Privacy Policy

One Business Center, also called Chambers, is operated by Turning Edge Holding Co. This proposed policy covers account holders, company teams, and clients using the app and its private client portals.

Companies control the business and client records they enter. A company's own privacy obligations may also apply. Contact that company about its use of your records; contact One Business Center about operation of the app.

The app handles account and contact details, company profiles, client information, uploaded documents and folders, messages, appointments, tasks, signatures and their audit records, invoices, payment records, employee time entries, payroll information, and bank details entered by authorized users.

Portal activity includes dates and times of portal visits and sign-in attempts. Technical records may include errors, access records, and information needed to secure and operate the service. Financial and client records may contain sensitive information; upload only information you are authorized to handle.

Billing records may include the responsible company's identity, service periods, itemized expenses and receipts, fee disclosures, payment references, credits, refunds, reversals, and billing-dispute correspondence. Any future agreed interest record must identify its basis and calculation. These records are used for billing, reconciliation, dispute handling, and required financial recordkeeping, not to grant one company access to another company's transactions.

Information is used to provide requested company and client services, store and deliver documents, record signatures, send requested emails, manage invoices and payments, calculate payroll using configured rates, record time, support users, and protect the app.

Client portal visits and sign-in activity are made available to authorized staff so they can follow up on client access. This activity does not prove who personally used a shared portal link.

Company records are restricted by membership and authorized managed access. Platform administration does not by itself grant access to unrelated company records. Clients are limited to their own portal information; payroll banking data has additional role restrictions.

Hosting, storage, email delivery, payment processing, and services you authorize may process information needed to provide their services. Lovable provides application hosting and Cloud services; Stripe processes configured card payments. A company's email or payment service may have its own terms and privacy policy. Information may also be disclosed where required by applicable law.

Card details entered into Stripe's hosted checkout are processed by Stripe; this does not mean all financial information is held only by Stripe. Authorized company users may separately save bank and payroll details in the app, where additional access restrictions apply. Share expense receipts and billing-dispute records with a processor, payroll provider, professional adviser, or lawful collection service only when necessary, authorized, and legally permitted; exclude unrelated company and employee information.

No software can guarantee complete security. Use strong passwords, limit staff access, and protect portal links and devices.

Xero is optional and is not connected merely by opening a Xero dashboard link. The account holder must authorize access and identify the relevant organization before a Xero data feature is enabled. Shared workspace connections belong to the authorizing account; they do not authorize access to every company's account.

Any Xero feature must limit access to the authorized organization and the requested accounting purpose. Xero data must not be used to train or improve AI models, sold, or aggregated across customers. If a feature would send Xero data to another third party, its purpose and privacy implications must be disclosed and consent obtained before doing so. You can revoke connected-app access in Xero.

Payroll execution, bank feeds, lending, insurance, and new payment workflows are not enabled by this setup. Additional permissions or provider approval may be required for such services.

The app offers optional AI-assisted features. Information you submit to an AI feature may be processed by the service providing that feature. Do not submit confidential or sensitive material without appropriate authority and review of the applicable service terms. AI output must be reviewed before use and is not professional advice.

Xero accounting information must not be sent to an AI model for training, fine-tuning, or model improvement.

If an account holder requests a morning operational briefing, the feature summarizes only companies where that person has current owner or manager permission. It uses recorded sales totals, appointment counts and limited open-task details, not employee banking numbers, payroll details, client contact details or full documents. The summary is emailed to the saved owner notification inbox. Disable the briefing to stop future summaries; sent emails remain subject to the recipient's and email provider's retention practices.

The app uses browser storage and sessions for sign-in and app operation. Company records may remain after an account is deactivated, including records needed by other authorized members and records subject to accounting or legal retention obligations. Backups and third-party services can retain copies under their own practices.

Clients can update permitted profile fields in their portal. Contact the company responsible for your records, or the contact below, to request access, correction, export, or deletion. Requests are subject to identity verification, applicable law, other people's rights, and required record retention. Final retention periods and request procedures require owner review before this draft is adopted.

This is a draft, not an adopted final policy. An approved version should identify its effective date, verified service-provider practices, and any legally required notices. Material changes should be communicated to affected users as required by law.