This Privacy Policy explains how Goldstone Properties (“we,” “us,” or the “Company”) collects, uses, and protects information in connection with the Goldstone Properties web application at gpflips.com and the Goldstone Properties app for iPhone and Android (together, the “App”). The App is an internal, invite-only tool used by the Company to manage real-estate properties, leads, tasks, financials, and related documents.
Who this applies to
The App is not available to the general public. Access is limited to authorized Company personnel and to contractors working with the Company, each of whom has been invited by an administrator. There is no public sign-up. Contractors see only the jobs, messages and documents shared with their company. This policy describes our data practices for those authorized users and for the business data they manage within the App.
Information we collect
- Account information — the name and email address used to sign in, and your assigned role (administrator, member or contractor), and an optional phone number for text alerts.
- Business data you enter — property records, leads, contacts, tasks, financial figures, and related notes.
- Connected-service data — when you connect a third-party account (see below), we retrieve only the data needed to display it in the App, such as QuickBooks projects and profit-and-loss figures, or files stored in Microsoft OneDrive / SharePoint.
- Photos, videos, voice notes and files — only the ones you choose to take or send in a chat, task or job. The App uses your camera, microphone and photo library only when you tap to take, record, attach or save something.
- Messages — chat messages you send in the App, and business text messages and call records sent through the Company’s phone lines.
- Notification token — if you turn on notifications, a device token from Apple or Google so we can send alerts to your phone. You can turn notifications off at any time in your phone’s settings.
- Technical data — standard log and session information generated when you use the App.
How we use information
- To authenticate you and provide the App’s functionality.
- To display, organize, and report on your property, financial, and document data.
- To secure the App and prevent unauthorized access.
We do not sell your information, we do not use it for advertising, and we do not track you across other companies’ apps or websites.
Intuit QuickBooks data
If you connect QuickBooks Online, we use Intuit’s authorized OAuth process. We request access only to accounting data (the com.intuit.quickbooks.accounting scope). We use QuickBooks data solely to display your company’s projects and profit-and-loss figures inside the App and to let you import those actuals into your financial overview.
- Access and refresh tokens are stored securely on our server infrastructure and are never exposed to the browser.
- We retrieve QuickBooks data only when you are viewing it in the App; we do not resell or share it with third parties.
- You can disconnect QuickBooks at any time, which deletes the stored connection and tokens.
Microsoft OneDrive / SharePoint data
If you sign in with Microsoft to browse files, we use Microsoft’s sign-in to access only the files and folders you choose to view. We do not copy or retain the contents of those files beyond what is needed to display them during your session.
Third-party service providers
We rely on the following providers to operate the App. Each processes data only as needed to provide their service:
- Supabase — application database and authentication.
- Vercel — application hosting and serverless functions.
- Intuit (QuickBooks Online) — accounting data, when connected.
- Microsoft — OneDrive / SharePoint file access and Outlook email, when connected.
- Cloudflare — video storage and playback.
- Apple and Google — delivering push notifications to the iPhone and Android app.
- Jivetel — the Company’s business phone lines for calls and text messages.
- Resend — sending email notifications.
- Anthropic — AI features that help draft messages and scopes of work; only the text needed for the request is sent.
Data retention
We retain business data for as long as your account is active or as needed to operate the App. Connected-service tokens are retained until you disconnect the service or your account is removed.
Security
We use industry-standard measures to protect data, including encrypted connections (HTTPS), server-side storage of sensitive credentials, and access controls that limit data to authorized users. No method of transmission or storage is completely secure, but we work to protect your information.
Your choices
- You can request access to, correction of, or deletion of your account data by contacting us.
- Deleting your account: email us (address below) or ask the Company administrator who invited you. We remove your login and personal account information within 30 days. Business records you created for the Company (for example, messages on a job) may be kept as part of the Company’s records, labeled with your name.
- You can disconnect any connected third-party service at any time from within the App.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
Contact us
Questions about this policy or our data practices can be sent to
elihassan16@gmail.com.