticate requests to FreshBooks on your behalf
• Send you important service updates
• Improve our Service
• Comply with legal obligations

4. Data Security

We implement security measures including:

• AES-256-GCM encryption for OAuth tokens at rest
• HTTPS/TLS for all data in transit
• Row-level security in our database
• Regular security audits

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Sharing

We may share your information with:

• Stripe: For payment processing
• Supabase: For database hosting
• Vercel: For application hosting
• PostHog: For analytics (anonymized)

We do not sell your personal information to third parties.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete your data within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Disconnect your FreshBooks account at any time

8. Third-Party Services

Our Service integrates with FreshBooks. Your use of FreshBooks is subject to their privacy policy and terms of service. We are not responsible for FreshBooks' privacy practices.

9. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect information from children under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Good Samaritan Software LLC
Email: privacy@freshbooks-mcp.com