Decco (operated by Decco, Inc.) · Effective July 1, 2026
This Privacy Policy explains how Decco ("Decco," "we," "us") collects, uses, and shares
information when you use the Decco design-and-build platform and related mobile and web
applications (the "Service"). Decco is a professional tool for homeowners, designers, and
builders to manage design selections, budgets, activities, and documents across residential
construction projects.
Information We Collect
Account information — your name, email address, and organization
details used to create and secure your account.
Project and design data — information you create or upload, such as
design selections, options, activities, notes, budgets, and project details.
Data from systems you connect — when you authorize an integration, we
access the data needed to provide the Service, including accounting and financial data
(Intuit QuickBooks Online), documents (Dropbox), analytics/warehouse data (Google BigQuery),
and operational records from legacy systems you choose to import.
Usage information — basic technical and usage data (device type, app
version, and interactions) used to operate, secure, and improve the Service.
Intuit QuickBooks Online Data
If you connect Intuit QuickBooks Online, you authorize Decco to access your accounting data
through Intuit's API using OAuth 2.0. We use this connection to power budgeting, job-costing,
and budget-vs-actuals features in the Service. Specifically:
What we access — read-only financial records needed for job costing,
such as bills, expenses/purchases, vendor credits, journal entries, chart-of-accounts, and
deposits, including their line-item detail (vendor, customer/job, item/category, and amount).
How we use it — solely to display and reconcile project costs against
budgets within your organization's account. We do not use your QuickBooks data for
advertising, and we never sell it.
Storage & security — QuickBooks data and the OAuth tokens that
authorize the connection are stored in our secured database (hosted by Supabase) with access
controls; tokens are treated as sensitive credentials and are not exposed to other customers.
Your control — you may disconnect QuickBooks at any time, from within
Decco or from your Intuit account, which revokes our access going forward. You may also
request deletion of the synced data as described below.
Intuit's terms — our use of the Intuit Developer platform is subject to
the Intuit Developer Terms of Service and applicable Intuit policies.
How We Use Information
To provide, maintain, and secure the Service and your account.
To sync, organize, and reconcile data across the systems you connect.
To provide customer support and respond to your requests.
To improve the Service and develop new features.
How We Share Information
We do not sell your personal or financial information. We share information only:
With service providers and subprocessors that host and power the
Service — for example, Supabase (application hosting, authentication, and database),
and the cloud providers underlying our infrastructure — bound by appropriate confidentiality
and data-protection obligations.
With systems you explicitly connect (such as Intuit QuickBooks, Dropbox,
and Google), to exchange the data required for that integration to function.
Within your organization, with other authorized members of your account.
When required by law or to protect the rights, safety, and security of
our users and the Service.
Data Retention
We retain your information for as long as your account is active or as needed to provide the
Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you
disconnect an integration or close your account, we delete or de-identify the associated data
within a reasonable period, except where retention is required by law. You may request deletion
of your account data as described below.
Security
We use industry-standard administrative, technical, and physical safeguards to protect your
information, including encryption in transit, access controls, and least-privilege handling of
integration credentials. No method of transmission or storage is completely secure, but we work
to protect your data and continually improve our practices.
Your Choices and Rights
You may access, correct, or request deletion of your personal information, and you may
disconnect any integration at any time. To make a request, contact us at the address below.
Depending on your location, you may have additional rights under applicable privacy laws.
Children's Privacy
The Service is intended for business use by professionals and is not directed to children
under 13, and we do not knowingly collect their information.
Changes to This Policy
We may update this Policy from time to time. We will post the updated version here and
revise the effective date above.
Contact Us
Questions about this Policy or your data? Contact us at
privacy@decco.app.