Privacy policy
Last updated 12 October 2026. This policy covers the public site at this domain and the client portal behind sign-in. Sage Peak Advisory Group is a trade name of Babyface, LLC.
What we collect
- Contact details you give us on a form: name, business, email and phone.
- The answers you type into a request form.
- Account details when you sign in: email, a hashed password and your role.
- Financial data you connect or upload: QuickBooks Online data under the scope you authorize, bank activity, open invoices and open bills.
- Billing records held by Stripe. We never see or store a full card or bank account number.
- Server logs with IP address and request path, kept for 30 days.
How we use it
We use your data to produce the forecast and the notes you pay for, to reply to a request you made, and to bill you. We do not sell it. We do not use it for advertising. We do not train models on client data.
Where it lives
Everything sits on a single encrypted volume on a server operated by Fly.io in the United States. Nightly backups rotate over 14 days. Access is limited to George Nelson.
Who else sees it
- Intuit, through the QuickBooks Online connection you authorize. You can revoke the connection from your Intuit account at any time.
- Stripe, for payments.
- Resend, for sending the emails you asked for.
- Plausible Analytics, if enabled on the public site. It sets no cookies and collects no personal data.
No one else. We do not share client data with any other party unless the law requires it.
Your choices
Email us to export your data or to have it removed. Exports arrive within five business days. Deletion follows within 30 days of cancellation unless a legal hold applies.
Contact
Babyface, LLC, trading as Sage Peak Advisory Group. Reply to any email from us, or write to the address in the footer.