Privacy Policy

1. Information we collect

1.1. Account information

When you create an account or join the waitlist, we collect:

• Full name
• Email address
• Phone number
• City and zip code, and the property or service address you share
• Password, stored in hashed form only, if you create an account

1.2. Business information (Landscapers)

To verify a landscaping business and display its profile, we collect the following at or after signup:

• Business name and legal entity type
• Business license number and issuing jurisdiction
• Proof of insurance (general liability, workers' compensation)
• Google Reviews rating and review count (via public API)
• Years in operation, number of crews, and service areas
• Services offered

1.3. Homeowner and property information

When a Homeowner joins the waitlist, requests an AI estimate, or (once live) posts a property to request bids, we collect:

• Homeowner name
• Email address and phone number
• Property address (the service location you enter)
• Service details you choose to share, such as lot notes, frequency, current provider, and prior pricing
• Any photos or videos of the property you choose to upload to describe the work

When the sealed-bid marketplace is live, the exact street address and precise coordinates are stored securely but are not shared with Landscapers. Landscapers see only an approximate display location (offset roughly half a mile) and the general area until the Homeowner selects a winning bid, at which point the exact address is shared with that one Landscaper. See Section 11 for additional details.

1.4. Payment information

LawnSwap does not collect or charge any payment information during the current waitlist phase. Joining the waitlist and running an estimate are free. When on-platform payments launch, payment processing will be handled entirely by Stripe. LawnSwap will not store, process, or have access to your full card numbers or bank account details. We would receive only transaction confirmations, amounts, and the last four digits of a payment method for display.

1.5. Usage data

We automatically collect information about how you interact with the platform:

• Pages visited and features used
• Searches and address lookups performed on the platform
• Interactions with listings and estimates
• IP address and approximate location derived from it
• Date and time of access
• Referring URL

1.6. Location data

To power our geographic matching and estimate features, we collect:

• The property address you enter for an estimate or a listing
• Service area zip codes entered by Landscapers
• General location information derived from IP addresses or zip codes

1.7. Communications

We collect and store messages you send us, and (once the marketplace is live) messages sent through the platform between users. Messages are retained for support, anti-circumvention enforcement (see our Terms of Service, Section 10), and dispute resolution.

1.8. Device information

We collect basic device information to optimize your experience:

• Browser type and version
• Operating system
• Screen size and resolution
• Device type (desktop, tablet, mobile)

1.9. Property and imagery data from public and commercial sources

To produce a free AI lawn estimate, we look up information about the address you enter using public records and commercial mapping services. This includes parcel boundaries and lot size from public county and state property records (such as the Florida statewide parcel layer), and aerial or satellite imagery of the property from providers including the USDA National Agriculture Imagery Program, Mapbox, and Google (Street View, Solar, and photorealistic map tiles). We analyze that imagery with an AI vision model to estimate the size of the lawn and generate a price recommendation. This imagery comes from public and commercial mapping providers. LawnSwap does not fly drones or operate cameras at your property. The estimate is a recommendation from aerial imagery, not a formal quote, and is confirmed on the first visit.

2. How we use your information

We use the information we collect for the following purposes:

• Providing the platform: Operating, maintaining, and improving LawnSwap, including the waitlist, the AI lawn estimate, geographic matching, listing display, and (once live) connecting Homeowners with Landscapers through sealed bidding
• Generating estimates: Using your address, public property records, and mapping imagery to measure your lawn and produce a non-binding price recommendation
• Waitlist and account communications: Sending confirmations, launch updates, and account or transactional emails through Resend
• Marketing, with your consent: Sending marketing emails you can opt out of at any time, and measuring the performance of our own advertising as described in Sections 3.3 and 10
• Verifying business credentials: Confirming business licensing, insurance, and other credentials submitted by Landscapers
• Fraud prevention and rate limiting: Protecting the platform against abuse, spam, and automated attacks
• Processing payments (when live): Charging any fees and settling payouts through Stripe once on-platform payments launch. No fees are charged today
• Analytics and improvement: Understanding usage patterns to improve platform features, performance, and experience
• Legal compliance: Meeting legal obligations, responding to legal process, and protecting our rights and the rights of our users

3. How we share your information

3.1. With other platform users

Once the sealed-bidding marketplace is live, we share limited information between users as necessary to support it. What is shared depends on where in the process you are:

• Before reveal:Active listings are visible to Landscapers whose service area overlaps the listing's general location. Landscapers see an approximate display location (offset roughly half a mile from the actual address), service type and description, and other non-identifying listing details. The Homeowner's exact street address, full name, and direct contact information are not shared before reveal. Landscapers cannot see one another's bids.
• After reveal:When a Homeowner selects a winning bid, the winning Landscaper receives the Homeowner's exact property address and the contact information needed to schedule services. The Homeowner receives the winning Landscaper's identity and contact information. No other Landscaper receives this information.

3.2. With service providers

We rely on trusted service providers to operate LawnSwap. Each processes data only as needed to provide its service and is bound by its own privacy terms and our agreements:

• Cloud hosting: Vercel hosts our website and serves content
• Database and authentication: Supabase provides database hosting and account authentication, hosted in the United States
• Email: Resend delivers transactional and marketing email
• Mapping and imagery: Mapbox provides geocoding and map rendering. Google provides Places address autocomplete, Street View, Solar data, photorealistic map tiles, and public business review data. The USDA National Agriculture Imagery Program and other public sources provide aerial imagery. Public county and state records (such as the Florida statewide parcel layer) provide parcel boundaries and lot size
• AI processing: Anthropic (Claude) analyzes property imagery to estimate lawn size for our recommendations, and assists with drafting operational and outreach messaging. No payment card data is shared
• Analytics and error monitoring: Sentry provides error monitoring and, where you allow it, session replay and performance analytics
• Security and abuse prevention: Upstash provides rate limiting, and Cloudflare Turnstile provides bot and abuse prevention
• Payments (when live): Stripe will handle payment processing, payouts to Landscapers, and identity verification once on-platform payments launch
• Advertising measurement: Meta, where enabled and where you allow marketing cookies, measures the performance of our advertising. See Sections 3.3 and 10

3.3. Advertising and measurement

LawnSwap does not display third-party advertisements on the platform, and we do not sell your personal information. We do advertise LawnSwap elsewhere, and where you allow marketing cookies we use the Meta Pixel and Meta Conversions API to measure how well those ads perform. When we send conversion events to Meta, direct identifiers such as your email address and phone number are hashed with SHA-256 before transmission, along with technical data such as your IP address and browser. Under the California Consumer Privacy Act and some other state laws, this use of Meta may be considered "sharing" for cross-context behavioral advertising. You can turn it off at any time using the controls described in Sections 10 and 16, and we honor Global Privacy Control signals.

3.4. For legal reasons and safety

We may disclose your information when required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

3.5. What we do not do

• We do not sell your personal information for money. We have not done so and have no plans to.
• We do not show third-party display ads on the platform. We do measure our own advertising with hashed identifiers as described in Section 3.3, which you can opt out of.
• We do not share a Homeowner's exact address or contact information with any Landscaper other than the single winning Landscaper selected at reveal.

4. Data security

We implement industry-standard security measures to protect your information:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS/HTTPS
• Encryption at rest: Data stored in our database (Supabase) is encrypted at rest
• Access controls: We use role-based access controls and Row Level Security at the database level so users can only access data they are authorized to view
• Authentication: Passwords are hashed using industry-standard algorithms, with secure session management through Supabase Auth
• Regular security reviews: We periodically review our security practices and infrastructure
• Incident response: We maintain incident response procedures and will notify affected users and relevant authorities in the event of a data breach as required by law

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

You may request deletion of your data at any time (see Section 6). Deletion requests are subject to the retention requirements listed above. Data that must be retained for legal or compliance reasons will be deleted after the applicable retention period expires.

6. Your rights

You have the following rights regarding your personal information:

• Right to access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to deletion: You may request that we delete your account and personal information, subject to the retention requirements described in Section 5.
• Right to opt out of marketing:You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us. Opting out of marketing does not affect transactional emails related to your account, waitlist, or estimates.
• Right to data portability: You may request a machine-readable copy of your personal information for transfer to another service.

To exercise any of these rights, contact us at lawnswapai@gmail.com. We will respond to your request within 30 days, or within the time your state's law requires.

7. Tennessee residents

LawnSwap operates in compliance with the Tennessee Information Protection Act (TIPA). Under TIPA, Tennessee residents have the following rights:

• Right to know: You have the right to confirm whether we are processing your personal information and to access that information.
• Right to delete: You have the right to request deletion of your personal information, subject to legal retention requirements.
• Right to opt out of sale: We do not sell personal information. If this practice ever changes, we will provide a clear opt-out mechanism as required by TIPA.
• Right to opt out of targeted advertising: You may opt out of targeted advertising using the controls in Sections 10 and 16.
• Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise your rights under TIPA, contact us at lawnswapai@gmail.com. We will respond within 45 days as required by law. You may appeal any decision regarding your request by contacting us at the same address.

8. Florida and Alabama residents

8.1. Florida Digital Bill of Rights (FDBR)

LawnSwap monitors the Florida Digital Bill of Rights (Fla. Stat. §501.701 et seq.) and its applicability as the platform grows. Florida residents who qualify as consumers under the FDBR may have rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. LawnSwap does not sell personal data. You may opt out of advertising measurement using the controls in Sections 10 and 16. To exercise any applicable rights, contact lawnswapai@gmail.com. We will respond within 45 days and provide an appeal process where required by applicable law.

8.2. Florida breach notification

LawnSwap complies with the Florida Information Protection Act (Fla. Stat. §501.171). In the event of a security breach involving the personal information of Florida residents, we will notify affected individuals as expeditiously as possible and without unreasonable delay, and no later than 30 days after we determine that a breach has occurred affecting 500 or more Florida residents, or as otherwise required by applicable law. Notification will describe the nature of the breach, the types of personal information involved, and steps you may take to protect yourself.

8.3. Data breach notification (Alabama)

LawnSwap complies with the Alabama Data Breach Notification Act of 2018 (Ala. Code Section 8-38-1 et seq.). In the event of a security breach involving your personal information, we will:

• Notify affected Alabama residents as expeditiously as possible and without unreasonable delay, but no later than 45 days after determination that a breach has occurred
• Provide notification that includes a description of the breach, the types of information involved, and steps you can take to protect yourself
• Notify the Alabama Attorney General if the breach affects 1,000 or more Alabama residents

In accordance with Alabama law, we implement and maintain reasonable security measures to protect the personal information of Alabama residents from unauthorized access, use, or disclosure.

This section does not constitute legal advice. Consult qualified counsel to understand how these laws apply to your specific situation.

9. Children's privacy

9.1. The LawnSwap platform is intended for use by adults who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18.

9.2. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

9.3. If you believe that a minor has provided us with personal information, please contact us at lawnswapai@gmail.com.

10. Cookies and tracking

We use cookies and similar technologies in three categories, matching the choices in our cookie banner. You can change your choices at any time using the Cookie Preferences control in our website footer. We also honor Global Privacy Control browser signals.

10.1. Strictly necessary

These are required for the platform to function and are always on. They support authentication and session management (Supabase Auth), security and fraud prevention such as CSRF protection, core payment scripts (Stripe), map rendering (Mapbox), and crash reporting (Sentry error monitoring). This category also includes always-on visit logging. On every page view we record your IP address, the approximate location derived from it, basic device and browser information, and the pages you view, and we use this for security, fraud prevention, and operating the service. These are necessary for the platform to work and cannot be disabled.

10.2. Analytics (optional)

With your consent, we use analytics to understand how the site is used, including Sentry session replay and performance traces. This data is pseudonymous and helps us improve the platform. You can decline it.

10.3. Marketing (optional)

With your consent, we use the Meta Pixel and Meta Conversions API to measure the performance of our advertising. These are off unless you allow marketing cookies, and you can turn them off again at any time. See Sections 3.3 and 16 for how this may count as "sharing" under some state privacy laws.

11. Homeowner data

LawnSwap collects and processes data about Homeowners who join the waitlist, request estimates, and (once live) receive sealed bids. We take the following measures to protect Homeowner information:

• Minimal collection: We collect only the Homeowner data necessary to operate the service: name, email address, phone number, and property address, along with any photos or service details the Homeowner chooses to share.
• Purpose limitation: Homeowner data is used to operate the service. This includes generating estimates, geographic matching, displaying listings to nearby Landscapers when the marketplace is live, and facilitating the bidding process. We do not sell Homeowner data or share it with third parties for their own marketing.
• Address privacy:When the marketplace is live, the Homeowner's exact street address is stored securely and shared with only one Landscaper, the Landscaper the Homeowner selects at reveal. All other Landscapers see only an approximate display location (offset roughly half a mile) and never receive the exact address.
• No unsolicited outreach: We do not share Homeowner contact information with Landscapers who have not been selected through a reveal. Communications LawnSwap sends to Homeowners are transactional or, where you have opted in, marketing you can leave at any time.
• Right to deletion: Homeowners may request deletion of their personal information at any time by contacting us at lawnswapai@gmail.com. We will honor deletion requests subject to legal retention requirements.

12. Changes to this Privacy Policy

12.1. We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. For material changes, we will provide at least thirty (30) days' prior notice before the changes take effect.

12.2. Notice of material changes will be provided by:

• Posting the updated Privacy Policy on the platform with a revised "Last Updated" date
• Sending an email notification to the address associated with your account or waitlist signup

12.3. Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

14. Categories of personal information, sources, and purposes

This section summarizes, for transparency and to support privacy rights under California and other state laws, the categories of personal information ("PI") we collect, where each category comes from, and the business purposes for which it is used. We do not retain or use any category for purposes incompatible with those disclosed below.

Sensitive Personal Information.Precise geolocation and the property street address you provide are treated as "Sensitive Personal Information" under the California Consumer Privacy Act, as amended (CCPA § 1798.140(ae)). We use Sensitive PI only for the purposes described below (measuring your lawn, matching homeowners with nearby landscapers, and facilitating the service) and not to infer characteristics about you. California residents may limit the use of Sensitive PI as described in Section 15.

15. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA, as amended by the CPRA:

• Right to know and access: Request the categories and specific pieces of PI we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to delete: Request deletion of PI we collected from you, subject to legal retention exceptions (see Section 5).
• Right to correct: Request correction of inaccurate PI we maintain about you.
• Right to opt out of sale or sharing:We do not sell PI for monetary consideration. To opt out of any "sharing" for cross-context behavioral advertising, use the "Do Not Sell or Share My Personal Information" and "Cookie Preferences" controls in our website footer.
• Right to limit use of Sensitive PI: You may direct us to limit the use of your Sensitive PI (including your property address) to what is necessary to provide the service. Contact us to exercise this right.
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights.
• Right to data portability: Receive a copy of your PI in a portable, machine-readable format.
• Authorized agents: You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly.

To exercise these rights, contact us at lawnswapai@gmail.com. See Section 19 for how we verify requests. We respond within 45 days (extendable by an additional 45 days where permitted).

16. "Do Not Sell or Share" and cookie controls

We do not sell personal information for monetary consideration. We have not sold PI in the preceding twelve (12) months and have no plans to do so.

Where the Meta Pixel and Conversions API are enabled and you allow marketing cookies, the resulting transfer of certain identifiers to Meta for measuring advertising may be considered "sharing" for cross-context behavioral advertising, and may constitute a "sale" under some state definitions. You can opt out at any time using the "Do Not Sell or Share My Personal Information" link and the Cookie Preferences control in our website footer. We also honor Global Privacy Control (GPC) browser signals as a valid opt-out of sharing.

17. Other state privacy rights (VA, CO, CT, UT)

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have analogous rights, which may include the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. To exercise these rights, contact lawnswapai@gmail.com. We respond within 45 days and offer an appeal process where required by your state's law.

18. International users

LawnSwap is operated from the United States and intended for users located in the United States. We do not target or actively market the service to residents of the European Union or the United Kingdom. If you access the platform from outside the United States, you understand that your information will be processed in the United States, where data protection laws may differ from those in your jurisdiction, and you consent to that processing.

19. How we verify privacy requests

To protect your information, we verify privacy requests before acting on them. For account holders, we ask you to sign in to your account and confirm the request from the email address on file. We may request additional information to confirm your identity where reasonably necessary, and we will only use that information for verification. We do not require you to create an account solely to submit a request.

20. Children and minors (COPPA)

The platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). If we learn we have collected such information, we will delete it promptly. The platform is intended for adults, and minors aged 13 to 17 may use the platform only with the involvement and permission of a parent or legal guardian. If you believe a child under 13 has provided us information, contact lawnswapai@gmail.com.

21. Security summary

We protect data in transit using TLS (TLS 1.3 where supported) and encrypt data at rest. Payment card data, once payments are live, is collected and stored by Stripe, and we do not store full card numbers. While we use reasonable administrative, technical, and physical safeguards, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. See Section 4 for additional detail.

22. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: