Effective 20 October 2026

MarginDesk privacy notice

MarginDesk is CTSL’s internal tool for tracking quotation requests, estimates, customer purchase orders, supply costs, invoices, markup and profit margins. Contact CTSL at ctslrfqs@gmail.com about this tool and its records.

Information used

The tool stores job and customer details entered by authorized staff, document references, sales amounts, supply costs, and report history. With mailbox authorization, it reads matching Gmail message headers and snippets for review. It does not currently parse attachments. With QuickBooks company authorization, it imports estimate and invoice information, including customer references, dates, amounts, currency and balances.

Purpose and access

CTSL uses these records to manage its quotation-to-payment workflow and prepare internal weekly and monthly reports. Reports are emailed to the recipient configured by CTSL. Access is intended for authorized CTSL personnel. The current application does not send these records to a generative AI service or sell them.

Storage and services

The financial application and database run on a CTSL Windows computer. OAuth credentials are encrypted using Windows Data Protection API for the owning Windows user. The SQLite financial database itself is not encrypted by MarginDesk. Files may also be copied by computer backup or folder synchronization services configured by CTSL, including OneDrive where enabled.

Google processes mailbox access and report delivery; Intuit processes QuickBooks authorization and API requests. Cloudflare hosts only the public support pages, not the financial application or its database. Those providers process information under their own applicable terms and privacy notices. External Google and Intuit connections use HTTPS; the installed app uses an HTTP loopback address on its computer.

Retention and controls

Imported records and saved reports remain until CTSL removes them; no automatic retention period is currently enforced. Disabling synchronization stops new imports. Revoking access through Google or QuickBooks removes the relevant account authorization, but does not delete records already stored by CTSL. Ask CTSL at the contact address above to review, correct or remove retained information, subject to applicable recordkeeping requirements. Backup copies require separate management.