Privacy policy

About this portal

Downriver Office Portal is operated by Detroit Decal & Apparel, LLC to coordinate jobs, artwork, customer proofs, approvals and production with Downriver Office and authorized users. This policy describes information handled through this portal, including its optional Gmail and QuickBooks connections.

Information we collect

• Account and activity information, such as your name, role, sign-in records, session information and actions within the portal. Hosting and security systems may also process IP addresses, browser information and request logs.
• Job and customer information you enter or import, including contact details, artwork files, proof layouts, production instructions, order details, balances, approval responses and revision history.
• When you connect Google: your verified email address, authorization tokens and the connection date. When a proof is emailed, we process the recipient address, subject, message and proof link, and retain delivery information such as the Gmail message identifier and sending event.
• When you connect QuickBooks: authorization credentials, your connected company information and customer contact information selected by the portal’s customer-sync feature.

How Gmail access works

Connecting Gmail is optional. You sign in on Google’s website and authorize the portal to identify your email address and send email on your behalf. We do not receive or store your Google password. The portal requests email-sending permission; it does not request permission to read your inbox or search your existing messages.

We use Gmail access to send customer proof emails when you create a proof or choose to send or resend one from the portal. Emails are sent from the Google account connected to the signed-in portal user. Your email address and an encrypted refresh token are stored so the connection can continue across portal sessions. The server obtains temporary access tokens when sending.

How we use and share information

We use portal information to manage access, prepare and fulfill jobs, send proofs, record approvals, maintain business records, and troubleshoot or protect the service. Authorized portal users and administrators can access the job and customer records made available through their portal access. Customers can view proofs through the approval links provided to them.

Our service providers process information to operate these features: Vercel hosts the application, Supabase provides database and file storage, Google processes Gmail authorization and email delivery, and Intuit provides the optional QuickBooks connection. Proof emails share the recipient and message information with Google and the intended recipient. Information may also be disclosed when required by law or necessary to investigate security incidents.

Artwork files can be delivered through public file URLs, and customer proof pages can be accessed by anyone who has the corresponding approval link. Share those links only with intended recipients and avoid uploading unrelated sensitive information.

Google data and Limited Use

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google data only to provide and support the connected email features described here. We do not sell Google user data, use it for advertising or credit decisions, or use it to train generalized artificial intelligence or machine-learning models.

Google data is not shared for unrelated purposes. Human access is limited to the user-facing features and permitted purposes such as support with your consent, security investigation, or legal obligations.

Storage and security

Gmail refresh tokens are encrypted before database storage. The portal applies account-based access controls to saved Gmail connections and uses HTTPS for its Google API requests and website traffic. We use session cookies to keep you signed in and temporary cookies to validate connection requests. No storage or transmission method can guarantee absolute security.

Retention, disconnection and deletion

We retain job, proof, customer and activity records while needed for production, approval history, business administration, security or legal obligations. Retention depends on the purpose of the record; this portal does not automatically erase all records after a fixed period.

To remove your saved Gmail connection, open Email settings in the portal and choose Disconnect Gmail. This deletes the saved connection and encrypted refresh token from the active portal database. You can also revoke the portal’s authorization through your Google Account connections. Revoking Google access does not itself erase previously saved portal records; contact us to request their deletion.

Disconnecting does not delete messages already sent, recipient copies, or proof and delivery history. Deleted information may remain in service-provider backups until those backups expire under the provider’s retention processes.

Your choices and requests

You can use the portal’s other available features without connecting Gmail. Contact us to request access to, correction of, or deletion of information associated with your account or a customer record. We may need to verify your identity and authority over the requested records. Records needed to fulfill an order, preserve approval history, resolve a dispute or meet legal obligations may need to be retained.

Contact and policy changes

For privacy questions or data requests, contact Detroit Decal & Apparel, LLC at anthony.n.stephens@gmail.com. We will update this page and its effective date when this policy changes.