Last updated September 22, 2026
Shinzo Works is an internal operations tool built and used by Shinzo Media, a print/signage shop, to manage jobs, tasks, quotes, invoices, scheduling, and related business records. It is not a public product — it is used only by Shinzo Media staff and contractors, by invitation.
This policy covers the small number of Shinzo Media staff and contractors who are given a login to use Shinzo Works. It does not apply to Shinzo Media's clients or the general public — they do not have accounts or access to this application.
For staff and contractors with an account: name, email address, role, and phone number (for contractors). Authentication is handled by Supabase; passwords are never stored or handled directly by Shinzo Works.
As part of normal business use, staff enter and maintain records about Shinzo Media's own clients, jobs, quotes, invoices, and schedules — including client contact information, pricing, and job-related reference images.
Solely to run Shinzo Media's day-to-day operations: assigning and tracking work, scheduling installs, quoting and invoicing clients, and internal recordkeeping. We do not use this data for advertising, and we do not sell or share it with third parties for marketing purposes.
Data is stored in a Supabase-hosted Postgres database with row-level security enabled, and the application is hosted on Vercel. All traffic is encrypted in transit (HTTPS).
Where this application integrates with third-party services on the user's behalf — such as QuickBooks Online, when connected — the resulting access credentials are stored separately from ordinary application data, accessible only to server-side code, and are never exposed to the browser or to any user's own session.
Supabase — database, authentication, and file storage. Vercel — application hosting. Intuit/QuickBooks Online — when an administrator connects it, this application reads invoice payment status from QuickBooks. It does not create, modify, or send any data to QuickBooks.
Records are retained for as long as they are useful to Shinzo Media's operations. An administrator can remove a staff account or disconnect a third-party integration at any time, which stops any further data being read from or written to that integration.
Questions about this policy can be sent to danny@shinzomedia.com.