Privacy Policy

DaVinciCR LLC · The System of Intelligent Enterprise

Effective: August 23, 2026 · Last updated: August 23, 2026

1. Who We Are

The DaVinciCR platform (the “Platform,” “Service,” “we,” “us,” or “our”) is operated by DaVinciCR LLC, a Colorado limited liability company doing business as DaVinci Contracting Resource.

DaVinciCR LLC
1840 Delaware Pl Unit A, Longmont, CO 80501, US
Phone: 720-804-9908
Email: jeff@davincicr.com
Web: https://davincicr.com

This policy explains what information the Platform collects, how we use it, who we share it with, how long we keep it, and how you can have it deleted. It applies to davincicr.com and to the tenant workspaces we host on our subdomains (for example yourcompany.davincicr.com).

2. What DaVinciCR Does

DaVinciCR is a business-operations platform for small businesses. It brings contacts, jobs, communications, scheduling, documents, and reporting into one system, and it includes Ai-assisted features that help draft messages, summarize records, and prepare documents for a person to review.

3. Information We Collect

3.1 Information you give us

Account information — name, email address, phone number, business name, and role.
Business data you enter — your customer and contact records, jobs, estimates, notes, schedules, documents, and any other content you or your team put into your workspace.
Billing information — handled by our payment processor. We do not store full payment card numbers on our servers.
Support correspondence — what you send us when you contact us.

3.2 Information collected automatically

Technical and usage data — IP address, browser and device type, pages viewed, actions taken, and timestamps, used to operate, secure, and troubleshoot the Service.
Cookies — we use cookies that are necessary to sign you in and keep your session secure. We do not use advertising cookies and we do not sell advertising on the Platform.

4. Google Sign-In and Google User Data

You may choose to sign in to DaVinciCR with your Google Account. If you do, Google asks for your consent before sharing anything with us, and you can see exactly what is being requested on Google’s consent screen.

4.1 Google permissions we request

The DaVinciCR OAuth application currently requests only basic sign-in permissions:

Google permission (OAuth scope)	What it gives us	Why we use it
`openid`	A stable identifier for your Google Account	To recognize your account on return visits and keep your sign-in linked to the right workspace
`email`	Your Google Account email address	To identify your account, match you to your workspace invitation, and send service notices
`profile`	Your basic profile: name and profile picture	To display your name and avatar inside your workspace

We do not request access to your Gmail messages, and we do not request access to your Google Drive files. The DaVinciCR application does not hold Gmail or Drive permissions. If we ever add a feature that needs additional Google permissions, Google will present you with a new consent screen describing exactly what is being requested, and this policy will be updated before that feature is released. You are never opted in silently.

4.2 How Google data is handled

Google sign-in data is used only to authenticate you and to populate your account profile inside the Platform.
It is not sold or transferred to advertisers, data brokers, resellers, or any other third party.
It is not used for advertising of any kind.
It is not used to determine creditworthiness or for lending purposes.
It is not used to train or improve any generalized artificial-intelligence or machine-learning model.
Access is granted by you through Google OAuth and you can revoke it at any time at myaccount.google.com/permissions. Revoking access immediately stops DaVinciCR from accessing your Google Account.

4.3 Limited Use

DaVinciCR’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How We Use Your Information

To provide, operate, secure, and support the Platform.
To authenticate users and control access to the correct workspace.
To generate the reports, documents, drafts, and summaries you ask for.
To send service and account notices, including billing and security notices.
To detect, investigate, and prevent fraud, abuse, and security incidents.
To meet our legal, tax, and accounting obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Ai-Assisted Features

Some Platform features use artificial intelligence to draft text, summarize records, and prepare documents. When you use those features, the relevant content from your own workspace is sent to our Ai provider so the result can be generated and returned to you.

Output is presented to you for review. The Platform does not send email on your behalf without your action.
We do not use your business data, your customers’ personal information, or any Google user data to train or improve generalized Ai models. Our Ai provider is engaged as a service provider and is contractually restricted to processing the data for the purpose of returning your result.
Personalization stays scoped to your own workspace.

7. How We Share Information

We share information only in these circumstances:

Within your workspace — with the other users of your organization’s tenant, according to the permissions your administrator sets.
Service providers — hosting, email delivery, payment processing, and Ai processing vendors who process data on our instructions and are bound to protect it.
Legal — when required by law, subpoena, or valid legal process, or to protect the rights, safety, and property of DaVinciCR LLC, our users, or the public.
Business transfer — if DaVinciCR LLC is involved in a merger, acquisition, or sale of assets, in which case we will give notice before your information becomes subject to a different privacy policy.

We never sell or rent your information to advertisers, data brokers, or resellers.

8. Data Retention and Deletion

While your account is active — we retain your account information and workspace data for as long as your account is open, so the Service works.
After you close your account — workspace data is retained for 30 days to allow recovery from accidental closure, then deleted from active systems.
Encrypted backups — residual copies may persist in routine encrypted backups for up to 90 days after deletion, after which they are overwritten on the normal backup rotation.
Google sign-in data — deleted from active systems within 30 days of you revoking access or closing your account.
Records we must keep — invoices and transaction records are retained as long as tax and accounting law requires.

How to request deletion

Email jeff@davincicr.com with the subject line “Data Deletion Request” from the email address on your account, or call 720-804-9908. We acknowledge requests within 5 business days and complete verified deletions within 30 days. You may also disconnect Google access yourself at any time at myaccount.google.com/permissions.

9. Security

We protect information with encryption in transit (HTTPS/TLS), access controls that separate one tenant’s workspace from another’s, hashed credentials, least-privilege administrative access, and routine backups. No system is perfectly secure, but if a breach affects your personal information we will notify you and any required authority as the law directs.

10. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to withdraw consent, and to object to or restrict certain processing. Colorado residents have these rights under the Colorado Privacy Act. To exercise any of them, contact us using the details in Section 1 — we will not discriminate against you for doing so.

11. Children’s Privacy

The Platform is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have, we will delete it.

12. Where Data Is Processed

DaVinciCR LLC operates in the United States and our systems and service providers are located in the United States. If you use the Service from outside the United States, your information will be transferred to and processed there.

13. Changes to This Policy

We may update this policy as the Platform changes. When we do, we will revise the “Last updated” date above. If the changes are material — including any change to the Google permissions we request — we will notify account holders by email or by a notice in the Platform before the change takes effect.

14. Contact Us

Questions about this policy, or about how your information is handled:

DaVinciCR LLC
Attn: Privacy
1840 Delaware Pl Unit A, Longmont, CO 80501, US
Phone: 720-804-9908
Email: jeff@davincicr.com