Privacy Policy

This Privacy Policy explains how Jobcard Financial LLC collects, uses, discloses, and protects personal information through our website (jobcardfinancial.com) and in the course of providing our financial operations services. It is written to comply with the California Online Privacy Protection Act (CalOPPA) and, where it applies to us, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), along with other applicable United States privacy laws.

1. Information We Collect

a. Information You Provide Directly

You give us information when you use our forms or contact us:

• Newsletter signup: your email address, and your first name if you choose to provide it.
• Value Creation Assessment: your email address, first and last name, company name, trade or service, approximate annual revenue band, your role, and phone number. You may optionally add operating details that sharpen the read: how current your books are, your monthly transaction volume, the number of active jobs you run, the number of bank and card accounts you use, the number of recurring vendors, and the state of your chart of accounts.
• Correspondence: when you email us at info@jobcardfinancial.com, we receive your message and your contact details.
• Financial data (for engaged clients only): in delivering our services we access financial data through authorized connections to your accounting software (such as QuickBooks Online or QuickBooks Desktop) and bank feeds, using OAuth 2.0 or equivalent secure methods. We access only the data the engagement requires.

When you submit any of our forms (newsletter, pop-up, a resource download, or the assessment), we also record basic campaign and referral information, such as the page that referred you and any UTM parameters in the link you followed, along with a browser-generated visitor and session identifier, so we can understand how you found us. We honor Do Not Track and Global Privacy Control here as well: if you have opted out, no such attribution is attached to your submission.

b. Information Collected Automatically

When you visit the website, we and our analytics providers may collect:

• First-party analytics: the pages you view, the page that referred you, any UTM campaign parameters in the link you followed, your device type, browser and user-agent string, and screen width. We also generate random visitor and session identifiers and store them in your browser (localStorage and sessionStorage) to count visits and understand how the site is used.
• Google Analytics 4 (Google): aggregate traffic and usage measurement. Google may set its own cookies and process data under its own policy.
• Microsoft Clarity (Microsoft): a session-analytics tool that records session activity such as mouse movement, clicks, and scrolling (session replay) to show how pages are used. Microsoft may set its own cookies and process data under its own policy.

See Section 4 for how to turn analytics off. All images on the site are served from our own domain; we do not load images or other assets from third-party image services.

c. What We Do Not Collect Through the Website

We do not collect payment card numbers, Social Security numbers, or account passwords through this website. The site has no login, no payment, and no subscription.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our financial operations services and deliverables
• Respond to inquiries, process Value Creation Assessment submissions, and follow up with you
• Send our Field Notes newsletter if you have subscribed
• Understand and improve how the website is used
• Comply with legal obligations and enforce our Terms of Service
• Protect against fraud, unauthorized access, and misuse

3. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are used under California law. We do not use third-party advertising cookies, and we have disabled Google Analytics advertising features (Google Signals and ad personalization).

We disclose information only in these limited circumstances:

• Service providers that process data on our behalf under contract: Netlify (website hosting and delivery), Supabase (the database that stores website form submissions and first-party analytics), Google (Google Analytics), and Microsoft (Microsoft Clarity). If we connect a customer-relationship management or email-delivery provider to manage leads or send our newsletter, it will act as our service provider under contract.
• With your consent: for engaged clients, we may share your financial reports with your CPA, lender, or another party when you authorize it in writing.
• Legal requirements: when required by law, regulation, subpoena, court order, or governmental request.
• Business transfers: in a merger, acquisition, or sale of assets, information may transfer as part of the transaction, subject to applicable privacy protections.
• Protection of rights: to protect the rights, safety, or property of Jobcard Financial, our clients, or others.
• Aggregated and de-identified data: we may use aggregated, de-identified data for industry benchmarking. This data does not identify any individual or business and cannot be traced back to you.

4. Cookies, Analytics, and Your Choices

As described in Section 1, we use first-party analytics along with Google Analytics 4 and Microsoft Clarity. These use cookies and similar browser storage. You have the following choices:

• Opt out of analytics: the “Opt out of analytics” control in our website footer sets a preference in your browser that turns off first-party analytics, Google Analytics, and Microsoft Clarity on your next visit.
• Do Not Track and Global Privacy Control: we honor the browser Do Not Track (DNT) signal and the Global Privacy Control (GPC) signal. When either is enabled, we do not load first-party analytics, Google Analytics, or Microsoft Clarity.
• Browser controls: you can also block or delete cookies and clear site storage through your browser settings.

We do not use third-party advertising cookies and do not engage in cross-context behavioral advertising.

5. Data Retention

Website leads (newsletter subscriptions and assessment submissions): we keep this information for as long as it is relevant to our relationship with you, or until you ask us to delete it. We do not run an automated deletion schedule; we remove data on request.

Analytics: first-party analytics is retained in our own database. Google Analytics and Microsoft Clarity retain data under their own retention settings and policies.

Client financial records (for engaged clients): retained consistent with IRS record-retention guidelines (generally seven years), or as specified in the Engagement Letter or required by law.

6. Your Privacy Rights

We extend the following choices to everyone who uses our website. California residents also have these rights under the CCPA and CPRA to the extent those laws apply to us:

• Right to Know / Access: request the categories and specific pieces of personal information we hold about you, the sources, the purposes, and the categories of parties with whom we share it.
• Right to Delete: request deletion of your personal information, subject to exceptions such as legal-retention obligations.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. You can still turn off analytics as described in Section 4.
• Right to Limit Use of Sensitive Information: we do not use sensitive personal information beyond what is necessary to provide our services.
• Right to Non-Discrimination: we will not discriminate against you for exercising any privacy right.

To exercise any of these, email info@jobcardfinancial.com. We respond to verified requests within 45 days.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal and financial information from unauthorized access, use, alteration, or disclosure. These include encrypted transmission (TLS/SSL), access controls, and secure cloud infrastructure.

No method of electronic transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

8. Data Breach Notification

In the event of a security breach involving your personal information, we will notify affected individuals in accordance with California Civil Code Section 1798.82. If a breach affects more than 500 California residents, we will also notify the California Attorney General.

9. Children’s Privacy

Our website and services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will delete it promptly.

10. Third-Party Links

Our website may link to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.