Privacy Policy

1. Who operates this platform

Bowen Brothers Limited is the trading name of Bowen Brothers LLC, a Texas limited liability company based in Houston, Texas.

Bowen Brothers designs, builds, hosts, and operates the Command Center platform: a business application provided to client organisations as a hosted service. Each client organisation is a separate business customer with its own workspace, its own users, and its own data, and each is provided the service under a written agreement with Bowen Brothers.

Bowen Brothers operates the platform and all of its infrastructure. A client organisation does not host, own, administer, or hold credentials for any part of it. Bowen Brothers is the party that integrates with third-party services, holds those integrations’ credentials, and is responsible for the handling described in this policy.

The platform is a business-to-business product. It is not offered to the general public and is not a consumer product. Users of a Command Center are people authorised by their own organisation, acting in a business capacity.

2. What information is collected

• Account information for each authorised user: name, work email address, the organisation they belong to, and their role.
• Business records the organisation itself enters into its workspace: contacts, documents, calendar entries, notes, messages, and similar operational records.
• Technical and security logs: sign-in events, IP address, and application error records, kept to operate and secure the service.
• Bank account information, only where a client organisation enables bank connectivity and one of its authorised users connects an account. See section 3.

Bowen Brothers does not collect, process, or store financial data belonging to any consumer or other third party, and does not use any of this information for advertising, profiling, or to train machine-learning models.

3. Bank connections and Plaid

Where a client organisation enables bank connectivity, Bowen Brothers uses Plaid Inc. (“Plaid”) to make the connection. An authorised user at the client organisation links that organisation’s own business bank or brokerage accounts through Plaid Link, and in doing so grants Bowen Brothers and Plaid the right to access and transmit that account’s data as described here. Plaid’s own collection and handling of that data is governed by Plaid’s End User Privacy Policy.

Bank connections are read-only. Bowen Brothers retrieves account names, account types, the institution name, and current account balances, in order to display the organisation’s cash position inside its own Command Center. Bowen Brothers never initiates a payment, transfer, or any other movement of money, and does not read or use account or routing numbers for that purpose.

Bank data is scoped to the client organisation that connected it. No query in the platform returns one organisation’s financial data to another, and access tokens are held encrypted and are never exposed to the browser, written to source control, or written to logs.

4. How information is used

Solely to provide, secure, support, and improve the Command Center service for the organisation the information belongs to: rendering that organisation’s own records and balances to its own authorised users, authenticating those users, sending service notifications they have asked for, and responding to support requests.

Bowen Brothers does not sell, rent, or trade information, and does not use it for advertising or for automated decisions producing legal or similarly significant effects.

5. How it is protected

• In transit — all traffic is encrypted with TLS.
• At rest — data is encrypted at rest by the managed data store.
• Credentials — bank access tokens are sealed with authenticated encryption and held only in a server-side store. The store refuses to write a token if its encryption key is absent, so an unprovisioned deployment stores nothing rather than storing a credential in the clear.
• Separation — each client organisation’s data is isolated, and every request is scoped to the organisation the signed-in user belongs to.
• Access — every user authenticates before any data is retrieved, and multi-factor authentication is required on every administrative account with access to production systems or financial data.

These controls are governed by the Company’s Information Security Policy and Access Control Policy, which are reviewed semi-annually.

6. Who it is shared with

Information is shared only with service providers, and only what each needs to perform its function: Plaid (bank connectivity), Vercel (application hosting), the managed database provider (storage), Resend (transactional email), and Anthropic (the AI features a client has enabled). Bowen Brothers does not sell information and does not disclose it to any other third party except where required by law.

7. How long it is kept

An organisation’s records are kept for as long as its Command Center is active. For each connected bank account, only its access token and its most recent balance snapshot are retained, and only while that connection remains active. Removing a connection deletes its token and cached balances. On termination, a client organisation’s data is deleted or returned at its request.

8. Choices and control

A client organisation may disconnect any linked account at any time, after which no further data is retrieved and the stored token and cached balances for that account are deleted. An organisation may request access to, correction of, or deletion of the information held for it by writing to the address below.

Because the platform holds no consumer data, there are no third-party data subjects to whom access, correction, or deletion rights attach. Should that ever change, this policy will be updated before any such data is collected.

9. Changes to this policy

Material changes will be reflected here with a new effective date and version. This policy is reviewed at least semi-annually alongside the Company’s Information Security Policy. See also the Terms of Service.

10. Contact

Bowen Brothers LLC
1752 Banks Street, Houston, Harris County, Texas 77098
connect@thebowencompany.com