The client portal

Portal Privacy

What the portal reads, what it never touches, and who can see it.

Last updated: 26 August 2026

Who we are, and what this page covers

Breakaway Ops LLC is an AI consulting practice run by Joe Brunner and Fritz Huff, based in Tampa, Florida. When this page says “we,” it means the two of us — there is no third party inside the business.

This page covers the client portal at portal.breakawayops.com and nothing else. Our public website has its own privacy page, and it describes something different: a booking form for people who are not clients yet. If you are signed in to the portal, this is the page that applies to you.

You can reach us at hello@breakawayops.com or (727) 630-9494.

What you give us to have an account

Your email address, your name, and your business name. That is the whole list.

Your password is not on it. What we store is a scrambled derivation of it that cannot be turned back into the password, by us or by anyone who ever got hold of the database. We cannot read your password back and we will never ask you for it. If it is lost we send you a fresh link to set a new one; there is no other way, on purpose.

What we read from your QuickBooks

Only after you press Connect and say yes on Intuit’s own permission screen. You are giving permission to Intuit, not typing anything into us — we never see your QuickBooks username or password.

Once connected, the portal reads these records from your books:

• Customers, and the invoices and estimates raised against them.
• Payments received and sales receipts.
• Money out: purchases, bills, and bill payments.
• Journal entries, which is where payroll usually lands.
• Your chart of accounts, so a category can be recognized.
• Recurring templates, which is what the “what’s coming” view is built from.

It reads the whole of each of those, because a dashboard that only reads half your invoices reports the wrong number. It does not read anything else in your QuickBooks.

What the portal writes back

Only what you press. Adding a customer, raising an invoice, turning an accepted quote into an invoice, marking work as done. Every one of those is a button you pressed that moment. The portal never edits or deletes anything in your books on its own, and it keeps no independent copy that could drift out of step with QuickBooks — when the two would disagree, QuickBooks is right and we re-read it.

Your mailbox, only if you choose

You can link a Gmail or Outlook account so approved messages leave from your own address instead of ours. You do not have to. If you do not, we send from Breakaway’s address on your behalf and nothing about your mailbox is involved at all.

If you link one, the default permission is to send only — the portal cannot read your inbox. Reading is a separate permission you would have to choose deliberately, and it exists so that a customer replying to a chase-up can be shown to you next to the invoice it is about. We ask for the narrower one by default because most of the value does not need the wider one.

Unlinking wipes our copy of the mailbox keys immediately and tells the provider the link is over.

The drafting, and what a model is shown

The portal writes first drafts of two kinds of message: a nudge on an invoice that has gone past due, and a follow-up on a quote nobody has answered. It also sorts replies so the urgent ones surface first.

Those drafts are written by Anthropic’s Claude, and this is exactly what it is given for one message: the invoice or quote number, the amount, the due date, how late it is, the customer’s name, your business name, and your own name and phone. Your books are never sent to the model. There is no bulk upload of your accounts anywhere.

No QuickBooks data is used to train any model, ours or anyone else’s. Anthropic does not train on what is sent through their API.

Nothing is ever sent by the model. A draft sits in your queue until you read it and approve it. You can edit it, or throw it away. Approving is the only thing that puts a message in front of your customer.

Who else touches it

The short answer is: the companies that run the machinery, each doing one job, and no one else.

• Cloudflare runs the portal and holds its database, in the United States.
• Intuit is the source of your accounting records and holds the permission you granted.
• Anthropic receives the fields listed above when a draft is written, and nothing else.
• Resend delivers approved messages when you have not linked your own mailbox.
• Google or Microsoft, only if you linked that mailbox yourself.

None of them is given your information for their own purposes, and none of them is paid in data.

Who can see your figures

You can. We can. Nobody else, and no other client, ever.

Every business on the portal is walled off from every other one in the program itself, not by anyone being careful. That separation is checked by automated tests that fail the build if one business could ever see another’s rows.

We can see your data because we run the thing — the two of us have access to the database, the way anyone operating a system does. We look when you ask us to fix something, or when something is broken. We do not browse it. It is never used as a public example, never shown to another client, and never combined with anyone else’s to make an average, a benchmark, or a product.

We do not sell it. Not to anyone, for any price. We do not rent it, trade it, or share it for anybody’s marketing.

How long we keep it

While you are a client, the portal holds a copy of your books so the screens are fast and so it can tell what changed since yesterday. It is refreshed from QuickBooks, not accumulated separately.

Some things are deliberately kept even after the thing they describe is gone: if you delete a note, the note’s words go, but the record that a note was deleted, and when, stays. That record is what makes it possible to answer “who changed this” six months later.

To have all of it erased, ask us. Email hello@breakawayops.com and we delete your business’s data from the portal by hand and confirm when it is done. There is no self-service button for that today, and we would rather say so than pretend otherwise. Your QuickBooks is untouched by any of this — it is yours and it stays exactly as it is.

Security, in specifics

• The keys to your QuickBooks and your mailbox are encrypted before they are written down. The key that unlocks them is not in the database and not in our code; it lives in Cloudflare’s secret storage.
• Everything travels over HTTPS. There is no unencrypted path in.
• Passwords are stored as a slow one-way derivation, never as text, never recoverable.
• Sign-in links and passwords are never written to a log.
• The portal sets one cookie: the one that keeps you signed in. It cannot be read by scripts, it only travels over HTTPS, and there is nothing else in it. No analytics, no advertising, no trackers — there are none anywhere in the portal.

We are two people, not a security department, and we are not going to dress that up. What we can tell you is what the system actually does, which is the list above.

If this page changes

We update it the day the thing it describes changes, not on a schedule. The date at the top is the real date of the last change. If a change matters to you — a new company touching your data, a new kind of information collected — we will tell you directly rather than quietly editing this page.

Questions

Ask a person: hello@breakawayops.com. If you want to know exactly what we hold about your business, ask and we will tell you.