LX-KBD Flux Privacy Policy

Last updated: May 24, 2026

This Privacy Policy describes how Kitchen & Bath Direct USA ("we") handles information when you use the LX-KBD Flux Chrome Extension ("Software"). The Software is an internal sales workflow tool distributed only to authorized Kitchen & Bath Direct USA employees.

1. Information We Access

The Software accesses your QuickBooks Online account data — including invoices, purchase orders, vendors, and items — solely to perform automated workflow tasks initiated by you (creating purchase orders from invoices, logging purchase orders to internal tracking sheets).

2. Data Storage and Transmission

QuickBooks authorization is held centrally by Kitchen & Bath Direct USA's LX-KBD Flux backend (hosted on Render), not in your browser. An administrator authorizes the company's QuickBooks connection once; the backend stores the resulting OAuth tokens encrypted at rest and refreshes them automatically. The extension requests a short-lived access token from the backend only as needed to read or create QuickBooks records on your behalf.

When you trigger the "Write to D/P Sheet" action on a purchase order, a limited set of purchase order fields (document date, document number, vendor name, vendor warehouse code where applicable, memo, sales rep / invoice reference, pickup time) is transmitted to our backend (LX-KBD Flux backend, hosted on Render) for the sole purpose of appending a row to Kitchen & Bath Direct USA's internal D/P tracking Google Sheet. The backend records an audit entry containing only the purchase order ID, the resulting Sheet row number, and a timestamp — no purchase order content is retained server-side.

3. Sub-processors and Data Sharing

We rely on the following infrastructure providers to operate the Software. They do not access your data for their own purposes:

• Intuit (QuickBooks Online API) — source of your business data.

• Google (Google Sheets API) — the destination Sheet is owned and controlled by Kitchen & Bath Direct USA.

• Render — hosts our backend, which holds the company's QuickBooks connection.

We do not sell, share, or transmit your data to any other third party. We do not use your data for advertising, analytics, or profiling.

4. Data Retention

The company's QuickBooks connection is held by the backend until an administrator disconnects it (via QuickBooks' connected-apps settings) or it is revoked. Backend audit entries (purchase order ID + Sheet row number + timestamp) are retained indefinitely for write-deduplication and contain no purchase order content.

5. Contact

For privacy questions, contact: bowen@kandbusa.com