Privacy Policy

Sōken, operated by Carlson Projects, Inc. · Effective June 24, 2026 · Last updated June 24, 2026

This Privacy Policy explains how Carlson Projects, Inc. ("Carlson Projects," "we," "us," or "our") collects, uses, stores, and protects information in connection with Sōken (the "Service"), our operating platform for premium residential remodeling. It also explains how we access and handle data from connected third-party services, including Intuit QuickBooks Online.

By creating an account or connecting a third-party account to Sōken, you agree to the practices described in this Policy. If you do not agree, do not use the Service.

1. Who we are

Sōken is provided by Carlson Projects, Inc., a company located in Lincoln, Nebraska, United States. For any privacy question or request, contact us at scott@carlsonprojectsinc.com.

2. Information we collect

2.1 Account and contact information

When you or your organization set up Sōken, we collect information such as name, business name, email address, role, and authentication identifiers used to sign in and to associate you with your organization (tenant).

2.2 Data you enter into the Service

We collect the business information you create or upload in Sōken — for example leads, proposals, estimates, schedules, cost codes, change orders, project records, and related notes.

2.3 QuickBooks Online data (third-party connection)

If you connect your Intuit QuickBooks Online ("QuickBooks") company to Sōken, we access accounting and financial data from that company through Intuit's authorized API, under the permissions (scopes) you grant during Intuit's OAuth consent flow. Depending on the scopes granted, this may include:

Company profile information (company name, currency, fiscal settings, company identifier / realm ID);
Chart of accounts and account balances;
Transactions and line items (invoices, bills, expenses, payments, journal entries) and their amounts, dates, and memos;
Lists referenced by those transactions, such as customers, jobs, classes, vendors, and items.

We access QuickBooks data on a read-only basis. Sōken treats your accounting system as the source of truth and does not write to, modify, or delete data in your QuickBooks company. We use QuickBooks data to reconcile actual costs against project projections and estimates within Sōken.

2.4 Technical and usage data

We collect limited technical information generated when you use the Service, such as log records, device and browser type, IP address, timestamps, and actions taken within the Service (for audit and security purposes).

3. How we use information

Purpose	Examples
Provide the Service	Manage leads, estimates, schedules, change orders, and projects for your organization.
Financial reconciliation	Compare QuickBooks actuals against Sōken projections and estimates; surface variances.
Computation and forecasting	Produce forward-looking projections with confidence indicators. Financial math is performed by deterministic code, not by AI.
AI-assisted features	Interpret inputs and draft content (e.g., summaries, draft messages) for your review. AI-generated output is labeled and requires human approval before it is sent or acted upon.
Security and audit	Maintain an immutable, per-organization audit log; detect and prevent abuse.
Support and communication	Respond to requests and send service-related notices.

4. How we share information

We do not sell your personal information, and we do not share it with third parties for their own advertising. We share information only as follows:

Service providers (subprocessors). We use trusted vendors to operate Sōken — including cloud hosting/infrastructure and an AI model provider — who process data on our behalf under contractual confidentiality and security obligations, and only as needed to deliver the Service.
Within your organization. Data is visible to authorized users of your own organization (tenant), subject to their access.
Legal and safety. We may disclose information if required by law, or to protect the rights, safety, and security of Carlson Projects, our users, or the public.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred subject to this Policy.

We do not share your QuickBooks data with any party except the subprocessors described above, acting on our behalf to provide the Service to you.

5. Data storage, isolation, and security

We apply administrative and technical safeguards designed to protect your information, including:

Tenant isolation. Each organization's data is logically isolated; access controls and row-level security are enforced so one organization cannot access another's data.
Credential protection. Third-party access tokens (including QuickBooks OAuth tokens) are stored encrypted ("sealed") and are never exposed in logs or to other tenants.
Encryption in transit. Data is transmitted over encrypted connections (HTTPS/TLS).
Audit logging. Sensitive actions are recorded in an immutable, per-organization audit log.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data retention

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you disconnect QuickBooks or close your account, we delete or de-identify the associated data within a reasonable period, except where retention is required by law.

7. Your choices and rights

Disconnect QuickBooks. You may revoke Sōken's access to your QuickBooks company at any time, from within Sōken or from your Intuit account settings. After disconnection, we stop accessing new QuickBooks data.
Access, correction, deletion. You may request access to, correction of, or deletion of personal information we hold about you, subject to legal limits.
Account closure. Contact us to close your account and request deletion of associated data.

To exercise any of these rights, email scott@carlsonprojectsinc.com.

8. Third-party services

Your use of QuickBooks is governed by Intuit's own terms and privacy policy. Connecting QuickBooks to Sōken does not change your relationship with Intuit. We are not responsible for the privacy practices of Intuit or other third parties. Please review Intuit's policies at intuit.com/privacy.

9. Children's privacy

Sōken is a business tool intended for use by businesses and their authorized personnel. It is not directed to children under 16, and we do not knowingly collect personal information from them.

10. International users

Sōken is operated from the United States. If you access the Service from outside the United States, you understand that your information may be processed in the United States, where data-protection laws may differ from those in your jurisdiction.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact us

Carlson Projects, Inc.
Lincoln, Nebraska, United States
scott@carlsonprojectsinc.com