Privacy Policy — Recon by 1 MSP

This Privacy Policy explains how 1 MSP LLC (“1 MSP,” “we,” “us”) collects, uses, and protects information in connection with Recon by 1 MSP (the “Service”), a multi-tenant application that ingests, extracts, and reconciles vendor invoices for managed service providers. By using the Service you agree to the practices described here.

Information we collect

Account information — name, work email, organization, and role, created when you sign up or are invited to a workspace.
Invoice and financial data — vendor invoices, line items, amounts, payment records, and related documents you upload or that are ingested on your behalf.
Connected-account data — when you authorize an integration, data made available through it (for example, invoices and bills from QuickBooks Online, and messages/attachments from a connected Microsoft 365 mailbox).
Usage data — logs, device/browser information, and diagnostic data generated while using the Service.

How we use information

To provide, operate, and secure the Service, including invoice extraction, reconciliation, and reporting.
To sync with the third-party accounts you connect, at your direction.
To maintain audit trails, prevent abuse, troubleshoot, and improve reliability.
To communicate with you about your account and service-related notices.

Third-party integrations and sub-processors

We use trusted providers to run the Service. Depending on the features you use, these may include:

Intuit / QuickBooks Online — to read and, where you enable it, write accounting data you authorize. Our use of information received from Intuit APIs adheres to the Intuit Developer requirements.
Microsoft 365 / Microsoft Graph — to ingest invoice emails and attachments from a mailbox you connect.
Supabase — application database, authentication, and file storage.
Microsoft Azure — application hosting.
AI extraction provider(s) — to extract structured fields from invoice documents.

We do not sell your personal information. We share data with these providers only as needed to deliver the Service, and with authorities where required by law.

Data retention

We retain your data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your data as described below.

Security

We use administrative, technical, and organizational safeguards including encryption in transit, access controls, tenant isolation via row-level security, and encrypted storage of integration tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights and choices

You may access, correct, export, or request deletion of your personal information, and you may disconnect any integration at any time from the Service’s settings. To exercise these rights, contact us at [email protected].

Data location

The Service is operated in the United States. If you access it from outside the United States, you consent to processing of your information in the United States.

Children

The Service is intended for business use and is not directed to individuals under 18.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, additional notice.

Contact

Questions about this policy? Contact 1 MSP LLC at [email protected] or [company mailing address].