URETEK USA, Inc. (“URETEK,” “we,” “our,” or “us”) is committed to protecting the privacy and security of information processed through our internal business systems. This Privacy Policy describes how URETEK uses and protects information in connection with our internal integration between Intuit QuickBooks and Salesforce (the “Integration”). The Integration is used solely for internal business operations and is not a public-facing application.

URETEK USA, Inc. 13900 Humble Road Tomball, Texas 77375 Phone: 800-240-7868 Email: [email protected]

This Privacy Policy applies exclusively to data processed through URETEK’s internal QuickBooks-to-Salesforce Integration. The Integration is used by authorized URETEK personnel to synchronize financial and project-related data for internal operational visibility, including project tracking and profitability reporting. This policy does not govern unrelated website data collection practices.

Through the Integration, URETEK may process the following categories of information, depending on system configuration: A. QuickBooks Data • Customer profiles • Vendor profiles • Items and products • Invoices and bills • Payments and balances • Accounting-related transaction data • Associated financial metadata B. Salesforce Data • Configured records and fields updated by synchronization • Project and customer records linked to accounting data The Integration does not delete records in either system. C. Technical and Log Data • Synchronization timestamps • Account or user identifiers • API metadata • Error logs and system activity records

URETEK processes information through the Integration solely to: • Synchronize approved QuickBooks data into Salesforce • Provide real-time operational and financial visibility to authorized personnel • Monitor, secure, and maintain system performance • Troubleshoot integration issues • Meet legal, audit, and compliance obligations We do not use the Integration for marketing, profiling, or automated decision-making.

URETEK does not sell personal information. Information processed through the Integration may be shared only as necessary with: • Intuit QuickBooks and Salesforce, as required for system operation • Contracted service providers (e.g., IT, hosting, cybersecurity) subject to confidentiality obligations • Government authorities or law enforcement, when required by applicable law All data sharing is limited to what is necessary to operate, secure, and maintain the Integration.

The Integration does not maintain a separate production database. All synchronized operational data remains within: • QuickBooks • Salesforce Integration logs and technical records are retained for up to ninety (90) days, or longer if required to investigate a security incident, system issue, or legal matter. Logs are deleted in accordance with URETEK’s internal data retention policies.

URETEK implements administrative, technical, and physical safeguards designed to protect information processed through the Integration, including: • Encryption in transit (HTTPS/TLS) • Role-based access controls • Least-privilege permissions • Secure credential management • System monitoring and logging • Internal administrative controls Access to the Integration is limited to authorized personnel only.

The Integration itself does not provide a delete function. Any deletion or modification of records must be performed directly within QuickBooks or Salesforce by authorized personnel in accordance with URETEK’s data retention and governance policies.

Employees and authorized system users may request access to or correction of their information through URETEK system administrators. Customers, vendors, or individuals seeking to exercise privacy rights under applicable law may contact: [email protected] URETEK will verify identity and respond in accordance with applicable privacy laws.

All data processing associated with the Integration occurs within the United States. If information is transferred internationally, URETEK will implement appropriate safeguards consistent with applicable law.

The Integration is not directed to children under the age of 16 and does not knowingly collect or process information relating to children.

URETEK may update this Privacy Policy from time to time. Any updates will be reflected by revising the “Effective Date” above.