Privacy Policy

Last updated September 13, 2026

Who we are

The ARLO Portal (“the Portal”) is a private, internal business application operated by Kalinowski Enterprises and its affiliated companies (“we”, “us”). It is not a public product. It is not offered to, sold to, or made available to the general public, and accounts exist only for our own personnel.

Who can use it

Access is by invitation only. Each person signs in with an individually issued account, and the financial areas of the Portal are further restricted to a small, explicitly named group of authorized users. There is no self-service signup for those areas.

QuickBooks data

Where a company chooses to connect its QuickBooks Online account, an authorized administrator of that company authorizes the connection through Intuit’s own sign-in page. We never see, receive, or store QuickBooks passwords.

• We only read. The Portal retrieves accounting information — company details and financial figures used for budget-versus-actual reporting. It contains no code that creates, edits, or deletes anything in QuickBooks.
• Why we read it.Solely to display our own companies’ budgets and actual results to our own authorized finance personnel.
• Access tokens are encrypted. The revocable tokens Intuit issues are stored using AES-256-GCM encryption with a key held separately from the database, so the database alone cannot reveal them. They are readable only by the application server.
• Revocable at any time. A connection can be removed from within the Portal or directly from QuickBooks, which immediately ends our access.

Google account and Gmail data

An agent may choose to connect their Gmail account to the Portal (“Connect Gmail” on their profile). The connection is authorized through Google’s own sign-in and consent screen. We never see, receive, or store Google passwords.

• What we ask Google for. Three things only: your Google identity (openid), your email address (email) — so the Portal knows which account was connected — and permission to send email on your behalf (gmail.send). We do not request, and the application contains no code to use, any permission to read, search, modify, label, or delete your mail, contacts, or calendar.
• What we do with it.Solely to send, from your own Gmail account and only when you ask, transaction documents you have chosen to a recipient you have named — for example, sending a signed contract to a lender who requested it. Each send is shown to you in full and requires your explicit approval before it goes.
• What we store.The revocable token Google issues for that permission, encrypted with AES-256-GCM using a key held separately from the database and bound to your account, so the database alone cannot reveal it; the Gmail address you connected; and a record of each send (who sent it, to whom, the subject, which documents by name and checksum, and Google’s message identifier) so compliance can account for every document that leaves a file. We never store the content of your mailbox — we never have access to it.
• Revocable at any time.Disconnect from your profile in the Portal, or remove the Portal’s access from your Google Account permissions page; either ends our ability to send immediately, and we delete the stored token.
• Limited Use.The Portal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing feature described above; it is never sold, never used for advertising, never used to train models, and never transferred to others except as needed to send the email you asked for or as required by law.

AI assistants (the ARLO connector)

An agent may connect an AI assistant of their choice to the Portal through the ARLO connector. The assistant then acts as that agent: it can see only the files the agent can see, and everything it does is recorded under the agent’s name. The connector does not expose Google or QuickBooks credentials to the assistant. Sending a document through the assistant follows the same rule as above — the exact email is shown to the agent and sent only on their explicit approval.

What we do not do

• We do not sell, rent, or trade any data, including Google or QuickBooks data.
• We do not share Google or QuickBooks data with third parties or use it for advertising.
• We do not use Google or QuickBooks data to build products or services for anyone else, and we do not use it to train artificial-intelligence or machine-learning models.
• We do not read anyone’s email. The application holds no permission that would allow it.
• We do not access QuickBooks data belonging to anyone outside our own companies.

Other information we handle

For people with Portal accounts we hold basic account information — name, work email address, role, and a record of actions taken in the Portal — for authentication, permissions, and an audit trail. Business records our companies create in the course of operating (such as transaction and compliance records) are held for those business purposes.

Storage, retention, and security

Data is stored with our hosting and database providers in the United States. Access is restricted at the database level so that records are reachable only by the accounts entitled to them, and changes to financial records are recorded with the identity of the person who made them. We retain information for as long as needed for the business purposes above or as required by law. QuickBooks data, and the Gmail token, are removed when a connection is disconnected, subject to any record-keeping obligations; the record of documents already sent is kept as part of the transaction file.

Your choices

Because the Portal serves only our own personnel and companies, requests to access, correct, or delete information — including disconnecting a QuickBooks company or a Gmail account — should be made directly to us using the contact below, and we will act on them promptly.

Changes

If the Portal’s handling of data changes, this page will be updated and the date above revised.

Contact

Kalinowski Enterprises, Casper, Wyoming, United States.
Email: brock@grid307.com