LW CONCEPT Customer Portal — Privacy Notice

Effective date: November 6, 2026

Operator: Living Water Trading Inc.
Privacy contact: sales@livingwatertrading.com

1. Scope

This notice describes information handling for the LW CONCEPT Customer Portal (the LWT APP integration) operated by Living Water Trading Inc. It does not describe every activity of Living Water Trading Inc. or replace the privacy notices of Intuit or other independent services.

2. Information entered in the portal

The current demonstration allows users to enter a company name, contact email, purchase order number, shipping address, order items and optional notes. Please do not enter payment card details, QuickBooks passwords or sensitive personal information in these fields.

3. Current demonstration storage

Demonstration purchase orders are saved in the current browser's local storage. They are not submitted to Living Water Trading Inc. or QuickBooks by the demonstration order form.

Records may remain until the browser's site data is cleared. Anyone with access to the same browser profile may be able to view them. Clearing site data removes these local records and may also remove other site preferences.

4. Hosting and external resources

The portal is hosted through Sites and currently loads fonts from Google Fonts. Loading the portal and external resources involves network requests that can disclose an IP address and browser request information to the relevant providers. Their own notices describe their processing.

5. Administrator QuickBooks connection

After an authorized company administrator connects QuickBooks, the server reads active inventory items, including product identifiers, names, SKUs, inventory quantities and standard sales prices. Results are displayed only to the designated portal administrator for internal review, are processed during the request and are not saved as an inventory dataset by this integration. The integration does not write accounting records, perform data modeling across customers or send QuickBooks data to a generative AI model.

The portal uses the signed-in account identifier and email to authorize administrator access. Application credentials and OAuth tokens are encrypted in Cloudflare D1 storage; the encryption key is held separately in Sites runtime secrets. Sandbox and production records are isolated. The server uses a short-lived browser cookie and a one-time authorization state to secure the connection flow. Tokens remain stored until the administrator disconnects; disconnecting revokes authorization at Intuit and removes the stored tokens when revocation succeeds. Application credentials remain for reconnection; contact us to request their removal. Diagnostic records contain operation labels, HTTP status, timestamps and Intuit request identifiers, excluding credentials, tokens and raw accounting payloads; records older than 30 days are pruned when new events are recorded. Sites and Cloudflare operate the hosting and storage infrastructure, and Intuit processes authorization and API requests under its own notices. Future customer-visible QuickBooks data or order-writing features will require an updated notice before activation.

6. Questions and requests

Contact sales@livingwatertrading.com with privacy questions or requests concerning information held by Living Water Trading Inc. We may need to verify your identity and authority before acting on a request.

For demonstration records stored only in your browser, clear the portal's site data to remove those records.

7. Updates

This notice takes effect on the date shown above. Changes to the portal's information handling will be reflected in an updated notice.