Privacy Policy

National Mobile Billboards LLC
5101 NW 21st Ave, Ste 340
Ft. Lauderdale, FL 33309-2722
Email: privacy@nmbmedia.com

We collect the following categories of information:

• Account information: name, email address, phone number, password hash, and role (Brand Ambassador or Administrator).
• Brand Ambassador profile: mailing address, date of birth, clothing/shoe sizes, profile photo, identification documents, work history, and onboarding answers.
• Tax and payment information: the data needed to issue payment and meet IRS reporting obligations: legal name, address, taxpayer identification number (SSN, EIN, or ITIN) collected on a Form W-9, and PayPal payout email or other payout details. Tax IDs are encrypted at rest.
• Job and timekeeping data: jobs you apply to or are assigned, check-in / check-out times, geolocation snapshots and selfies captured at check-in / check-out, mileage and travel logs, and job photos you upload.
• Device and log data: IP address, browser/device type, operating system, referring URL, and timestamps. We use this for security, fraud prevention, and debugging.
• Cookies and similar technologies: we set authentication cookies via Supabase Auth so you can stay signed in. We do not use third-party advertising cookies.

• To create and operate your account and the Service.
• To match Brand Ambassadors with jobs and to manage scheduling, check-in, and check-out.
• To calculate, issue, and report payments (including 1099-NEC reporting).
• To verify identity, prevent fraud, and protect the security of the Service.
• To communicate with you about jobs, payments, account issues, and service updates.
• To comply with legal obligations and enforce our Terms.

Administrators can connect the Service to Intuit QuickBooks Online (“QuickBooks”) so that Brand Ambassador vendor records and payment expenses sync into the company’s QuickBooks file. The integration uses Intuit’s OAuth 2.0 flow; we never receive or store the QuickBooks user’s Intuit password.

Data sent to QuickBooks. When the integration is enabled, we transmit to Intuit the information needed to create vendors and record expenses, including:

• Brand Ambassador legal name, mailing address, email, and phone number.
• Form W-9 data (taxpayer name, address, classification, taxpayer ID).
• Payment amount, payment date, job title, and a memo describing the work.
• The QuickBooks expense account and vendor IDs we created on your behalf.

Data received from QuickBooks. We retrieve a refresh token, an access token, the QuickBooks company (realm) ID, the chart of accounts (so an administrator can pick an expense account), and the vendor / purchase IDs that QuickBooks assigns to records we create.

Tokens and storage. OAuth refresh and access tokens issued by Intuit are stored encrypted in our database and are accessible only to the connected QuickBooks company.

Use of QuickBooks data. We use QuickBooks data solely to provide the integration: syncing vendors, recording expenses, and showing connection status to administrators. We do not sell QuickBooks data, share it for advertising, or use it to train machine-learning models.

Your control. An administrator can disconnect QuickBooks at any time from /admin/integrations/quickbooks or by revoking access in Intuit at appcenter.intuit.com/app/connection. Disconnecting deletes our copy of the QuickBooks tokens. Your use of QuickBooks itself is governed by Intuit’s privacy policy at intuit.com/privacy.

Brand Ambassadors can connect a PayPal account to receive payouts. We use the PayPal Log In with PayPal flow and store only the identifiers and tokens required to send a payout (a hashed PayPal payer ID, refresh token, and the email address on the PayPal account). Your PayPal credentials are never sent to or stored by us. Your use of PayPal is governed by PayPal’s privacy statement.

We do not sell personal information. We share information only as follows:

• Service providers who host or operate the Service on our behalf under contractual confidentiality obligations: Supabase (database and auth), Railway (application hosting), Resend / SendGrid or similar email provider, Dropbox (document storage), Google Maps (address autocomplete), PayPal (payouts), and Intuit QuickBooks (accounting sync).
• Clients of NMB Media: only the limited details required for a client to verify staffing for their event (e.g., assigned BA name, photo, check-in confirmation).
• Tax authorities as required by law, including 1099-NEC filings.
• Legal compliance: when required to comply with law, valid legal process, or to protect rights, property, or safety.
• Successors: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We retain personal information for as long as your account is active and for as long as needed to comply with our legal obligations (including IRS recordkeeping, which generally requires that we retain payment and tax records for at least seven years). Geolocation snapshots and check-in selfies are retained for the life of the associated job record. You may request deletion as described in Section 9.

We use TLS in transit, encryption at rest for sensitive fields (including taxpayer IDs and OAuth tokens), Supabase Row Level Security, and least-privilege access controls. No method of transmission or storage is 100% secure, but we work hard to protect your information and review our controls regularly.

You may review and update most of your profile information from inside the Service. You may also email privacy@nmbmedia.com to request access, correction, or deletion of your personal information, subject to our legal recordkeeping obligations. Residents of California, Colorado, Virginia, and other U.S. states with consumer-privacy laws have additional rights under those laws and may exercise them through the same email address.

The Service is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from children.

The Service is operated from the United States. If you access it from outside the U.S., you acknowledge that your information will be processed in the U.S., which may not provide the same level of data-protection law as your country.

We may update this Policy from time to time. If we make material changes, we will update the “Effective” date at the top and, where appropriate, give notice through the Service or by email. Your continued use of the Service after the change becomes effective means you accept the updated Policy.

Questions about this Policy or our privacy practices? Contact us at privacy@nmbmedia.com or by mail at the address in Section 1.