Effective date: November 7, 2026

Provis Command Center Privacy Policy

This policy covers Provis Command Center, the internal business application operated by Provis Coffee Roasters (“Provis”). It supplements, rather than replaces, the privacy policy for the Provis storefront. Provis determines how the application uses connected data and does not process it on Intuit’s behalf.

Information accessed

When an authorized administrator connects a business account, Command Center may access the account’s company identifiers, financial reports, transaction records, and related customer, vendor, product, or account details needed for the enabled business functions. The application also handles authorization credentials and operational records used to maintain connections and review access. The QuickBooks integration must be authorized before it can access live accounting data.

Purpose and access

Provis uses this information for its internal reporting, reconciliation, operational analysis, and administration. Access is limited to authorized personnel and approved services performing those functions. An account connection does not automatically grant every automated agent access. Provis does not sell connected accounting data or use it for third-party advertising.

Processing providers and AI

The application uses Provis-managed computing systems and approved infrastructure providers. Connection credentials are stored in AWS Secrets Manager and are not intended to appear in prompts, reports, or application logs. Connected accounting data may be sent to an external AI processing service only after Provis confirms that the specific use is permitted under applicable provider terms and law, establishes any required written data-processing agreements, and completes required disclosures, consent, and data-handling configuration. This policy does not itself authorize that transfer. Provis does not use connected accounting data to train a general-purpose AI model.

Protection and retention

Provis uses access controls and encrypted connections to protect authorized integrations. These measures do not eliminate every security risk. Provis retains information as needed for the approved business purpose, support and security, and applicable recordkeeping obligations. Revoking a connection prevents further access through that authorization but does not automatically delete records already retained.

Control and requests

An authorized administrator can disconnect Command Center through the connected provider’s app settings. To request access to, correction of, or deletion of information held by Command Center, contact Provis. Provis will verify the requester’s authority and address the request subject to applicable legal and business-record obligations. Records held independently by QuickBooks or other providers remain governed by their policies.

Changes and contact

Provis will update this page when its data practices change and communicate material changes to authorized users. Contact hello@proviscoffee.com with privacy, access, or security questions.