Privacy Policy

Last updated: August 22, 2026

This Privacy Policy explains how GR Custom Retreats — BNB OPS (the "App"), operated by GR Servicing LLC (doing business as GR Custom Retreats) and developed by NorthStacker, handles information. The App is a private, invitation-only tool used to coordinate construction and renovation work between GR Custom Retreats, its crew, and the general contractors it works for. It is not a consumer product and is not directed to the general public.

Information we collect

  • Account information: name, email address, and role of each authorized user, and which properties each crew member may access.
  • Project records: property addresses, scope line items by trade, amounts, completion percentages, status, and related notes.
  • Photos and documents: jobsite progress photographs uploaded by crew, and design decks, drawings, and specification files uploaded by the office.
  • Invoicing information: estimate and invoice line items, totals, and balances read from a connected QuickBooks Online company, and the invoice drafts the App creates there.
  • Progress reports: generated PDF reports and the addresses they were sent to.

How we use information

We use this information solely to operate the App: to track work against scope, record evidence of work performed, generate invoice drafts and progress reports, and coordinate among authorized users. We do not sell personal information, and we do not use it for advertising.

QuickBooks Online data

If an administrator connects the App to a QuickBooks Online company, the App uses Intuit's APIs only to read estimates and invoices for that company and to create invoice drafts within it. The App does not send invoices, process payments, or move money. Access and refresh tokens are stored in a table that is unreadable by every application role and reachable only by the server. We do not sell or share QuickBooks data. The connection can be revoked at any time from within QuickBooks, which stops all further access.

Photographs of work sites

Photographs are taken by crew to evidence construction progress and are expected to show work, not people. Images are resized on the device before upload and are stored in private buckets, served only through short-lived signed links to users authorized for that property.

Service providers

We rely on a small number of service providers to run the App, and share information with them only as needed to provide the service. Data is stored in the United States.

  • Supabase — database, authentication, and file storage;
  • Vercel — application hosting;
  • Intuit QuickBooks Online — estimates, invoices, and invoice drafts, when connected;
  • Resend — transactional email, used to deliver progress reports.

Security

Access is restricted to authorized accounts and enforced in the database with row-level security, so each tenant's records are isolated and crew members reach only the properties they are assigned. Files are kept in private storage and served through short-lived signed links, API tokens are held in a server-only table, and all traffic is served over HTTPS.

Data retention

We keep information for as long as it is needed to operate the App and support the business relationship, and we delete or de-identify it on request where we are not required to retain it.

Your choices

You may request access to, correction of, or deletion of your information by contacting us at the address below.

Children

The App is a workplace tool and is not intended for anyone under 18. We do not knowingly collect information from children.

Changes

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this Privacy Policy: GR Custom Retreats, contact@grcustominteriors.com.