Privacy Policy

1. Introduction

Grass Go ("we," "us," "our") operates the Grass Go mobile application (available on iOS, Android, and the web) and the grassgo.com website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. By using Grass Go, you consent to the practices described in this policy.

2. Information You Provide

We collect information you voluntarily provide when you create an account, use the application, or contact us. This includes:

Account Information

Your name, email address, and password used to create and authenticate your Grass Go account.

Business Profile

Your business name, business logo, business mailing address (used as the return address for physical mail delivery), and other profile details you provide to identify your lawn care or landscaping business within the app.

Client and Contact Data

Names, phone numbers, email addresses, and physical addresses of your clients that you enter into Grass Go to manage your customer relationships, properties, and service delivery.

Website Leads

If you publish a Grass Go-hosted business website, visitors may submit a public contact form with their name, phone number, email address, service address, and a free-text message. We store that information in your account as website leads, surface it in the app, and may process it with AI to help you follow up. You are responsible for how you use lead data under applicable law.

Website Builder and Published Site Content

If you use the website feature, we may fetch publicly available information about your business that you provide or point us to (such as an existing website or social presence), generate draft site copy and related assets with AI, and host the site you review and publish. Content you publish is publicly available on the internet.

Property and Scheduling Data

Property addresses, service plans, visit schedules, service history, and related operational records you create to manage your fieldwork.

Financial and Billing Data

Invoice details, payment records, billing settings, and Stripe Connect account information used to process payments from your clients. Sensitive payment credentials (card numbers, bank account details) are collected and stored directly by Stripe and are never stored on our servers.

Communications Content

SMS messages and call logs generated through your Grass Go business phone number, including message content, phone numbers, timestamps, delivery status, and call recordings when recording is enabled. When call recording is enabled, all parties hear an automated recording disclosure at the start of the call before any conversation is recorded.

Text Messaging (SMS)

Message recipients can opt out of SMS from a Grass Go business number at any time by replying STOP, and can reply HELP for assistance. Message frequency varies and message & data rates may apply. Phone numbers and SMS opt-in or consent data are never sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes.

User-Generated Content

Photos and files you upload (such as property photos, visit documentation, and business documents), voice recordings you create for transcription, and conversations with the AI assistant including any text, images, or files you provide during those sessions.

Estimates and Proposals

Pricing estimates and service proposals you create, including line items, scope descriptions, client information, and any notes or terms attached to the estimate.

3. Information Collected Automatically

When you use Grass Go, certain information is collected automatically:

Device and Connection Information

Device type, operating system version, browser type, IP address, and general network information. This data helps us ensure compatibility, diagnose issues, and maintain service quality.

Identifiers

Firebase authentication tokens, installation identifiers, and push notification device tokens (such as Firebase Cloud Messaging tokens) that allow us to authenticate your session, associate your data with your account, and deliver transactional alerts when push notifications are enabled.

App Interaction Data

General information about how you interact with the application, such as features used, screens visited, and actions taken. This data is used to improve the product and is not shared with third-party advertisers.

4. Information from Device Permissions

Grass Go requests certain device permissions to enable specific features. Each permission is requested only when you use the relevant feature, and you may deny or revoke any permission at any time through your device settings. Denying a permission disables the associated feature but does not affect the rest of the app.

• Camera: Used to take photos for properties, visit documentation, and client records. Photos are uploaded to your account storage.
• Photo Library: Used to attach existing images from your device to properties, visits, and other records.
• Microphone: Used to record voice messages that are sent to our servers for transcription. Voice-note audio used for transcription may not be retained after processing is complete. When call recording is enabled on your business phone line, call recordings are retained as described under Communications Content.
• Location (When In Use): Used to center the map on your current position and help you find nearby properties. Your precise location is accessed only while the app is in use and is not continuously tracked in the background.
• Contacts: Used to import contacts from your device address book to quickly create or link client records. Contact data from your device is read locally and is not uploaded to our servers in bulk. Only contacts you explicitly select and save as clients are stored in your account.

5. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Grass Go application and its features
• Authenticate your identity and secure your account
• Process invoices and facilitate payment collection through Stripe
• Mail physical invoices to your clients via postal mail
• Send and receive SMS messages and phone calls through your business phone number
• Power the AI assistant, including generating responses, drafting estimates, and transcribing audio
• Host published business websites and collect or deliver website leads from public contact forms
• Generate website draft content with AI from public business information you supply
• Display maps and provide address autocomplete and geocoding
• Store and retrieve your photos, files, and business documents
• Send you transactional notifications related to your account and service activity, including push notifications where enabled
• Respond to your support requests and communications
• Monitor service performance, diagnose technical issues, and improve the product
• Comply with legal obligations and enforce our Terms of Service

6. Third-Party Service Providers

We use the following third-party services to operate Grass Go. Each provider receives only the data necessary to perform its function and is bound by its own privacy policy and data processing terms.

• Google Firebase (Google LLC). Provides authentication, cloud database (Firestore), file storage, and serverless cloud functions. Your account data, business records, and uploaded files are stored in Firebase infrastructure.
• Stripe (Stripe, Inc.). Provides payment processing, connected account management (Stripe Connect), and hosted invoice pages. Financial data including bank account details, payment card information, and transaction records are processed and stored by Stripe. Grass Go does not store sensitive payment credentials.
• Twilio (Twilio Inc.). Provides SMS messaging, voice calling, and phone number management for your business phone line. Message content, phone numbers, call recordings, and delivery metadata are processed through Twilio.
• Google Maps / Places API (Google LLC). Provides map display, address autocomplete, place details, and geocoding. Address and location data is sent to Google to render maps and resolve addresses.
• Google Gemini AI (Google LLC). Powers the AI assistant chat, audio transcription, call transcript summarization, estimate drafting, website content generation, and website lead intake assistance. Text, audio, and contextual business data shared during AI interactions are processed by Google Gemini.
• Vapi (Vapi, Inc.). Powers the AI voice agent that answers inbound calls to your business phone number. Call audio and caller information are processed by Vapi during voice agent interactions.
• Lob (Lob.com, Inc.). Provides physical mail printing and delivery services for invoice mailing. When you mail an invoice, your business name and return address, your client’s name and mailing address, and the invoice PDF are transmitted to Lob to produce and deliver the physical letter. Lob may standardize addresses during processing. Mail tracking status and delivery metadata are received from Lob.

7. Data Sharing

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following circumstances:

• With the third-party service providers listed above, solely to operate the features of Grass Go
• With your clients, when you send them invoices, estimates, payment links, physical mail, or SMS messages through the app
• When required by law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of Grass Go, our users, or others
• In connection with a merger, acquisition, or sale of assets, in which case you would be notified of any change in data practices

8. Data Retention

We retain your data for as long as your account is active or as needed to provide you with our services. If you delete your account, we remove your data as described in Section 9 below. Certain records may be retained longer where required by law (for example, financial transaction records retained by Stripe for tax and compliance purposes).

9. Account Deletion

You may delete your account at any time from within the app by navigating to Settings → Delete Account. Account deletion permanently removes:

• Your business profile and logo
• All clients and their contact information
• Website leads submitted through your published site
• Published website data and related website builder content
• All properties and service plans
• Schedule and visit history
• Conversations, messages, and call logs
• Invoices, estimates, and drafts
• AI assistant sessions
• All uploaded photos and files
• Your Firebase authentication identity

An internal audit record of the deletion is retained for operational and compliance purposes. Financial records (invoices and payment history) may be retained by Stripe as required by applicable law. Your Twilio and Stripe provider accounts are flagged for deprovisioning following deletion. Physical letters already in transit or delivered via postal mail cannot be recalled or deleted.

For step-by-step instructions and details on what is deleted versus retained, see our account deletion page.

10. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Firebase Security Rules that restrict data access to authenticated, authorized users
• Stripe’s PCI-DSS compliant infrastructure for payment data
• Server-side validation of all data mutations through Cloud Functions
• Password-based re-authentication required before account deletion

While we strive to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Grass Go is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly.

12. International Data Processing

Grass Go is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. By using Grass Go, you consent to the transfer of your information to these jurisdictions.

13. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your data (available in-app via Settings → Delete Account)
• The right to data portability where technically feasible
• The right to withdraw consent for optional data processing

To exercise any of these rights, please contact us at support@grassgo.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

14. YouTube API Services

Grass Go operates an internal content-publishing tool ("Grass Go Content Console") that uses YouTube API Services to publish our own marketing videos to our own YouTube channel and to manage their titles, descriptions, tags, and thumbnails. By interacting with our YouTube channel, you are also subject to the YouTube Terms of Service and the Google Privacy Policy.

• This tool is used only by Grass Go, on Grass Go’s own YouTube channel. It is not offered to customers or any third party, and it does not access, collect, or store any YouTube user data belonging to anyone other than Grass Go.
• The tool stores Google OAuth credentials (access and refresh tokens) for the Grass Go channel on company-controlled hardware, along with the video metadata we author. These credentials are retained until revoked and are never shared, sold, or transferred.
• Authorization can be revoked at any time via Google security settings, which immediately invalidates the stored tokens. Stored credentials and API-derived data can also be deleted on request at support@grassgo.com.
• The tool does not serve advertising, does not display YouTube content to third parties, and does not use YouTube API data for analytics or profiling of any person.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Grass Go after changes are posted constitutes acceptance of the revised policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@grassgo.com.