Privacy Policy

LawnRoute ("we," "our," or "the Service") is a scheduling, invoicing, and payments platform for lawn care and snow removal businesses. This Privacy Policy explains what information we collect, how we use it, and how we protect it. By using LawnRoute, you agree to the practices described here.

1. Who We Are

LawnRoute is operated as a software-as-a-service (SaaS) platform for lawn care and snow removal businesses ("tenants"). Our platform allows tenants to manage scheduling, job completion, invoicing, and payments for their own customers.

For questions about this policy, contact us at: [SUPPORT EMAIL]

2. Information We Collect

Account Information: When your account is created, we collect your name, email address, business name, and a hashed password. We never store passwords in plain text.

Business, Property, and Customer Data: Tenants enter information about their own customers, service properties, jobs, and pricing — including names, addresses, contact information, and service history. This data is stored on the tenant's behalf and is accessible only to that tenant's account.

Payment Data: Card payment details are collected and processed directly by Stripe — LawnRoute never receives or stores full card numbers. We store limited payment metadata (amounts, dates, invoice references, and Stripe transaction identifiers) needed to reconcile payments against invoices.

Photographs Submitted for AI Extraction: Receipts, fuel stop photos, and check images you photograph are sent to Anthropic's Claude API for automatic data extraction, then stored in your connected Google Drive. See Section 4 for details.

Usage Data: We collect standard server logs including IP addresses, browser type, pages visited, and timestamps for security and performance monitoring. We do not sell this data.

3. Google Account Integration

LawnRoute requests access to the following Google services:

• Gmail (gmail.send): Used to send emails on your behalf — including invoice delivery and customer update notices. We only send emails you explicitly initiate. We never read your inbox, access received emails, or store your email content beyond the delivery logs needed to confirm an invoice was sent.
• Google Drive (drive.file): Used to create and store files in your Google Drive — including receipts, scanned check images, data exports, and public business page photos. We create a folder in your Drive and organize files within it. We only access files we create — we do not read, modify, or delete files we did not create.
• Google Account Info (userinfo.email, userinfo.profile): Used to display which Google account is connected to your business and to verify the identity of the connecting user.

We store OAuth tokens (access token and refresh token) in our database, encrypted at rest, associated with your account. These tokens are used only to perform actions you initiate. You can disconnect your Google account at any time from Configuration — this revokes our access and deletes the stored tokens.

LawnRoute's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. AI Processing (Anthropic)

When you photograph a receipt, fuel stop, or check for automatic data extraction, that image is sent to Anthropic's Claude API for processing. Anthropic processes this image to extract the requested information (such as vendor, amount, or check number) and returns it to LawnRoute; the image itself is then stored in your connected Google Drive, not retained by Anthropic beyond what's needed to process the request. This feature is optional — you can always enter information manually instead.

5. Stripe & Payment Processing

LawnRoute uses Stripe Connect to process customer payments on behalf of tenants. When a tenant connects a Stripe account, their business information and bank account details are provided directly to Stripe, not to LawnRoute. When a tenant's customer pays an invoice, their card details are collected directly by Stripe's own secure payment form — LawnRoute never receives or stores full card numbers.

Stripe's handling of this data is governed by Stripe's own Privacy Policy, in addition to this one.

6. How We Use Your Information

• To provide and operate the LawnRoute platform
• To generate and deliver invoices
• To process payments through connected Stripe accounts
• To send emails on your behalf through your connected Google account
• To store documents and photos in your connected Google Drive
• To extract data from photographed receipts and checks via Anthropic's API
• To respond to support requests
• To maintain security and prevent fraud

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 7.

7. Data Sharing

We share data only in the following limited circumstances:

• Stripe: Payment information necessary to process a transaction, in accordance with Stripe's own privacy policy.
• Google: When you connect a Google account, data is transmitted to Google's servers in accordance with the permissions you grant and Google's own privacy policy.
• Anthropic: Photographed receipts, fuel stops, and checks are sent to Anthropic's Claude API solely to extract the requested data.
• Infrastructure providers: We use Railway (database and hosting) and other infrastructure providers to operate the service. These providers process data on our behalf.
• Legal requirements: We may disclose information if required by law or to protect our legal rights.

8. Data Retention

We retain your account data for as long as your account is active. If you close your account, we delete your data within 30 days, except where retention is required by law (including financial records required for tax purposes). Google OAuth tokens are deleted immediately when you disconnect a Google account.

9. Security

We use industry-standard security practices including:

• All data transmitted over HTTPS/TLS
• Passwords stored as hashed values — never in plain text
• OAuth tokens and API credentials stored in a secured database with access controls
• JWT-based session authentication
• Card payment data handled entirely by Stripe, never stored on our own servers

No system is completely secure. If you believe your account has been compromised, contact us immediately at [SUPPORT EMAIL].

10. Your Rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Disconnect any Google account integration at any time
• Export your data — LawnRoute includes a built-in data export tool, or contact us for a copy

To exercise any of these rights, email [SUPPORT EMAIL].

11. Cookies

LawnRoute uses a session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

12. Children's Privacy

LawnRoute is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top. Continued use of LawnRoute after changes constitutes acceptance of the updated policy. For material changes, we will notify account owners by email.