Privacy Policy

This Privacy Policy describes how WoTo Properties, LLC and the Council of Owners of Chicago Court Condominium ("Operator," "we," "us," or "our") collect, use, store, and protect information through the Chicago Court management web application, owner/tenant portal, and Intuit QuickBooks Online integration (the "Application").

This policy is publicly available to all users and satisfies the privacy disclosure requirements for our Intuit QuickBooks Online developer integration.

We collect and process only the minimum information necessary to administer Chicago Court Condominium (5502 58th St, Lubbock, TX 79414), its units, leases, CAM assessments, and accounting records:

• Account & Identity Information

  Name, email address, phone number, organization role, and associated owner or tenant party record when you sign in via one-time passcode or magic link.

• Property, Lease & Billing Records

  Condominium suite ownership shares, commercial lease terms, rent schedules, CAM assessment allocations, deposit balances, and billing account statements.

• Intuit QuickBooks Online Accounting Data

  When an authorized administrator connects a QuickBooks Online company file using OAuth 2.0 (scope: com.intuit.quickbooks.accounting), the Application accesses company metadata (CompanyInfo and Realm ID), chart of accounts, general ledger journal entries, expense lines, vendor names, and customer/invoice references needed to mirror CAM accounts and categorize property expenses.

• Security & Audit Logs

  Authentication timestamps, synchronization run logs, and an audit trail of administrative changes (who created or updated a record and when) to maintain financial integrity.

We use the information we collect exclusively for the internal operation and financial administration of Chicago Court Condominium and WoTo Properties, LLC:

• CAM & General Ledger Reconciliation

  Mirroring QuickBooks Online general ledger transactions into the Application’s immutable ledger and categorizing CAM expenses across condominium cost pools.

• Owner & Tenant Portal Access

  Providing condominium unit owners and commercial tenants with transparent access to their billing accounts, statements, lease schedules, and CAM reconciliations.

• Transactional Communications

  Sending passwordless sign-in links, verification codes, assessment invoices, and annual CAM statements to designated billing and statement contacts.

• Security, Auditing & Compliance

  Enforcing role-based access controls, preventing unauthorized access, and maintaining accurate historical accounting records.

We implement industry-standard technical and organizational safeguards to protect personal and financial data:

• Encryption in Transit & at Rest

  All traffic between your browser, Cloudflare Workers, Supabase, and Intuit QuickBooks Online APIs is encrypted in transit using HTTPS/TLS. Database records and backups are encrypted at rest.

• Encrypted Token Vault

  QuickBooks Online OAuth 2.0 refresh tokens are never exposed to client browsers; they are stored encrypted inside Supabase Vault and accessed only by server-side Edge Functions during authorized synchronization or token revocation.

• Row-Level Security (RLS)

  Every database table enforces PostgreSQL Row-Level Security policies tied to organization membership, role permissions, and specific party/unit ownership or tenancy.

We treat your personal information and QuickBooks Online accounting data as strictly confidential:

• No Sale of Data

  We never sell, rent, lease, or trade personal information or QuickBooks Online data to any third party.

• No Third-Party Advertising or AI Model Training

  We do not share data with advertising networks or data brokers, and we do not use QuickBooks Online data to train public or third-party artificial intelligence or machine learning models.

• Infrastructure Subprocessors Only

  Data is processed only by core infrastructure providers acting on our instructions—specifically Supabase (database, authentication, and encrypted vault), Cloudflare (application hosting and Turnstile bot protection), and Intuit Inc. (when you authorize a QuickBooks Online connection)—or when required by law.

Organization administrators have full control over the QuickBooks Online connection and can revoke access at any time:

• In-App Disconnection

  Navigate to Settings → QuickBooks inside the Application and click "Disconnect." This immediately invokes Intuit’s OAuth token revocation endpoint, marks the connection as disconnected, and deletes the stored OAuth refresh token from our encrypted vault.

• Revocation via Intuit

  You may also revoke the Application’s access directly inside your Intuit / QuickBooks Online account under Apps → My Apps.

We retain accounting, lease, and CAM assessment records for the period required to administer condominium finances, fulfill lease obligations, and comply with applicable Texas condominium, tax, and accounting record-keeping requirements.

You may request access to, correction of, or deletion of your personal contact information—or request removal of disconnected QuickBooks Online integration tokens—at any time by contacting us at chicagocourt@wotocapital.com. We respond to all verified privacy requests within 30 days.

The Application uses strictly necessary first-party cookies to maintain your authenticated Supabase session, remember your light/dark display preference, and verify Cloudflare Turnstile bot challenges on the sign-in screen. We do not use third-party advertising, behavioral profiling, or cross-site tracking cookies.

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. When we make updates, we will revise the Effective Date at the top of this page.