SLSlab

Privacy Policy

Last updated November 6, 2026

Slab is a private, internal operations dashboard built and operated by Back Forty Builders LLC, a construction company in Johnson, Vermont. It is not a public product. It is used only by Back Forty Builders staff to run our own jobs, schedules, and books.

Who this policy covers

This policy explains what Slab collects, how we use it, and how we protect it. The people whose information appears in Slab are our own employees, our clients, our subcontractors, and our vendors.

What we collect

How we use it

We use this information for one purpose: running Back Forty Builders. That means scheduling crews, tracking job costs, paying vendors, invoicing clients, managing payroll hours, and understanding the financial health of the company.

We do not sell, rent, or trade any of this information. We do not use it for advertising. We do not share it with third parties for their own purposes.

QuickBooks data specifically

Slab connects to QuickBooks Online using Intuit's OAuth 2.0 authorization. We request read access under the accounting scope. We never receive or store your Intuit username or password. Access is granted by an authorized company administrator and can be revoked at any time from within QuickBooks Online, or by contacting us.

QuickBooks data pulled into Slab is displayed to signed-in Back Forty Builders staff only. It is cached briefly to keep pages responsive and is refreshed from QuickBooks on subsequent requests.

Bank data specifically

Slab connects Back Forty Builders' own business bank account through Plaid. A company administrator signs in to the bank inside Plaid's window and consents there; Slab never receives or stores the bank username or password. Slab reads the account balance and transactions only. It cannot move money.

Plaid's access token is stored encrypted, and bank data is shown only to signed-in owner and office staff. Disconnecting the bank in Slab's Settings ends the Plaid connection and deletes the stored token. Plaid's own privacy policy is at plaid.com/legal.

Who can see it

Access to Slab requires signing in. Only authorized Back Forty Builders personnel have accounts. Financial pages are further limited to staff with an administrative or ownership role. No outside party is given a login.

Service providers

Slab runs on infrastructure operated by Netlify, and reads from Google Workspace, Intuit QuickBooks Online and Plaid. These providers process data on our behalf under their own security and privacy commitments. We do not share data with anyone else.

How we protect it

How long we keep it

Business records are retained as long as we need them to run the company and to meet Vermont and federal recordkeeping and tax requirements. QuickBooks remains the system of record for accounting data; Slab reads from it rather than replacing it. If the QuickBooks connection is revoked, Slab stops retrieving that data and any cached copies expire. Bank data from Plaid is kept only while the bank is connected; disconnecting it deletes the stored token and saved balance. We review this policy at least once a year.

Your choices

If you are a client, subcontractor, vendor, or employee and you want to know what information we hold about you, want it corrected, or want it deleted where we are not required to keep it, contact us at the address below and we will take care of it.

Delete your Slab account or data

This applies to the Slab app by Back Forty Builders. To delete your account:

  1. In the Slab app, open Settings (your initials, top right), scroll to the bottom and tap Delete My Account, then confirm. Your sign-in is removed right away.
  2. Or email adrienne@backforty.builders from the address we have for you with the subject "Delete my Slab data", and we will do it within 30 days and confirm by reply.

What is deleted: your sign-in, name, phone number, email, push-notification token, and any photos or notes you added that are not part of a project record. What is kept, and for how long: time clock punches, invoices, payments and project records are business and tax records, so we keep them for seven years as the law requires, and then delete them. Nothing is deleted from a project record that other people at Back Forty Builders still need to run the job.

Children

Slab is a workplace tool. It is not directed to anyone under 18 and we do not knowingly collect information from children.

Changes

If we change this policy we will update the date at the top of this page.

Contact

Back Forty Builders LLC
Johnson, Vermont
adrienne@backforty.builders