Privacy Policy

This policy explains how American Cabinet Depot ("the Company") handles information on this website (acabinetsdepot.com) and in the Company's staff portal at portal.acabinetsdepot.com (the "Portal"). The Portal is built and operated for the Company by Sarkisian Group LLC ("we", "us"). The Portal is a private business tool used only by the Company's authorized staff.

Visitors to this website

This website is informational. It does not use advertising or tracking cookies or third-party analytics, and it has no forms that collect personal information. If you email or call us, we use what you send only to respond and to provide quotes and orders you ask for.

Information handled in the Portal

• Staff accounts: name, work email, phone and role, plus sign-in records, managed through our identity provider (Clerk).
• Customer and business records: customer contact details, quotes, orders, invoices, supplier bills and related notes entered by staff.
• Payments: customer card payments are processed by Stripe. We never see or store full card numbers.
• Bank and card data (via Plaid): when an authorized Company administrator connects a business bank or credit card account, we receive account names, the last four digits of account numbers, balances and transaction history. We never receive or store bank usernames or passwords; those go directly to the bank through Plaid.
• Communications: emails and text messages sent or received through the Portal, kept so staff can see the history with each customer.

Connecting bank accounts with Plaid

We use Plaid Inc. ("Plaid") to connect to financial institutions. By connecting an account you confirm you are authorized to do so for the Company, and you grant us and Plaid permission to access that account's information as described here and in Plaid's End User Privacy Policy. Access is read-only: the Portal cannot move money. Only Company administrators, who must use two-step verification, can connect accounts or view bank data.

How we use information

Only to run the Company's business: bookkeeping, matching bank transactions to sales, expenses and supplier bills, profit & loss and cash-flow reports, customer service, quotes, invoicing and communications. We do not sell personal or financial information, use it for advertising, or share it with other businesses we work with.

Who we share it with

Only service providers that run the website and Portal on our behalf and are bound to protect the data: Vercel (hosting), Neon (database), Clerk (sign-in), Plaid (bank data), Stripe (payments), and our email and text-message delivery and AI processing providers. We may also disclose information when required by law.

Security

All traffic is encrypted with TLS 1.2 or higher. Data is encrypted at rest, and bank connection tokens are additionally encrypted with AES-256-GCM. Access is limited by role and logged, and administrators use two-step verification.

Retention and deletion

• When a bank account is disconnected, Plaid's access is revoked, the stored connection token is deleted, and transactions that were never reviewed are deleted.
• Reviewed transactions are part of the Company's accounting records and are kept for seven years, consistent with IRS record-keeping guidance, unless earlier deletion is requested and legally permitted.
• The Company may request an export or deletion of its data at any time; we complete requests within 30 days.
• If our service to the Company ends, its data is deleted within 90 days unless the Company asks otherwise or the law requires us to keep it.
• We review this retention schedule at least once a year.

Your choices

Administrators can disconnect a bank account at any time from the Portal (Settings → Accounting). Customers of the Company can ask the Company, or us, to access, correct or delete their information.

Changes

We will update the date above when this policy changes and tell the Company's administrators about material changes.

Contact

American Cabinet Depot: info@acabinetsdepot.com · (818) 605-3020
Sarkisian Group LLC, privacy and security: edwin@sarkisiangroup.com