Privacy Policy

Effective August 28, 2026

This Privacy Policy explains how MCALCO Group LLC doing business as TwelveSpec ("TwelveSpec," "we," or "us") handles information through TwelveSpec OS, our private business operations application.

Information we process

We may process authorized-user identity and account information; customer, prospect, contact, vendor, quote, order, invoice, payment-status, task, communication, and operational records; files submitted for business purposes; and technical records such as timestamps, security events, integration status, and error logs.

Connected services

When an authorized user connects Google Workspace or QuickBooks Online, we process the information permitted through the approved authorization scopes. This may include email messages and metadata needed for customer communications, and accounting information needed for customer, invoice, payment, vendor-bill, and reconciliation workflows. OAuth credentials are stored in encrypted form and are not exposed to application users.

How information is used

We use information to operate TwelveSpec, manage customer and vendor relationships, prepare and fulfill transactions, synchronize authorized systems, maintain records, secure the application, resolve failures, and improve business workflows.

Disclosure

We do not sell personal information. We may disclose information to authorized TwelveSpec personnel, customers or vendors involved in a transaction, professional advisers, and service providers that host or support the application. We may also disclose information when required by law or necessary to protect rights, safety, or system integrity.

Data protection

We use access controls, encrypted connections, row-level database security, encrypted integration credentials, audit records, and managed hosting services. No system can guarantee absolute security.

Retention and deletion

We retain information for legitimate operational, contractual, accounting, tax, security, and legal purposes. Authorized integrations may be disconnected, and associated credentials may be revoked or deleted. Records are deleted or de-identified when no longer reasonably required, subject to legal and business retention obligations.

Choices and requests

To request access, correction, or deletion of personal information, or to ask about a connected account, contact us. Requests may be limited where retention is required for accounting, legal, security, or contractual purposes.

Changes

We may update this Policy as the application and its integrations evolve. The effective date above identifies the current version.

Contact

Email privacy questions or requests to hello@twelvespec.com.