01 / Who this notice covers
This notice describes information handled through jlc.ltd, the firm’s client-access application at access.jlc.ltd, and connected financial-workspace features when enabled. The firm operates under the jlc limited. brand through Jedadiah Luke Chilton, CPA PLLC (“we,” “us,” or “the firm”).
Your engagement agreement may contain additional confidentiality, service, and record-handling terms. Features and connected services vary by engagement. A description on this page does not activate a bank connection, authorize access to another client’s records, or mean every described feature is available.
02 / Information we handle
- Contact and engagement information: names, contact details, business information, service requests, correspondence, invitation status, and information supplied for engagement review.
- Identity and access information: Microsoft account identifiers, role assignments, sign-in and authorization information, and technical details needed to maintain authorized access.
- Client records: documents and financial information you provide or authorize, which may include tax records, bank and credit activity, assets, debts, ownership shares, source references, and financial statements.
- Workspace activity: proposed classifications, review decisions, saved instructions, prepared prompts, revisions, and audit history.
- Technical information: information used to deliver and protect the websites and application, such as IP addresses, requested pages, browser details, and diagnostic events.
Use the approved secure channel for sensitive records. Do not put passwords, verification codes, recovery keys, or banking login credentials into chat, documents, or saved instructions.
03 / How information is used
We use information to respond to requests, evaluate and deliver engagements, establish authorized client access, organize records, support financial and accounting work, maintain a history of changes, and operate and protect our services. Information may also be retained or disclosed where required by applicable legal, regulatory, or professional obligations.
When you request an enabled financial-workspace feature, the application may use the relevant records to draft transaction classifications, organize assets and liabilities, calculate a balance sheet or net worth, or save instructions for later use. Draft classifications and financial statements require client review before they are marked reviewed.
05 / Financial data and AI-assisted work
When you ask a connected plugin to retrieve or work with your records, the selected results are sent to the host conversation. Those results may contain personal or financial information. Your conversation and the host’s processing are also subject to that provider’s applicable terms, settings, and privacy practices.
Azure storage does not mean all processing occurs exclusively inside Azure. Ask the firm about the intended workflow before using sensitive records with a connected host. AI-assisted outputs may be inaccurate or incomplete; review material results against their sources.
The prompt-writer feature can store both your original request and a prepared prompt in your financial workspace. Saving a prompt does not itself execute it, schedule work, or grant additional access.
06 / Access and security
The Azure client-access design uses Microsoft sign-in and server-side authorization. The financial-workspace implementation is designed to associate records with the authenticated client, separate read access from permission to save changes, and record revisions. These financial-workspace features remain subject to activation and verification before client use.
We use the access controls and cloud protection settings applicable to the deployed service. Use HTTPS addresses and the approved document-sharing channel. A provider’s security features or certifications do not, by themselves, certify the firm or guarantee that every risk has been eliminated.
Keep sign-in methods secure and contact the firm promptly about suspicious access. Ordinary email is not the approved channel for passwords, full account details, tax returns, or identity documents.
07 / Retention and deletion
The firm’s existing general policy is to retain engagement records for at least seven years. The current onboarding process is configured to retain onboarding records for ten years for accounting audit purposes. Applicable engagement terms, record categories, and legal or professional obligations may require different or longer retention.
Financial-workspace records, drafts, saved instructions, and audit history are subject to the applicable engagement and retention schedule. Ask the firm to confirm the schedule for your workspace before importing records. Recovery settings and stored revision history are separate from the firm’s record-retention policy.
Disconnecting a plugin or removing application access does not automatically delete records held by the firm. Information already shared with a connected host is handled separately by that provider. Deletion requests may be limited by record obligations, preserved versions, backups, or other permitted retention needs.
08 / Questions and requests about your information
You may contact the firm to request access to or correction of your information, ask about a provider or workflow, request deletion, or raise a privacy or security concern. We may need to verify your identity and authority before acting. Available responses depend on the record, the engagement, and applicable obligations.
You can ask the firm to remove application access or explain how to disconnect a supported integration. Contact the connected provider about its own account, conversation, or privacy settings.
09 / Changes to this notice
We may update this notice as our services or information-handling practices change. The published version will identify its update date. Questions about which version or engagement terms apply to your records should be directed to the firm.
10 / Contact the firm
For privacy questions, corrections, deletion requests, or suspected unauthorized access, contact access@jlc.ltd or 919.888.5154.
Start with a brief description. Your team can arrange an appropriate secure channel for confidential supporting records.