Privacy notice

Who operates Doehrman Ops

Doehrman Ops is operated by Douglas Doehrman on behalf of the businesses he owns and administers. The business assigned to a workspace is the controller of the records in that workspace. Doehrman Ops is not offered as a public consumer service and does not permit public account creation.

Information we collect

• Account identity, contact information, authentication records, and access roles.
• Bank and credit-card connection information authorized through Plaid, including institution and account metadata, balances, transaction details, and connection status. Bank credentials are entered at the financial institution or Plaid and are not received by Doehrman Ops.
• Receipts, invoices, statements, leases, tax records, accounting classifications, owner notes, and related source documents.
• Security, audit, and diagnostic records needed to operate and protect the application.

How information is collected

Information is supplied by an authorized user through direct upload, forwarded receipt email, owner entry, or an explicit connection made through Plaid Link. Plaid connections are optional and require the user to choose the institution and accounts to authorize.

How information is used

• Import read-only source transactions for review and reconciliation.
• Match receipts and statements with imported financial activity.
• Prepare owner-reviewed bookkeeping, tax-support, and business reports.
• Authenticate users, enforce workspace permissions, and investigate security events.
• Maintain reliable records and comply with applicable tax, accounting, and legal obligations.

Service providers and disclosures

Information is shared only as needed with service providers that operate the application: Plaid for bank connectivity; Neon for PostgreSQL data storage; Vercel for application hosting; Cloudflare for private object storage, email routing, and network services; OpenAI for owner-requested document extraction and categorization; and Resend for application email. Providers process information under their own terms and security controls.

Doehrman Ops does not sell personal or financial information, use it for behavioral advertising, or disclose it to data brokers. Information may be disclosed when required by law or necessary to protect the application, its users, or the businesses whose records it holds.

Security

Access is invitation-only and role-restricted. Production data is protected with encrypted transport, encrypted storage, private document storage, server-side authorization, database row-level security, least-privilege service credentials, and audit records. Plaid access tokens receive additional application-level authenticated encryption before storage.

Retention, disconnection, and deletion

Records follow the public Data Retention and Deletion Policy. Disconnecting an institution stops future collection after the connection is revoked. Historical accounting and tax-support records may be retained when required for legitimate business, tax, security, or legal purposes.

Access and requests

An authorized user may request access, correction, export, disconnection, or deletion of eligible information. Requests are verified before action and may be limited by tax-record, legal-hold, fraud-prevention, or security obligations. Contact doehrman@gmail.com.

Changes to this notice

This notice is reviewed at least annually and after material changes to the application, its providers, or its use of financial data. The current effective date appears at the top of this page.