Privacy Policy
Last updated: June 29, 2026
This Privacy Policy explains how NYS Supply(“we,” “us,” or “our”) handles information in connection with the NYS Supplyoperations application (the “Application”) at nys.supply. The Application is private, internal software used to run our wholesale plumbing supply business — managing orders, customers, the product catalog, purchasing, and accounts receivable.
Who can use the Application
The Application is restricted to the owner of NYS Supply and authorized employees who have been issued login credentials. It is not a consumer product and is not offered to the general public.
Information we handle
To operate the business, the Application stores business records such as customer accounts, product and pricing information, orders, purchase orders, invoices, and payment and receivable records. Access is controlled through individual user logins.
QuickBooks Online integration (read-only)
The Application can connect to QuickBooks Online through Intuit’s official OAuth 2.0 authorization. This connection is strictly read-only:
- We only pull data from QuickBooks for reference inside the Application — for example, company information, customers, products and items, and invoices (accounts receivable).
- We never write, create, update, or delete any data in your QuickBooks company. The Application issues read requests only.
- The connection is authorized by the business owner and can be disconnected at any time from Settings → QuickBooks. Disconnecting removes the stored access tokens.
How information is stored and protected
Business data is stored in a managed PostgreSQL database (Supabase) hosted on secure cloud infrastructure. Authentication credentials and integration secrets — including QuickBooks OAuth tokens and the QuickBooks client secret — are encrypted at rest using Supabase Vault and are accessible only to the business owner. Database access is governed by row-level security so each user sees only the data they are permitted to see.
How we use information
Information is used solely to operate NYS Supply’s internal business. We do not sell, rent, or share business or QuickBooks data with third parties for marketing, advertising, or any unrelated purpose.
Data retention
We retain business records for as long as needed to operate the business and to meet legal and accounting obligations. QuickBooks tokens are retained only while the integration is connected and are deleted on disconnect.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision.
Contact
Questions about this Privacy Policy or our data practices can be directed to NYS Supply at the NYS Supply office.