Command Center privacy notice
Updated October 6, 2026 · Notice version 2026-10-06.2
THRIFTHAVENPDX LLC operates Command Center as an internal business management application. This notice covers Command Center, including its financial integrations. It does not replace the privacy notices for our ticketing website or other services.
Information and purpose
We process authorized personnel’s account and session information and business financial records, such as account identifiers, transaction dates, descriptions, amounts, fees, balances, and debt information when available. We use these records for bookkeeping, reconciliation, cash flow monitoring, security, and event profitability reporting.
Financial connections
The Plaid integration is in development and is not currently available in Command Center. Before it is enabled, the authorized account holder will be shown the requested data and purpose and asked to authorize the connection through Plaid Link. We will not ask you to send bank passwords to our staff or enter them into a Command Center form.
Plaid’s handling of information is described in its End User Privacy Policy.
Vendor outreach (Instagram)
To invite sellers to vend at our markets, we use Instagram’s official Business Discovery API to read public profile information of Instagram business and creator accounts (username, display name, follower and post counts, and date of latest post), and public web pages that list market vendors. We use it only to decide whom to invite. We do not store biographies, sell, license or share this information, or combine it with other data to build profiles. Leads we do not contact are deleted after 90 days. To have your account removed, email admin@thrifthaven.co.
Access and service providers
Access to financial features is restricted to explicitly authorized company personnel. We use Vercel for hosting and Neon for database and authentication services. Financial providers supply the records you authorize. We do not sell Command Center financial data or use it for targeted advertising. We may disclose information when required by law.
Retention and requests
We retain financial records for business accounting and applicable recordkeeping needs. The preview provides sandbox authorization records, revocation and privacy-request tracking. Requests require owner review; submitting one does not immediately erase financial records. Sandbox test artifacts have defined expiry limits and a separately approved deletion process. Live Plaid retention, disconnection and backup deletion controls are not yet operational; live bank connections remain unavailable.
To request access, correction, deletion, or disconnection, email thrifthavenpdx@gmail.com. We will verify your authority before handling a request. Records that must be retained for legal obligations or an active dispute may be excluded from deletion, with an explanation. Disconnecting a financial provider does not itself delete previously imported records.
Security and updates
We use authenticated access, encrypted network connections, and provider-managed encrypted database storage. No system is guaranteed to be secure. We will update this notice when our financial data practices change and present material changes before requesting new account permissions.