Privacy Policy

Last updated: November 3, 2026

This Privacy Policy explains how FrostWave Technologies, LLC ("we," "us," or "our") collects, uses, and protects information in connection with 273HQ (the "Service"). By using the Service, you agree to the practices described here.

1. Information We Collect

We collect information in a few different ways:

• Account and company information you provide when registering - name, email, company name, and role.
• Vendor data read from your connected QuickBooks Online or Xero files - vendor names, contact details (email, phone, address), bills and payments. Bank account and tax ID numbers are not stored: each is reduced on receipt to a keyed one-way fingerprint plus its last four digits, which cannot be reversed. Other contact details are stored and shown masked, and a full reveal is logged.
• Accounting connection data for QuickBooks Online or Xero once you connect an account, such as authorization tokens and, if you turn on holds, the hold notes and name prefix we write to a vendor record.
• Billing information handled by our payment processor, Stripe. We receive limited billing details (such as plan, subscription status, and a masked card summary) but never your full card number.
• Usage data such as pages visited and general engagement in the application, used to operate and improve the Service. Our marketing site does not currently use analytics cookies (see our Cookie Policy).

2. How We Use Information

We use the information above to: operate and improve the Service; watch your vendor lists for risky changes, send alerts, record verification callbacks and holds, and keep an audit log; process payments and manage subscriptions; authenticate your account; communicate with you about the Service (including product updates); and understand how our marketing site is used so we can improve it.

3. Third-Party Service Providers

We rely on trusted third parties to provide parts of the Service, each of which processes data under its own privacy policy:

• Auth0 - authentication and login.
• Stripe - subscription billing and payment processing.
• Email delivery provider - alert and notification emails.
• QuickBooks Online / Xero - accounting sync, only for accounts you connect.

We don't sell your personal information to third parties.

4. Data Sharing and Disclosure

Beyond the service providers above, we may share information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).

5. Data Retention

We retain account, vendor snapshot, exception, verification, audit log, and accounting connection data for as long as your account is active.

Deleting your account. The account Owner can delete the account at any time from Account Settings. When you do, your subscription is cancelled right away, your accounting connections are disconnected, and access is paused for everyone on your team. After a 30-day grace period, during which you can cancel the deletion and restore your account, we permanently delete your account data, including vendor snapshots, exceptions, verifications, audit logs, alerts, reports, team members, and their login identities. You can instead choose to skip the grace period and have your data deleted immediately. Before deleting, you can download a copy of your data.

Backups. Copies of deleted data in our backups are overwritten on a rolling basis, within about 35 days after deletion.

What we keep. We keep only what the law requires or permits: billing and transaction records (such as invoices, amounts, and tax information) for about seven years for tax and accounting purposes, and a minimal record that your deletion took place, including a one-way hash of the Owner's email address, so that we can show we honored the request. Hold notes or name prefixes already written to your accounting software (QuickBooks Online or Xero) are held by those providers and are not removed by us.

6. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can delete your account yourself in the app, as described under Data Retention above. To exercise any other right, contact us at info@273hq.com and we'll respond within the time required by applicable law.

7. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls on our systems. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Children's Privacy

273HQ is a business tool and isn't directed to, or intended for use by, children. We don't knowingly collect personal information from children.

9. International Data Transfers

Our service providers may process data in countries other than your own. Where required, we take steps intended to ensure such transfers comply with applicable data protection law.

10. Changes to This Policy

We may update this Privacy Policy as the Service evolves. We'll update the "Last updated" date above when we do, and material changes will be communicated to registered users.

11. Contact Us

Questions about this Privacy Policy, or a request regarding your data? Reach us at info@273hq.com.