Privacy Notice
Effective October 5, 2026 · Version 2026-10-05-r2
Commercial preview: live subscriptions and production integrations are not enabled yet.
Who we are
De Luna Site and Landscape, doing business as De Luna CRM, operates this business service. Contact shaun@dlascapes.com or 2017 Muirfield Bend Dr Unit 204, Hutto, TX 78634, United States. This notice describes the commercial CRM service; connected providers also have their own privacy notices.
Information processed
We process account identifiers and verified email information from Google Sign-In; company names, memberships, roles and preferences; project cards, customer information, comments, messages, schedules, labor records, expense records and uploaded files that authorized users provide; selected QuickBooks customer/document information and imported PDFs; subscription, transaction-status and billing identifiers from Stripe; and access, security, audit and support information needed to operate the service. Hosting and integration providers may process IP addresses, device/browser information and service-request metadata. Payment-card entry is handled by Stripe; the CRM does not store full card details or security codes. Do not send passwords, API keys or tokens in support messages.
Why we use information
We use information to authenticate authorized users, provide company workspaces and integrations, enforce permissions, process subscriptions, respond to support requests, maintain audit records, provide recovery backups and operational alerts, prevent misuse and comply with applicable law. QuickBooks data is processed for the connected company's requested workflows. The current commercial service does not use customer content for generative-AI training, cross-customer data modeling, targeted advertising or sale of personal information. Any materially different future use would require an updated notice and consent where required.
Sharing and service providers
Your company administrator and authorized teammates can access information according to their assigned permissions. Authorized users can deliberately share selected project details and files through customer links; anyone holding a valid link may be able to view that selected information. Link expiry or revocation does not recall copies a recipient already downloaded. Platform support access to card summaries requires a company-issued, time-limited grant; infrastructure administration remains necessary to operate the service.
Providers include Cloudflare for application hosting, databases, files and backups; Google for sign-in; Intuit for authorized QuickBooks connections; Stripe for subscription billing; and Resend for operational email. We provide each service the information needed for its role. We may disclose information where legally required or reasonably necessary to protect rights and security, and in a business transfer subject to applicable safeguards. We do not make one company's private workspace available to unrelated companies.
Storage and security
Data is processed using cloud services whose infrastructure may operate in the United States and other countries. We do not promise exclusive Texas or United States storage. The app uses HTTPS, permission checks and encrypted stored QuickBooks authorization tokens. Security measures reduce risk but cannot guarantee absolute security. Google account security settings apply to sign-in; the CRM currently does not independently enforce multi-factor authentication.
Retention and deletion
Workspace records remain while needed to provide the service and for legitimate operational or legal purposes. Canceling billing or disconnecting QuickBooks does not automatically erase existing records. Contact support to request export, correction or deletion; we will verify your authority and explain any legal or operational limitations. Routine recovery backups are configured for 30-day retention. A deletion may not immediately remove a record from an existing recovery copy; access to recovery copies is restricted and they expire under the retention schedule. Records required for tax, billing, dispute resolution, fraud prevention or legal obligations may be retained as necessary. This notice does not promise a deletion deadline that the service has not implemented.
Your choices and requests
Company administrators control user invitations and roles. Company owners can disconnect QuickBooks and manage subscriptions through their workspace. Ask your company administrator about company-controlled records; contact us at shaun@dlascapes.com for privacy assistance, including access, correction, export, deletion or an appeal of our response. Rights and response obligations depend on applicable law. We do not restrict rights provided by that law. Please do not include unnecessary sensitive information in requests.
Cookies and local storage
The service uses session and sign-in cookies and browser storage for authentication, security and workspace preferences. Connected sign-in, billing and other provider pages may use their own cookies. The commercial application does not add advertising trackers. Disabling necessary cookies may prevent sign-in or normal use.
Children and changes
The service is intended for businesses and authorized adult users, not children. Contact us if you believe a child has provided personal information. We will publish notice updates and communicate material changes as appropriate. New uses of previously collected information will be handled in accordance with applicable notice and consent requirements.