Privacy Policy

1. Introduction

Grass Go ("we," "us," "our") operates the Grass Go mobile application (available on iOS, Android, and the web) and the grassgo.com website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. By using Grass Go, you consent to the practices described in this policy.

2. Information You Provide

We collect information you voluntarily provide when you create an account, use the application, or contact us. This includes:

Account Information

Your name, email address, and password used to create and authenticate your Grass Go account.

Business Profile

Your business name, business logo, business mailing address (used as the return address for physical mail delivery), and other profile details you provide to identify your lawn care or landscaping business within the app.

Client and Contact Data

Names, phone numbers, email addresses, and physical addresses of your clients that you enter into Grass Go to manage your customer relationships, properties, and service delivery.

Property and Scheduling Data

Property addresses, service plans, visit schedules, service history, and related operational records you create to manage your fieldwork.

Financial and Billing Data

Invoice details, payment records, billing settings, and Stripe Connect account information used to process payments from your clients. Sensitive payment credentials (card numbers, bank account details) are collected and stored directly by Stripe and are never stored on our servers.

Communications Content

SMS messages and call logs generated through your Grass Go business phone number, including message content, phone numbers, timestamps, delivery status, and call recordings when recording is enabled.

User-Generated Content

Photos and files you upload (such as property photos, visit documentation, and business documents), voice recordings you create for transcription, and conversations with the AI assistant including any text, images, or files you provide during those sessions.

Estimates and Proposals

Pricing estimates and service proposals you create, including line items, scope descriptions, client information, and any notes or terms attached to the estimate.

3. Information Collected Automatically

When you use Grass Go, certain information is collected automatically:

Device and Connection Information

Device type, operating system version, browser type, IP address, and general network information. This data helps us ensure compatibility, diagnose issues, and maintain service quality.

Identifiers

Firebase authentication tokens and installation identifiers that allow us to authenticate your session and associate your data with your account.

App Interaction Data

General information about how you interact with the application, such as features used, screens visited, and actions taken. This data is used to improve the product and is not shared with third-party advertisers.

4. Information from Device Permissions

Grass Go requests certain device permissions to enable specific features. Each permission is requested only when you use the relevant feature, and you may deny or revoke any permission at any time through your device settings. Denying a permission disables the associated feature but does not affect the rest of the app.

• Camera: Used to take photos for properties, visit documentation, and client records. Photos are uploaded to your account storage.
• Photo Library: Used to attach existing images from your device to properties, visits, and other records.
• Microphone: Used to record voice messages that are sent to our servers for transcription. Audio data is processed and not retained after transcription is complete.
• Location (When In Use): Used to center the map on your current position and help you find nearby properties. Your precise location is accessed only while the app is in use and is not continuously tracked in the background.
• Contacts: Used to import contacts from your device address book to quickly create or link client records. Contact data from your device is read locally and is not uploaded to our servers in bulk. Only contacts you explicitly select and save as clients are stored in your account.

5. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Grass Go application and its features
• Authenticate your identity and secure your account
• Process invoices and facilitate payment collection through Stripe
• Mail physical invoices to your clients via postal mail
• Send and receive SMS messages and phone calls through your business phone number
• Power the AI assistant, including generating responses, drafting estimates, and transcribing audio
• Display maps and provide address autocomplete and geocoding
• Store and retrieve your photos, files, and business documents
• Send you transactional notifications related to your account and service activity
• Respond to your support requests and communications
• Monitor service performance, diagnose technical issues, and improve the product
• Comply with legal obligations and enforce our Terms of Service

6. Third-Party Service Providers

We use the following third-party services to operate Grass Go. Each provider receives only the data necessary to perform its function and is bound by its own privacy policy and data processing terms.

• Google Firebase (Google LLC). Provides authentication, cloud database (Firestore), file storage, and serverless cloud functions. Your account data, business records, and uploaded files are stored in Firebase infrastructure.
• Stripe (Stripe, Inc.). Provides payment processing, connected account management (Stripe Connect), and hosted invoice pages. Financial data including bank account details, payment card information, and transaction records are processed and stored by Stripe. Grass Go does not store sensitive payment credentials.
• Twilio (Twilio Inc.). Provides SMS messaging, voice calling, and phone number management for your business phone line. Message content, phone numbers, call recordings, and delivery metadata are processed through Twilio.
• Google Maps / Places API (Google LLC). Provides map display, address autocomplete, place details, and geocoding. Address and location data is sent to Google to render maps and resolve addresses.
• Google Gemini AI (Google LLC). Powers the AI assistant chat, audio transcription, call transcript summarization, and estimate drafting. Text, audio, and contextual business data shared during AI interactions are processed by Google Gemini.
• Vapi (Vapi, Inc.). Powers the AI voice agent that answers inbound calls to your business phone number. Call audio and caller information are processed by Vapi during voice agent interactions.
• Lob (Lob.com, Inc.). Provides physical mail printing and delivery services for invoice mailing. When you mail an invoice, your business name and return address, your client’s name and mailing address, and the invoice PDF are transmitted to Lob to produce and deliver the physical letter. Lob may standardize addresses during processing. Mail tracking status and delivery metadata are received from Lob.

7. Data Sharing

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following circumstances:

• With the third-party service providers listed above, solely to operate the features of Grass Go
• With your clients, when you send them invoices, estimates, payment links, physical mail, or SMS messages through the app
• When required by law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of Grass Go, our users, or others
• In connection with a merger, acquisition, or sale of assets, in which case you would be notified of any change in data practices

8. Data Retention

We retain your data for as long as your account is active or as needed to provide you with our services. If you delete your account, we remove your data as described in Section 9 below. Certain records may be retained longer where required by law (for example, financial transaction records retained by Stripe for tax and compliance purposes).

9. Account Deletion

You may delete your account at any time from within the app by navigating to Settings → Delete Account. Account deletion permanently removes:

• Your business profile and logo
• All clients and their contact information
• All properties and service plans
• Schedule and visit history
• Conversations, messages, and call logs
• Invoices, estimates, and drafts
• AI assistant sessions
• All uploaded photos and files
• Your Firebase authentication identity

An internal audit record of the deletion is retained for operational and compliance purposes. Financial records (invoices and payment history) may be retained by Stripe as required by applicable law. Your Twilio and Stripe provider accounts are flagged for deprovisioning following deletion. Physical letters already in transit or delivered via postal mail cannot be recalled or deleted.

For step-by-step instructions and details on what is deleted versus retained, see our account deletion page.

10. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Firebase Security Rules that restrict data access to authenticated, authorized users
• Stripe’s PCI-DSS compliant infrastructure for payment data
• Server-side validation of all data mutations through Cloud Functions
• Password-based re-authentication required before account deletion

While we strive to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Grass Go is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly.

12. International Data Processing

Grass Go is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. By using Grass Go, you consent to the transfer of your information to these jurisdictions.

13. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your data (available in-app via Settings → Delete Account)
• The right to data portability where technically feasible
• The right to withdraw consent for optional data processing

To exercise any of these rights, please contact us at grassgomarketplace@gmail.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Grass Go after changes are posted constitutes acceptance of the revised policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at grassgomarketplace@gmail.com.