B&P Production — Privacy Policy
Last updated: August 25, 2026
1. Overview
This policy describes how Refuge Industries, LLC ("we," "us"), which does business as Bold MFG & Supply and Proper Tool Co., handles data in connection with B&P Production — an internal production management application used by our own employees to run our manufacturing operations.
B&P Production is not a commercial product. It is not sold, licensed, distributed, or made available to any third party. It is used solely by our authorized personnel to schedule, track, and fulfill our own customer orders.
2. Who we are
Refuge Industries, LLC dba Bold MFG & Supply and Proper Tool Co.
13575 Fitzhugh RD 300, Austin, TX 78746
accounts@boldmfg.com
3. Data the application accesses
3.1 QuickBooks Online
B&P Production connects to our own QuickBooks Online company file using Intuit's OAuth 2.0 authorization. It reads the following records:
- Invoices and Sales Receipts — document number, transaction date, customer reference, billing email, shipping address, line items, quantities, descriptions, amounts, memos, and notes
- Items — product names, SKUs, and descriptions
- Customers — name, email address, and shipping address as recorded on a transaction
The application is read-only with respect to QuickBooks Online. It does not create, modify, void, or delete any record in QuickBooks.
3.2 What it does not access
The application does not request or access payroll data, employee records, bank or credit card account numbers, banking connections, tax filings, chart of accounts, journal entries, vendor payment information, or any Intuit product other than QuickBooks Online Accounting.
3.3 ShipStation
The application also connects to our ShipStation account to read shipment records — tracking numbers, carriers, service levels, shipping costs, and ship dates — so that fulfillment status is reflected against the correct order.
3.4 Personal information of our customers
Because our customer orders originate on Shopify and Etsy and flow into QuickBooks Online, the records the application reads contain personal information about our customers — typically name, email address, shipping address, and any personalization instructions they provided with their order.
We process this information solely to manufacture and ship the products those customers ordered from us.
4. How data is used
Order data is used exclusively to:
- Create and track production work for items our customers have ordered
- Route work through our shop and record who completed each step
- Determine promised and due dates
- Produce production tags, pick lists, and packing documentation
- Confirm that an order has shipped
- Report internally on production throughput, cycle time, and rework
Data is not used for advertising, marketing, profiling, automated decision-making about individuals, or any purpose unrelated to fulfilling and tracking our own orders.
5. Storage and security
Order and production data is stored in a PostgreSQL database hosted by Supabase in the United States. The application interface is hosted by Vercel.
Security measures include:
- Encryption in transit (TLS) for all connections
- Encryption at rest for the database
- Row-level security policies enforced at the database layer
- Authentication required for all access, with per-user accounts
- Role-based permissions limiting each employee to the data required for their work
- OAuth tokens and API credentials stored encrypted and never exposed to the browser
- Access logging and error monitoring
We do not store QuickBooks account passwords. Access is authorized through Intuit's OAuth 2.0 flow using revocable tokens.
6. Who has access
Access is limited to employees and contractors of Refuge Industries, LLC who require it to perform their job — production staff, customer service, and management. Access is granted individually and revoked when a person's role changes or their employment ends.
No third party is granted access to the application.
7. Service providers
We rely on the following providers, which process data on our behalf under their own terms and security commitments:
| Provider | Role |
|---|---|
| Supabase | Database, authentication, and file storage |
| Vercel | Application hosting |
| Intuit | Source of order data (QuickBooks Online) |
| ShipStation | Source of shipment data |
We do not sell, rent, trade, or otherwise disclose data to any other party. We may disclose information where required by law, or to protect our legal rights.
8. Retention
Production records are retained for as long as they serve a legitimate business purpose — typically seven years, consistent with our accounting and warranty record retention.
QuickBooks Online tokens are retained only while the connection is active and are deleted when the connection is disconnected.
9. Disconnecting and deletion
Our QuickBooks Online connection can be revoked at any time, either from within the application or from the Apps section of QuickBooks Online. On disconnection, stored OAuth tokens are deleted and no further data is retrieved.
Order data already retrieved is retained per Section 8 unless deletion is requested.
Individuals who wish to request access to or deletion of personal information we hold about them may contact us at accounts@boldmfg.com. We will respond within 30 days.
10. Children
The application is not directed to children and does not knowingly process information from anyone under 16.
11. Changes
We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above.
12. Contact
Questions about this policy:
Refuge Industries, LLC accounts@boldmfg.com 13575 Fitzhugh RD 300, Austin, TX 78746