This policy explains how Moonlight Falls handles information in the Moonlight Falls Operations Portal, including its optional Google Contacts connection. The portal supports authorized property operations and business administration.

The portal processes account and contact details, property and reservation information, operational records, attachments, and related business records supplied by authorized users or connected services. We use this information to operate the portal, coordinate work, maintain records, control access, and support users.

Essential session cookies and browser storage support sign-in and preferences. Hosting and service providers may process technical request information to deliver, secure, and diagnose the service.

Connecting Google Contacts is optional and requires your consent. We receive your Google account identifier and email address to identify the destination account. The connection requests permission to read and manage contacts so it can identify and maintain the copies created by this portal.

The sync reads Google contact names, email addresses, phone numbers, organizations, addresses, websites, group memberships, and record metadata. It uses the contact list to identify portal-managed copies. It does not import unrelated personal Google contacts into the portal or edit or delete those personal contacts.

When enabled, the portal sends selected active portal contacts to your Google account. Exported fields are name, email, phone, and available business name, address, and website. Payroll data, payment instructions, portal permissions, and internal operational information are excluded from this export.

Synchronization is one-way. Portal changes update managed Google copies; Google edits do not update portal records. When a contact is archived, deleted, or leaves the selected labels, the sync removes its managed Google copy. Existing personal contacts are not matched or merged automatically.

The portal stores the connected account identifier and email, an encrypted Google refresh token, mappings to managed Google records, and synchronization status. Google access tokens are used on the server. Unrelated personal Google contacts are not retained as portal contact records.

Vercel hosts the portal and Supabase supports its database and authentication. Google processes the contacts sent to the connected account under its own policies. Service providers process information as needed to provide the requested functionality and support the service. Access is restricted to authorized personnel and service providers supporting the portal.

Google API data is used to provide and secure the requested contact synchronization. We do not sell Google user data, use it for advertising, or use it to train or improve generalized artificial intelligence or machine learning models. We follow the Google API Services User Data Policy and its Limited Use requirements when using or transferring Google data.

We protect Google refresh tokens with server-side encryption and restrict portal access using authentication and role-based permissions. Information may also be disclosed when required by applicable law or necessary to address a security incident or protect users and the service.

Authorized staff can pause synchronization, change its scope, or disconnect the account in Contact settings. Disconnecting stops future synchronization and removes the saved refresh token. Existing synced Google copies remain in Google. Account identifiers and ownership mappings may be retained so reconnecting the same account can resume safely.

You can also revoke the portal’s access through your Google Account connections. To remove Google copies without recreating them, disconnect the sync first, then remove the copies in Google Contacts. Ask your Moonlight Falls administrator to remove retained Google connection metadata or address an access, correction, or deletion request.

Operational records and technical information may be retained for business, security, accounting, and legal needs. Removing a Google connection does not automatically delete underlying portal business records. Google’s own retention and recovery features apply to information stored in Google.

For privacy questions or requests, contact your Moonlight Falls administrator using the contact details provided with your portal access or the user support contact shown on the Google consent screen. We update this policy when the portal’s practices change and identify the current version by its effective date.