Privacy Policy

Who This Policy Covers

This policy explains how NextGen Controller Solutions LLC (“NextGen”, “we”, “us”) handles information in connection with ngcontrollers.com and the NextGen client portal. If you are a client, your engagement agreement governs our work for you; where that agreement and this policy address the same subject, the engagement agreement controls.

Information You Give Us

We collect what you provide directly: your name, business email address, company details and role; the responses you submit through our business performance assessment; documents and files you choose to share with us; and the content of messages you send us.

Account Information

Client portal accounts are managed for us by Clerk, our authentication provider. Sign-in credentials are handled by Clerk — we do not receive or store your password. What reaches us is an account identifier, your email address, and whether a session is signed in.

QuickBooks Online Information

If you choose to connect a QuickBooks Online company, the following applies:

• You authorize the connection through Intuit’s own sign-in and consent screens. We never see your QuickBooks username or password.
• What we keep from that exchange is an encrypted authorization credential issued by Intuit, which lets us read on your behalf. Nothing else from the authorization is retained.
• Our connector can construct only a fixed list of read requests: your company information and the Trial Balance, Profit and Loss, Balance Sheet and Cash Flow reports. It cannot construct any other request, and it cannot write to, change or delete anything in your QuickBooks company.
• Reads happen when an import is requested for your engagement. We do not poll your books continuously and run no background jobs against them.
• We keep the financial figures returned by those reports, and a record of each import, so the analyses we prepare for you can be reproduced and reviewed.

You can end our access at any time. See Disconnecting QuickBooks Online.

Website Usage Information

Google Analytics uses cookies and similar technologies to collect information about how visitors use our website — such as pages viewed, interactions, device and browser information, and general usage patterns. We use this to understand website performance and improve our services. We do not currently use Google Analytics for advertising or remarketing.

How We Use Information

We use the information described above to deliver our Controller and CFO advisory services, to prepare the analyses and reports you engage us for, to operate and secure the client portal, to communicate with you, and to improve our services. We do not sell your information.

Service Providers

We use a small number of providers to run the service. They may process information only to provide their service to us:

• Clerk — client portal authentication and account management.
• Render — application hosting (United States).
• Neon — the application database (United States).
• Cloudflare — network delivery and file storage.
• Netlify — hosting of this public website and handling of the website contact form.
• Airtable — recording of website contact-form submissions.
• Google Analytics — website usage measurement.
• Intuit — QuickBooks Online, accessed only at your direction and under the authorization you grant.

Security

The measures we apply to client information include:

• Encryption of information in transit between your browser, our services and our providers.
• Encryption at rest of the QuickBooks authorization credential, which is the only provider credential we hold.
• Database access restricted to least-privilege service accounts, with row-level access controls separating one company’s records from another’s.
• Append-only audit records of connection and credential events.
• Multi-factor authentication available on client portal accounts through our authentication provider.

No system can be guaranteed completely secure, and we do not claim otherwise. We describe these measures so you know what is in place, not as a warranty.

Retention and Deletion

We keep information for as long as it is needed to provide our services to you and for legitimate business, contractual and legal purposes after that. Disconnecting a QuickBooks company destroys the stored authorization credential; a record that the connection existed and was disconnected is retained, and it contains no credential material. You may request deletion of your information, and we will honor such requests subject to applicable legal, contractual, security and record-retention requirements.

Your Choices and Requests

You may ask us to access, correct or delete information we hold about you, ask a question about this policy, or raise a privacy concern, by contacting support@ngcontrollers.com. You may disconnect a QuickBooks Online company at any time without contacting us first — see Disconnecting QuickBooks Online.

Where Information Is Processed

Our application and database are hosted in the United States. If you are located elsewhere, information you provide will be processed in the United States.

Changes to This Policy

We may update this policy as our services change. Material changes will be posted on this page, and the date below will be updated.