Luxe PM Agent Privacy Notice
Effective date: September 29, 2026
Application: Luxe PM Agent Accounting, the accounting connection for Luxe PM Agent.
Read the End-User License Agreement.
1. Who operates the application
Georgia Luxe Outdoors LLC operates Luxe PM Agent, including Luxe PM Agent Accounting. These legal pages are hosted on the website of its parent, U.S. Luxe Outdoors LLC. This notice covers information handled by the PM application and its authorized connections; it does not replace the website's general privacy policy.
For application privacy, access, correction or deletion requests, contact projects@galuxeoutdoors.com.
2. Information the application handles
Depending on the sources and workflows authorized for a project, the application may process:
- Customer and project names, business contact details, project addresses, scopes, drawings and work orders.
- Invoices, customer payments, deposits, vendor bills, purchases, receipts, expense records and relevant accounting account identifiers.
- Assigned crews, work schedules, available time records, applicable compensation and payment information needed for project costing.
- Project correspondence, attachments, delivery information, photos and checklists.
- Connection status, source references, access and error records, approvals and audit history.
Each source requires its own authorized access. Information is limited by the company, project, record and workflow controls applicable to that source. Restricted reconciliation may examine account-level candidate transactions; unrelated transactions must not be added to a project's model context. Missing or uncertain financial information remains identified as such.
3. QuickBooks connection and owner control
An authorized QuickBooks company owner chooses whether to connect the company using Intuit's consent process. A new grant remains pending until company and account verification is complete and the required activation is authorized.
Intuit's accounting OAuth permission is broader than read-only access. The PM accounting reader enforces GET-only access to accounting records in the application. It does not create, edit or delete QuickBooks accounting records. Authentication, token refresh and revocation use separate Intuit authentication operations. Any future accounting-write capability requires separate authority and separately enabled controls.
4. How information is used
Luxe uses authorized records to match evidence to projects, reconcile observations, detect duplicates and information gaps, calculate provisional costs and financial views, prepare working documents and proposed actions, and maintain security, approval and audit records.
The application preserves distinctions such as vendor payment, accounting posting and project allocation. A generated result is not a substitute for verification of the underlying records or a grant of authority to act.
5. Service providers and model processing
Authorized service providers process only the information required to provide the relevant service. Categories include infrastructure and storage providers, connected business-system providers, and model providers for approved analysis workflows.
Google Cloud supplies hosted computing, database and secret-management infrastructure. Intuit processes the QuickBooks authorization and accounting API interactions. Other business systems process information through their separately authorized connections.
OpenAI receives limited project excerpts only when an approved model workflow is enabled, to help prepare analyses and draft working documents. QuickBooks connection credentials, client secrets and OAuth tokens must never enter model prompts, user-facing application responses or project documents. They are handled within the restricted connection infrastructure and sent to Intuit only as needed for authorization, authenticated access and revocation.
Luxe does not use QuickBooks information to train a model owned by Luxe. This statement does not replace the applicable service providers' own terms and privacy notices.
6. Storage and safeguards
Local development may use SQLite for project and audit records and Windows user-bound credential protection for local connector credentials.
The hosted application architecture uses Google Cloud Run, PostgreSQL on Cloud SQL and Google Secret Manager. The hosted QuickBooks vault encrypts stored token records; static client credentials and encryption-key references are managed separately through Secret Manager. Access is restricted by application controls and infrastructure permissions.
Connection credentials are kept separate from project evidence and model inputs. Connection status and audit responses are designed to contain necessary status and source information without exposing connection secrets. Users must not submit credentials in ordinary correspondence, uploads or model instructions.
7. Retention and disconnection
The application does not have a fixed automatic deletion schedule for project records, accounting copies or audit history. Luxe retains information while needed for project operations, reconciliation, security review, audit history or applicable recordkeeping obligations. No fixed deletion deadline is promised by this notice.
The authorized company owner can request disconnection through the available owner-controlled process or contact projects@galuxeoutdoors.com. Confirmed revocation stops future QuickBooks reads through that grant. An uncertain revocation remains held for operator review; it is not reported as a confirmed disconnection.
Disconnection does not automatically erase previously retained project information, audit records or backups. Removal of a runtime credential after confirmed revocation is separate from retention of those records. Deletion requests require an authorized operator's review, including any ongoing recordkeeping or backup constraints; there is no automatic self-service purge of this history.
8. Access, correction and deletion requests
Contact projects@galuxeoutdoors.com to request access, correction or deletion, or to raise a privacy concern. Luxe verifies the requester's identity and authority before disclosing or changing information and reviews requests against applicable obligations and project, audit and security needs.
Corrections may be recorded with their supporting evidence and prior versions so that the audit history remains understandable. Changes to a source system require the authority applicable to that system; a correction request does not itself authorize an accounting write. An authorized operator handles permitted record changes or deletions using the available administrative controls.
9. Updates and contact
Changes to this notice will be identified by an updated effective date. The application privacy contact is Georgia Luxe Outdoors LLC, projects@galuxeoutdoors.com.
