Last updated: October 2026

 

RBO Services LLC, doing business as Lion Chaser Group ("Lion Chaser," "we," "us," or "our"), respects your privacy and is committed to protecting the information you share with us. This Privacy Policy explains how we collect, use, and safeguard information when you interact with our website, our client portal and software applications, and our services.

 

This policy covers two different things. Sections marked "Website" apply when you visit lionchaser.net or contact us. Sections marked "Portal" apply when you or your team use our client portal and connected applications. Where a section is not marked, it applies to both.

 

Website: Information We Collect

We may collect information that you voluntarily provide when you interact with Lion Chaser, including:

• Name

• Email address

• Phone number

• Company name

• Business information shared through forms, calls, emails, or meetings

 

We may also collect limited technical information automatically when you visit our website, such as IP address, browser type, and device information. Our website is hosted on a third party platform that may collect standard traffic statistics.

 

Website: How We Use Information

We use the information we collect to:

• Respond to inquiries and requests

• Schedule meetings and communicate with clients or prospective clients

• Provide consulting, accounting, and advisory services

• Deliver proposals, service information, and updates

• Improve our services and website functionality

• Maintain internal business records

 

We do not sell personal information.

 

Portal: Account and Device Information

When you or your team use our client portal, we collect and store:

• Your name, email address, and role, along with the identity of whoever invited you

• A password, stored only as a cryptographic hash, if you set one

• Email verification status, and any profile image supplied by a third party sign-in provider

• Sign-in codes sent to your email address, and records of failed sign-in attempts including the email address used and the originating IP address

• Session records, including a session cookie and the browser or device identifier associated with the session

• API keys issued to your organization, stored as a hash, along with the permissions granted and the time last used

• Interface preferences, such as theme, layout, and recently viewed workspaces

 

We use this information to authenticate you, secure your account, prevent abuse, and operate the portal.

 

Portal: Cookies and Similar Technologies

The portal uses a single essential session cookie to keep you signed in. It is restricted from script access, set to expire after a defined period, and transmitted only over an encrypted connection. We also store interface preferences locally in your browser, and the portal installs a service worker so it can load as an application on your device.

 

The portal does not use advertising cookies, tracking pixels, or third party advertising or analytics networks. When you add a payment method, a script from our payment processor loads in your browser so that card and bank details are captured directly by them.

 

You can clear cookies and local storage through your browser at any time. Clearing the session cookie signs you out.

 

Portal: Client Business Data

Our applications connect, with your authorization, to business systems you already use. These include accounting and ERP platforms, banking and payment platforms, point of sale systems, payroll providers, property management systems, field service systems, customer relationship management tools, task and project systems, credential vaults, and document storage. We refer to these collectively as "Connected Systems," and to the information we retrieve from them as "Client Business Data."

 

This section applies in addition to the rest of this Privacy Policy, and it controls if there is any conflict.

 

How connections are authorized

Where a provider supports it, we connect using token based authorization. An authorized user of that system grants access through the provider's own consent screen, we store an encrypted access token, and we never see or store that system's username or password. QuickBooks Online and Plaid work this way.

 

Some systems do not offer that. Where a system can only be accessed with credentials, those credentials are handled through our credential vault, described under Credentials and the Vault below.

 

What we access

We request only the access needed for the features you have enabled. Depending on the Connected System and the work you have engaged us for, Client Business Data may include:

• Company profile and configuration, including legal name, address, fiscal calendar, and currency

• Master data and lists, such as chart of accounts, locations, classes, departments, and item catalogs

• Contact records for customers, vendors, tenants, and employees

• Transactional records, such as invoices, bills, payments, journal entries, deposits, sales, and purchases

• Financial reports and balances

• Bank and card account information, including account and routing identifiers, balances, and transaction history

• Attachments and supporting documents associated with the records above

 

Some connections are read only. Others allow us to write records back, create entries, post comments, or upload files, because the work you have engaged us for requires it. We request only the permissions the enabled features need.

 

How we use it

We use Client Business Data only to deliver the services you have asked for. That includes bookkeeping and close work, reconciliations, reporting, mapping and migrating data between platforms, validating balances, preparing draft entries and import files for your review, managing your engagement, and supporting your team.

 

We do not sell Client Business Data. We do not rent, license, or share it with data brokers. We do not use it for advertising, ad targeting, or lead generation, ours or anyone else's. We do not use it for any purpose you have not authorized.

 

Portal: Credentials and the Vault

We offer a credential vault so you can share access to systems that do not support token based connections. Through the vault, you may provide login credentials, API keys, secure notes, and other configuration values.

 

Those secret values are not stored in our application database. They are transmitted to 1Password and stored in a vault that Lion Chaser controls, under a service account dedicated to your organization. The token used to reach that vault is encrypted at rest. Our application retains references and non-secret metadata, such as item names and which vault an item lives in, so we can display and manage the list.

 

Lion Chaser personnel assigned to your engagement can retrieve and use credentials you place in the vault, for the purpose of performing the work you have engaged us for. Treat anything you put in the vault as shared with your Lion Chaser team.

 

You may ask us to remove a vault item at any time by emailing support@lcdevgroup.com. If you provide a credential and later change or revoke it on your side, that takes effect immediately regardless of what our vault holds.

 

Portal: Payment Cards and Bank Accounts

Payments and billing run through Stripe. When you add a payment method, card and bank details are captured in your browser by Stripe and sent directly to Stripe. We do not receive or store full card numbers or full bank account numbers.

 

We create and maintain a Stripe customer record for your organization containing your company name, contact email, phone number, and billing address. We retain Stripe identifiers, the card brand and last four digits, the bank last four digits, and references to invoices, subscriptions, charges, and any payment recorded outside Stripe. Stripe processes this information as a payment processor under its own terms and privacy policy.

 

Portal: QuickBooks Online and Intuit Data

QuickBooks Online is a Connected System, and the Client Business Data section applies to it. The following applies specifically to data we access through Intuit's APIs.

 

We access QuickBooks Online data only after an authorized user of the QuickBooks company grants access through Intuit's OAuth 2.0 consent screen. We never ask for, store, or accept QuickBooks usernames or passwords. Access is granted by token, the token is stored encrypted, and you may revoke it at any time.

 

We request the QuickBooks accounting scope. Depending on the features you enable, data we access may include company profile and settings, chart of accounts and other lists, customers, vendors, employees, transactions, reports, and attachments. We do not request QuickBooks payroll access. We do not access QuickBooks Payments card numbers, bank login credentials held by Intuit, or Social Security numbers.

 

We use QuickBooks data only to deliver the features and services you have asked for. We do not sell it, share it with data brokers, use it for advertising, or use it for any purpose you have not authorized. Identifiable QuickBooks data is not used to train any artificial intelligence model, ours or a third party's.

 

You may disconnect us from the Apps menu inside QuickBooks Online, by asking us in the portal, or by emailing support@lcdevgroup.com. Disconnecting revokes our access going forward. Data previously retrieved is handled as described under Retention below.

 

QuickBooks, QuickBooks Online, and Intuit are trademarks of Intuit Inc. Intuit does not sponsor or endorse our applications, and your use of QuickBooks Online remains governed by your agreement with Intuit.

 

Portal: Bank Connections and Plaid

We use Plaid Inc. to connect to your bank and card accounts. When you link an account, Plaid Link opens and you enter your banking credentials directly with Plaid. Those credentials go to Plaid, not to us. We never see, receive, or store your online banking username or password.

 

Plaid returns account and transaction information to us, which may include institution and account names, account type, account and routing identifiers, balances, transaction history, and account holder details as reported by your institution. We use that information to perform reconciliations, categorize activity, prepare entries, and support the accounting work you have engaged us for.

 

Plaid handles your information under its own privacy policy, available at https://plaid.com/legal/#end-user-privacy-policy. By linking an account you also agree to Plaid's end user privacy policy. You may ask us to remove a bank connection at any time by emailing support@lcdevgroup.com.

 

Portal: Where Data Lives and Who Else Touches It

We are primarily a United States business and our systems are operated primarily in the United States. Several of our service providers are global companies that may process or store data outside the United States. Where that happens, the provider is responsible for maintaining an appropriate transfer mechanism.

 

To deliver our services we copy client information into tools that Lion Chaser controls. This is how the work gets done, and it means your information does not stay inside a single application. Specifically:

• Customer relationship management. Company records, contacts, deals, quotes, and engagement status are maintained in HubSpot

• Task and project management. Tasks, comments, and attachments related to your engagement are maintained in ClickUp. Comments posted from the portal carry the name and email address of the person who posted them

• Billing and payments. Customer, payment method, invoice, and subscription records are maintained in Stripe

• Credentials. Vault items are stored in 1Password, as described above

• Email. Sign-in codes, invitations, password resets, and notification emails are sent through SendGrid, and those emails can include your name, your company name, and details such as the last four digits of a payment method

• Hosting, database, and storage. Our applications and databases run on third party cloud infrastructure

• Workflow automation. We use automation tooling to move information between the systems above

 

Each of these providers is bound by contract to confidentiality and to using the information only to provide services to us. None is permitted to use it for its own purposes, and we do not transfer Client Business Data to any third party for that party's own commercial purposes. We use other providers from time to time, and a current list of the specific providers we use is available on request at support@lcdevgroup.com.

 

Portal: Who at Lion Chaser Can See Your Information

Users you invite to your workspace can see the information in that workspace, according to the role you assign them. Lion Chaser administrative staff can access client workspaces, including tasks, contracts, billing records, vault item lists, and integration status, in order to deliver and support your engagement.

 

Artificial Intelligence

We use artificial intelligence tools in the course of delivering services, including to read, classify, summarize, and prepare accounting information. Where we use a third party model provider, we do so under business or enterprise terms that prohibit the provider from using our content to train their models. Identifiable client information is not used to train any Lion Chaser model or any third party model.

 

Output from these tools is drafted for review. A person at Lion Chaser or at your organization reviews and approves work product before it is posted or filed. We do not use automated decision making that produces legal or similarly significant effects about any individual.

 

Aggregated and De-identified Data

We may create aggregated and de-identified data from Client Business Data and from how our applications are used, and use it to:

• Produce industry and peer group benchmarks, including operational and financial metrics by concept, segment, region, and business size

• Analyze trends and publish research, reports, and commentary

• Build, test, train, and improve our own tools, models, workflows, and services

• Develop new products and features

 

Before data is used this way, we will remove direct identifiers and apply reasonable measures so the result cannot reasonably be used to identify you, your business, your customers, your vendors, your employees, or any other individual. We will maintain that de-identification, we will not attempt to re-identify the data, and we will contractually require the same of anyone who receives it from us. Any benchmark or published output will be reported only across a group large enough that no single participant's figures can be inferred from it.

 

We do not sell or license identifiable Client Business Data, and nothing in this section permits any use of identifiable data. Aggregated and de-identified data is our property, and we may continue to use it after your engagement ends.

 

SMS and Text Messaging

If you provide your phone number to Lion Chaser or communicate with us by phone or text, we may send you occasional SMS messages related to your engagement, such as scheduling, responding to inquiries, service coordination, and ongoing client work. We do not send marketing or promotional text messages.

 

Message frequency varies and is typically low. Message and data rates may apply.

 

You may opt out at any time by replying STOP to any message. Reply HELP for assistance, or contact support@lcdevgroup.com.

 

Consent to receive SMS messages is not required as a condition of purchasing services from Lion Chaser. Mobile phone numbers collected for SMS communications are not shared with third parties or affiliates for their own marketing or promotional purposes. Phone numbers you give us are stored in our business systems, including our customer relationship management and billing platforms, as described above.

 

Email Notifications

The portal can send you email notifications about activity in your workspace, such as billing events, membership changes, and onboarding progress. You can change or turn off notification delivery in your notification settings. Messages required to operate your account, such as sign-in codes and password resets, are not optional.

 

Information Sharing

Beyond the providers described above, we may disclose information when required to comply with legal obligations, respond to lawful requests, protect our rights, or in connection with a merger, acquisition, or sale of assets. We do not sell personal information.

 

Security

We take reasonable steps to protect the information we hold. Current measures include:

• Encrypted connections for all traffic to our applications, provided by our hosting platform

• Encryption at rest, using AES-256 class encryption, for integration access tokens and vault service credentials, plus disk level encryption provided by our hosting and database platforms

• Passwords stored only as cryptographic hashes, and API keys stored only as hashes

• Role based access control, with permissions scoped by role and by organization, and scoped permissions on API keys

• Rate limiting and lockout on repeated failed sign-in attempts

• Activity logging for contract, onboarding, and integration events

 

No method of transmission or storage is completely secure, and we do not represent that our systems are immune from compromise. If we become aware of a security incident affecting your information, we will notify you without undue delay and as required by law, and we will notify affected providers as their terms require, including Intuit under the Intuit Developer Terms.

 

Retention

We retain information as long as needed to deliver services, maintain business and financial records, secure our systems, and comply with legal obligations.

 

Some records are retained after an engagement ends. User account records are retained because they are referenced by contracts, billing history, audit logs, and records in our connected business systems, and removing them would break those records. Activity and audit logs, billing records, and engagement records are retained for our record keeping and legal obligations.

 

When you disconnect a Connected System, we stop accessing it and revoke or delete the stored token or credential. Data already retrieved from that system remains in our records subject to this section, unless you ask us to remove it.

 

Records held in our service providers' systems, such as Stripe, HubSpot, ClickUp, or 1Password, are subject to those providers' own retention behavior. Where you ask us to delete information, we will also request deletion from those providers where we are required to and where the provider permits it.

 

Your Privacy Rights

Depending on where you live, you may have the right to know what personal information we hold about you, to request a copy, to correct it, to request deletion, and to opt out of sale or sharing.

 

We do not sell or share personal information as those terms are defined under California law, and we have not done so in the preceding twelve months. We do handle information that may be treated as sensitive, including financial account identifiers and, through the vault, credentials you choose to give us. We use that information only to deliver the services you have engaged us for, to secure and operate our systems, to bill you, and to meet legal obligations. We do not use or disclose it to infer characteristics about you.

 

To exercise a right, email support@lcdevgroup.com. We will verify your identity before acting and respond within the time the law requires. Requests to access or receive a copy are handled manually, and we will provide the information we hold in a reasonable format.

 

Requests to delete are handled by closing your account, stopping our use of your information, and removing what we are able to remove, subject to the exceptions in the Retention section above. We will tell you what we are retaining and why. We will not discriminate against you for exercising a privacy right.

 

If you are in the European Economic Area or the United Kingdom and we process your personal data, our lawful basis is performance of a contract, our legitimate interest in operating and securing our services, or your consent where required. You may lodge a complaint with your supervisory authority, and you may contact us at the address below for any request.

 

Third Party Links

Our website, portal, and communications may contain links to third party websites or services. Lion Chaser is not responsible for the privacy practices or content of those external sites.

 

Children

Our website, applications, and services are for business use and are not directed to children. We do not knowingly collect personal information from anyone under sixteen (16).

 

Contact Information

If you have questions about this Privacy Policy or how your information is handled, please contact:

 

RBO Services LLC dba Lion Chaser Group
support@lcdevgroup.com
https://lionchaser.net

 

Policy Updates

We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised effective date.