Privacy Policy

Coyote Hill Technology · Effective August 30, 2026 · Version 1.0

This Privacy Policy explains how Coyote Hill Technology ("we," "us") collects, uses, protects, and retains information within the Coyote Hill ERP application (the "Application"). The Application is an internal business system used by Coyote Hill Technology and its authorized staff to run inventory, projects, service, billing, and accounting.

1. Information We Collect

Business records we enter and manage: customers, vendors, jobs, inventory, invoices, bills, and accounting entries.
Account information for authorized users: name, work email, role, and authentication details managed through Microsoft Entra ID.
Bank transaction data retrieved through Plaid on a read-only basis for accounts the account holder chooses to connect (transaction descriptions, amounts, dates, and account/balance information).

We never collect or store bank login credentials. Bank connections are authenticated by the account holder inside Plaid's own secure widget; the Application receives read-only transaction data and has no ability to move money.

2. How We Use Information

Information is used solely to operate the business — recording transactions, categorizing and reconciling banking activity, producing invoices and financial reports, and managing projects and service. We do not sell personal information, and we do not use it for advertising.

3. Consent

Authorized users consent to the collection and processing described here by using the Application. When a bank account is connected, the account holder provides explicit consent through Plaid's Link flow before any data is shared. A connection can be removed at any time from the Banking section, which stops further data retrieval.

4. Data Sharing & Service Providers

We share information only with the service providers required to run the Application:

Microsoft Azure — secure hosting, database, and identity (sign-in).
Plaid — read-only bank transaction data. Plaid's handling of end-user data is described in the Plaid End User Privacy Policy.
GitHub — private source-code repository.

5. Data Security

Data is encrypted in transit (HTTPS/TLS) and at rest (Azure managed encryption). Access is controlled by role-based permissions and multi-factor authentication. Further detail is in our Information Security Policy.

6. Data Retention & Deletion

We retain business and financial records for as long as they are needed to operate the business and to meet legal, tax, and accounting obligations (generally at least seven years for financial records, consistent with applicable law). Bank transaction data is retained only while a connection is active and while needed for bookkeeping and reconciliation. When data is no longer required, or on a verified deletion request where no legal retention obligation applies, it is securely deleted. This retention and deletion policy is reviewed at least annually.

7. Your Rights

Individuals may request access to, correction of, or deletion of their personal information, subject to legal retention requirements. To make a request, contact us using the details below.

8. Changes to This Policy

We may update this policy as the business or applicable law changes. The effective date above will be revised when we do, and this policy is reviewed at least annually.

9. Contact

Coyote Hill Technology · Baxter, IA
Jarrett Floss · jarrett.floss@coyotehilltechnology.com · (641) 275-7210