Privacy policy

Two kinds of information

Business accounts. Lawn care businesses sign up for Lawn Ops. We collect the owner's and staff's names, emails, mobile numbers and passwords (stored only as a secure hash), the business's details, and how they use the service. We decide how this information is used (under GDPR, we're its controller).

The business's customers. A lawn care business keeps its customers' records in Lawn Ops: names, addresses, emails, mobile numbers, visits, quotes, invoices, photos of the work, messages, and recordings' transcripts when a customer calls the business's assistant line. We hold this for the business and use it only to provide the service to that business. The business decides what to collect and is your first contact about it. We're its service provider (California) and processor (GDPR).

What we collect

• Identifiers and contact details: names, emails, mobile numbers, property addresses.
• Commercial information: visits, quotes, invoices, what was paid and when. Not full card or bank numbers.
• Internet activity: sign-ins, IP address, browser type, and a log of changes made in an account.
• Precise location (sensitive): a property's map position, and a crew member's phone position when they allow it.
• Account log-ins (sensitive): an email with a password, stored only as a secure hash.
• Audio, photo and written content: photos of the work, messages, and transcripts of calls to a business's assistant line.
• Consent records: when and where someone agreed to our terms or to texts, with the IP address and browser.

It comes from you, from the lawn care business, from your device, from public map and property data, and from Stripe and Twilio about payments and messages.

What we use it for

• Running the service: schedules, routes, quotes, invoices, payments, emails and texts the business or its customers asked for.
• Measuring a lawn from its address with public map and aerial imagery.
• Crew locations: a crew member's phone shares its position only when the crew member allows it in their browser, to stamp a visit or answer the office's "where are you?". We don't track crews in the background.
• Security, preventing abuse, fixing problems, helping a business that needs support, and keeping the records the law requires.

We don't sell personal information or share it for cross-context behavioral advertising, and haven't in the past 12 months. We don't use it for advertising. We use sensitive information only for the purposes above.

Text messages and mobile numbers

Texts go only to people who agreed to them, as described on the Lawn Ops texting terms page and on each business's own texting terms page. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Reply STOP to any text to stop.

Who we share it with

Only the service providers that run parts of Lawn Ops for us, each limited to that job:

• Hosting and database (Render, in the United States).
• Texts and phone calls (Twilio).
• Email (Resend).
• Payments (Stripe). Card and bank details go straight to Stripe, on the lawn business's own Stripe account; Lawn Ops never sees or stores full card or account numbers.
• AI features (Anthropic): drafting replies and summaries. We remove payment and financial details, PINs and codes before anything is sent, and the provider doesn't train on it.
• Maps and property data: addresses or map positions, without names, go to the U.S. Census Bureau (finding an address), USGS and state map services, FEMA data on ArcGIS (lots and buildings), the National Weather Service (forecasts) and OSRM (drive times). Your browser loads map images from OpenFreeMap and those map services.
• The owner's lawn-outlining tool, when used, loads its software in the browser from jsDelivr and Hugging Face.

We also share information when the law requires it, to protect people's safety, or as part of a sale of the business (the buyer keeps this policy).

When Lawn Ops staff look at an account

To help a business or look into a problem, authorized Lawn Ops staff can open a read-only view of that business's account as its owner sees it, which includes its customers' records. They can't change anything in that view, it ends within an hour, and each one is listed in the business's audit log.

Cookies

We use only what the service needs to work. No advertising or analytics cookies, and nothing that tracks you across other sites, so there's nothing to accept or turn off. If that ever changes, we'll ask first.

• session_id: keeps you signed in. Lasts until you sign out, a year at most.
• _lawn_ops_session: protects forms from forgery and carries short messages between pages. Ends when you close your browser.
• Saved on your device, not sent to anyone: that you've seen this notice or a tip, a display setting, and a crew's taps waiting for signal.

Because we don't sell or share personal information, there's nothing for a Global Privacy Control signal to opt out of.

How long we keep it

We keep information while the business's account is open and as long as needed for its records, taxes and disputes. Invoices and payment records stay as long as tax law requires; the record of a consent stays as long as we might need to show it was given. We protect information with encryption in transit, access controls and private, signed links.

Your choices and rights

A customer of a lawn business can ask that business to correct or remove their information; a business can ask us. You can also email us to see, correct, delete or get a copy of information about you, and we'll answer within 30 days. We may need to confirm it's you, and may keep what the law requires. When we can't delete a record, we'll remove what identifies you from it.

California residents have the right to know what we collect and how we use it, to delete and correct it, and not to be treated differently for asking. You also have the rights to opt out of sale or sharing and to limit use of sensitive information; we do neither of those things, so no action is needed. Someone you authorize can ask for you.

In the European Economic Area and the UK you also have the rights to restrict or object to our use of your information, to take it elsewhere, to withdraw consent at any time, and to complain to your data protection authority. We rely on: our contract with the business (running the service), our legitimate interests (security, support, fixing problems), your consent (texts), and legal duties (tax and other records). Lawn Ops is built for U.S. businesses and information is stored in the United States; where the law requires a safeguard for sending it there, we rely on standard contractual clauses.

Children, changes, contact

Lawn Ops is for businesses and adults; we don't knowingly collect information from children under 16. If we change this policy we'll update the date above and tell businesses by email before a material change takes effect.

Lawn Ops, New Jersey. Email support@lawnops.pro.