Privacy Policy

Overview

Grassr ("we," "our," or "us") operates the Grassr mobile application and website (grassr.io). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Grassr, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

• Name and business name
• Email address
• Phone number
• Password (encrypted)

Business Data

• Customer names, addresses, phone numbers, and email addresses
• Job schedules and service history
• Invoice and payment records
• Crew member information

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card numbers on our servers. Stripe's privacy policy governs the collection and use of payment information.

Location Data

With your permission, we collect location data to provide route optimization, distance calculations, and navigation features. You can disable location access in your device settings.

Usage Data

We collect anonymous usage data to improve the app, including feature usage, crash reports, and performance metrics.

How We Use Your Information

• Provide and maintain the Grassr service
• Process payments and send invoices
• Send transactional notifications (job reminders, payment confirmations)
• Send service updates and marketing communications (with your consent)
• Improve and optimize the app experience
• Respond to customer support requests
• Comply with legal obligations

Third-Party Services

We use the following third-party services:

• Stripe — Payment processing
• Supabase — Database and authentication
• Loops — Email communications
• Twilio — SMS notifications
• PostHog — Product analytics
• Google Maps — Mapping and routing
• Expo — Push notifications

Each service has its own privacy policy governing their use of your data.

Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication with phone verification
• Regular security audits

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.

Your Rights

You have the right to:

• Access — Request a copy of your data
• Correction — Update inaccurate information
• Deletion — Request deletion of your account and data
• Portability — Export your data in a standard format
• Opt-out — Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@grassr.io.

Children's Privacy

Grassr is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, contact us at:

• Email: privacy@grassr.io
• Website: grassr.io