Wholesale Quote (949) 702-4096
Helm — Privacy Policy
Effective date: June 19, 2026 · Last updated: June 19, 2026
This Privacy Policy describes how Helm (the “Application”), a private internal operations application operated by Shining Seas Imports LLC dba Shining Seas Ingredients (“the Company,” “we,” “us”), handles data. Helm is not a public or consumer-facing product. It is not marketed, sold, or made available to external users, and is accessible only to the Company’s authorized personnel.
1. Scope
Helm is an internal business cockpit used by the Company’s authorized employees, contractors, and agents to view and act on the Company’s own business data. It does not collect data from the general public and does not process consumer personal data. The data it handles consists of business-to-business records and the Company’s own accounting and operational information.
2. QuickBooks Online data we access
Helm connects to the Company’s QuickBooks Online account through Intuit’s official API using OAuth 2.0, with the user’s authorization. Helm requests only the Accounting scope and uses it on a read-only basis. Helm does not create, modify, delete, or write back any data to QuickBooks Online.
At a high level, the categories of QuickBooks Online data Helm reads are:
- Company accounting records and account balances (e.g. cash position)
- Customer records (business customers)
- Invoice and sales records
- Accounts-receivable aging reports
- Sales reports (e.g. sales by product and by customer)
This is business information used solely for the Company’s internal operations.
3. How QuickBooks data is used
QuickBooks-derived data is used only to power Helm’s internal dashboards and operational workflows — for example, monitoring cash and receivables, identifying slow-moving inventory and likely buyers, and preparing internal summaries and draft business communications for review by authorized personnel. It is never used for advertising and is never sold or rented.
4. Storage, retention, and security
Helm stores QuickBooks-derived summaries (such as cash-position snapshots, accounts-receivable totals, business customer records, and sales history) in a secure, access-controlled, server-side database hosted on our cloud platform. This data is encrypted at rest, sits entirely behind an identity wall, and is not exposed publicly. It is refreshed on a schedule and is not the authoritative record of truth (QuickBooks Online remains the source of truth).
OAuth credentials are protected as follows:
- Application client credentials are held in encrypted server-side secret storage and are used only by our backend. They are never included in any browser code or exposed to users.
- The OAuth refresh token is stored server-side, encrypted at rest, in our access-controlled application database, and is re-secured whenever it is rotated.
- Short-lived access tokens are generated on the server as needed and used transiently in memory; they are not persisted.
Retention: the refresh token is retained only while the QuickBooks connection is active. When a user disconnects QuickBooks (or the connection is revoked), the token is revoked with Intuit and deleted from our storage, after which it can no longer be used. Derived summaries are retained until refreshed or purged on disconnection/decommission.
5. Logging
Helm records operational metadata only — such as synchronization source, timestamps, status, row counts, error codes, and (for troubleshooting) the Intuit transaction identifier returned with API errors. Helm does not log full API responses or individual invoice, customer, or accounting line detail.
6. Access control and authentication
Access to Helm is restricted to the Company’s authorized personnel through a Zero-Trust access layer backed by the Company’s identity provider, with enforced single sign-on and multi-factor authentication and an explicit user allowlist. There is no anonymous or public access. All application and API connections are served exclusively over HTTPS (encrypted in transit).
7. Service providers (subprocessors)
Helm relies on a limited set of service providers strictly to host, secure, and operate the Application. QuickBooks data is never sold, rented, or disclosed to third parties for their own purposes. Our operational service providers may include:
| Provider | Purpose |
|---|---|
| Cloudflare | Application hosting, edge database, and security/identity layer |
| Microsoft 365 | Identity (SSO/MFA) and transactional email |
| Anthropic; OpenAI | Commercial generative-AI APIs used to summarize the Company’s own data and draft internal communications (see §8) |
| Other integrated business systems | The Company’s inventory, document-storage, and marketing systems used in the Company’s operations |
Each provider processes data only as needed to provide its service and under its own commercial terms.
8. Generative AI
Helm uses commercial generative-AI APIs as an internal assistant layer over data the Company has already retrieved — for example, to answer questions about the Company’s own data, summarize standard reports, and draft routine business communications for human review before any are sent. These features are fed compact, pre-processed inputs and never write to QuickBooks. The Company uses these providers under commercial/business terms under which Company data is not used to train the providers’ models. Helm does not use QuickBooks data for model training.
9. Data export
Authorized, authenticated users can export on-screen views to CSV files for internal business use. These exports are user-initiated, generated in the browser, contain no credentials, and remain within the Company.
10. Data sharing
The Company does not sell, rent, trade, or otherwise disclose QuickBooks data or other business data to outside parties, except the operational service providers described in §7 and Intuit as the data source. There is no advertising, profiling, or third-party data monetization.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date above.
12. Contact
Questions about this Privacy Policy or Helm’s data practices may be directed to: [email protected].
Helm — Privacy Policy
Effective date: June 19, 2026 · Last updated: June 19, 2026
This Privacy Policy describes how Helm (the “Application”), a private internal operations application operated by Shining Seas Imports LLC dba Shining Seas Ingredients (“the Company,” “we,” “us”), handles data. Helm is not a public or consumer-facing product. It is not marketed, sold, or made available to external users, and is accessible only to the Company’s authorized personnel.
1. Scope
Helm is an internal business cockpit used by the Company’s authorized employees, contractors, and agents to view and act on the Company’s own business data. It does not collect data from the general public and does not process consumer personal data. The data it handles consists of business-to-business records and the Company’s own accounting and operational information.
2. QuickBooks Online data we access
Helm connects to the Company’s QuickBooks Online account through Intuit’s official API using OAuth 2.0, with the user’s authorization. Helm requests only the Accounting scope and uses it on a read-only basis. Helm does not create, modify, delete, or write back any data to QuickBooks Online.
At a high level, the categories of QuickBooks Online data Helm reads are:
- Company accounting records and account balances (e.g. cash position)
- Customer records (business customers)
- Invoice and sales records
- Accounts-receivable aging reports
- Sales reports (e.g. sales by product and by customer)
This is business information used solely for the Company’s internal operations.
3. How QuickBooks data is used
QuickBooks-derived data is used only to power Helm’s internal dashboards and operational workflows — for example, monitoring cash and receivables, identifying slow-moving inventory and likely buyers, and preparing internal summaries and draft business communications for review by authorized personnel. It is never used for advertising and is never sold or rented.
4. Storage, retention, and security
Helm stores QuickBooks-derived summaries (such as cash-position snapshots, accounts-receivable totals, business customer records, and sales history) in a secure, access-controlled, server-side database hosted on our cloud platform. This data is encrypted at rest, sits entirely behind an identity wall, and is not exposed publicly. It is refreshed on a schedule and is not the authoritative record of truth (QuickBooks Online remains the source of truth).
OAuth credentials are protected as follows:
- Application client credentials are held in encrypted server-side secret storage and are used only by our backend. They are never included in any browser code or exposed to users.
- The OAuth refresh token is stored server-side, encrypted at rest, in our access-controlled application database, and is re-secured whenever it is rotated.
- Short-lived access tokens are generated on the server as needed and used transiently in memory; they are not persisted.
Retention: the refresh token is retained only while the QuickBooks connection is active. When a user disconnects QuickBooks (or the connection is revoked), the token is revoked with Intuit and deleted from our storage, after which it can no longer be used. Derived summaries are retained until refreshed or purged on disconnection/decommission.
5. Logging
Helm records operational metadata only — such as synchronization source, timestamps, status, row counts, error codes, and (for troubleshooting) the Intuit transaction identifier returned with API errors. Helm does not log full API responses or individual invoice, customer, or accounting line detail.
6. Access control and authentication
Access to Helm is restricted to the Company’s authorized personnel through a Zero-Trust access layer backed by the Company’s identity provider, with enforced single sign-on and multi-factor authentication and an explicit user allowlist. There is no anonymous or public access. All application and API connections are served exclusively over HTTPS (encrypted in transit).
7. Service providers (subprocessors)
Helm relies on a limited set of service providers strictly to host, secure, and operate the Application. QuickBooks data is never sold, rented, or disclosed to third parties for their own purposes. Our operational service providers may include:
| Provider | Purpose |
|---|---|
| Cloudflare | Application hosting, edge database, and security/identity layer |
| Microsoft 365 | Identity (SSO/MFA) and transactional email |
| Anthropic; OpenAI | Commercial generative-AI APIs used to summarize the Company’s own data and draft internal communications (see §8) |
| Other integrated business systems | The Company’s inventory, document-storage, and marketing systems used in the Company’s operations |
Each provider processes data only as needed to provide its service and under its own commercial terms.
8. Generative AI
Helm uses commercial generative-AI APIs as an internal assistant layer over data the Company has already retrieved — for example, to answer questions about the Company’s own data, summarize standard reports, and draft routine business communications for human review before any are sent. These features are fed compact, pre-processed inputs and never write to QuickBooks. The Company uses these providers under commercial/business terms under which Company data is not used to train the providers’ models. Helm does not use QuickBooks data for model training.
9. Data export
Authorized, authenticated users can export on-screen views to CSV files for internal business use. These exports are user-initiated, generated in the browser, contain no credentials, and remain within the Company.
10. Data sharing
The Company does not sell, rent, trade, or otherwise disclose QuickBooks data or other business data to outside parties, except the operational service providers described in §7 and Intuit as the data source. There is no advertising, profiling, or third-party data monetization.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date above.
12. Contact
Questions about this Privacy Policy or Helm’s data practices may be directed to: [email protected].