Privacy Policy

This policy explains how Mythril Systems Inc. ("Mythril", "we", "us") handles information in Archangel, our business software, including the QuickBooks Online integration. Mythril Systems Inc. is based at 103 Broadway Boulevard, Grand-Falls, New Brunswick, Canada E3Z 2J6. You can reach us at hello@mythril.systems.

Who this covers

Archangel is set up as a separate workspace for each customer business, at an address such as your-company.mythril.cloud. The business that holds the workspace controls the records in it. For those records we act as a service provider for that business and follow its instructions. This policy also covers the visitors to mythril.systems and the people the business invites into its workspace.

What we collect

• Account details: the name, work email address and role of each person a business adds to its workspace.
• Business records: the customers, suppliers, products, quotes, jobs, invoices, bills, payments, timesheets and similar records the business enters or imports.
• Technical data: sign-in events, error logs and basic usage records, used to keep the service secure and working.
• Messages to us: what you send when you contact us.

QuickBooks Online

A workspace administrator can connect the workspace to a QuickBooks Online company. We ask QuickBooks for the accounting permission (com.intuit.quickbooks.accounting) only, and only after the administrator signs in to QuickBooks and approves it.

• What we send to QuickBooks: invoices, credit notes, supplier bills and payments recorded in Archangel, and the customers, suppliers and products they refer to, as the administrator chooses.
• What we read from QuickBooks: the company's account, tax and similar lists used to map entries, the current balance and paid status of the invoices and bills Archangel posted, and, when the administrator asks, customers, suppliers and products to match against Archangel's records. We do not import QuickBooks' own invoices, bills or payments into Archangel.
• Sign-in tokens: QuickBooks gives the workspace a token that lets it act on the connected company. It is stored in that workspace and used only for the connection the administrator set up. Our shared sign-in redirect service never sees a token or a client secret.
• How we use it: only to provide the sync the administrator turned on. We do not sell QuickBooks data, use it for advertising, or use it to build profiles of people.

Disconnecting and deletion

• Disconnect: an administrator can disconnect QuickBooks at any time from the QuickBooks settings page in the workspace. We revoke the token with Intuit, delete the stored token, clear the link to the QuickBooks company, and turn the sync off. A business can also remove the app from within QuickBooks.
• Records already in Archangel: records that were synced stay in the business's workspace as its own records until the business deletes them or closes the workspace.
• Deletion on request: ask the workspace administrator, or write to us, and we will delete a person's information that we hold as the business's service provider, unless the law requires us to keep it. When a business ends its contract we delete its workspace and its backups within a reasonable time, normally within 90 days.

Where information is kept and who else handles it

Workspaces run on Frappe Cloud infrastructure in Canada and Germany. We use Cloudflare to route sign-in redirects and web traffic. These providers process information only to run our service for us. We do not sell personal information, and we share it only with these providers, when the law requires it, or with your permission.

Security

Workspaces are separated from one another. Connections use HTTPS, access is limited by role, and secrets such as sign-in tokens are stored encrypted. No system is completely secure, and we tell affected businesses without undue delay if we learn that their information was exposed.

Your choices and rights

You may ask to see, correct or delete personal information we hold about you. We answer requests from the business that holds the workspace first, because it controls those records. Residents of Canada can also contact the Office of the Privacy Commissioner of Canada.

Changes

If we change this policy we will update the date at the top. If a change is significant, we will tell workspace administrators by email.

Contact

Mythril Systems Inc., 103 Broadway Boulevard, Grand-Falls, New Brunswick, Canada E3Z 2J6. Email hello@mythril.systems.