Legal
Privacy policy
PRIVACY POLICY AS UPDATED ON 10-29-2026.
Deep Lawn, Inc. (“Deep Lawn,” “Company,” “we,” “us,” or “our”) provides a cloud-based Software-as-a-Service platform that enables lawn care, pest control, and snow removal companies to generate AI-powered property measurements, calculate and present pricing, manage online sales and quoting, and integrate with the systems those companies already use to run their business. Our Platform turns aerial and satellite imagery and a business’s own pricing rules into accurate measurements, instant quotes, and a seamless purchasing experience for the homeowners those businesses serve.
We respect your privacy and care about how your Personal Information is used. This Privacy Policy (the “Policy”) describes how Deep Lawn collects, uses, stores, processes, transfers, and discloses information through our website located at deeplawn.com (the “Website”), our web-based dashboard and account portal, our embeddable Online Sales/e-commerce widget, our application programming interface (“API”), and any other websites, software, or services we make available from time to time in connection therewith (collectively, the “Platform”). This Policy governs access to and use of the Platform, which enables Clients to generate AI-assisted property measurements (including Lawn & Lot, Walkway and Driveway, and enhanced measurements), calculate pricing through Internal Quoting and Geopricing™, sell services online through an embeddable Online Sales widget, obtain Bulk Data & API measurements, and connect to third-party CRM and payment systems (the “Services”). By reviewing this Policy, you will gain a comprehensive understanding of your privacy rights and choices.
Your access to or use of the Platform and/or Services operated by the Company linked to this Policy implies your agreement to be governed by this Policy. By providing us with your Personal Information, you expressly consent to the use and disclosure of your Personal Information as outlined in this Policy. This Policy, together with our Terms of Service, applies to your use of the Services, and you agree and acknowledge that this Policy should be read in conjunction with the Terms of Service.
Please note that capitalized terms not defined in this Policy are defined in our Terms of Service.
The term “Personal Information” means any information that relates to an identified or identifiable individual. This may include, but is not limited to, information that you voluntarily provide to us (such as your name, email address, phone number, or business address) and information that we collect automatically through your use of our Platform or Services (such as IP address, location, device identifiers, browser type, and usage data). “Personal Information” includes equivalent terms used in other applicable privacy laws, as the context requires.
For this Policy, “Client” means a lawn care, pest control, snow removal, or affiliated marketing company that subscribes to and operates an instance of the Platform. “End User” means an individual homeowner or consumer who requests a quote, obtains measurements, or purchases services through a Client’s Online Sales widget or otherwise interacts with a Client’s instance of the Platform, but who is not itself a subscriber to the Platform. The terms “Users”, “you”, or “your” mean any natural or legal person who accesses or uses the Platform or Services, including Clients, individuals acting on behalf of a Client (such as employees or authorized marketing companies), and End Users, depending on the context in which the Platform or Services are accessed or used. Any information relating to an End User is processed by the Platform strictly in connection with the applicable Client’s use of the Services and, where applicable, in accordance with that Client’s instructions and configuration of its own instance of the Platform.
For this Policy or any other Platform policies, “Data Controller” means the individual or entity who, alone or jointly with others, determines the purposes and means of the collection, recording, organization, storage, use, disclosure, or destruction of Personal Information, and shall include the meaning assigned to that term under applicable privacy laws. “Data Processor” or “Service Provider” means the person who processes Personal Information on behalf of a Data Controller, and includes equivalent terms under applicable privacy laws, as the context requires.
By visiting the Platform or providing your information, you acknowledge that Deep Lawn is subject to United States federal and state privacy laws, including, where applicable, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”) and other state consumer privacy laws described in Schedule I (collectively, “Data Protection Laws”).
IF YOU DO NOT CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS SET FORTH IN THIS PRIVACY POLICY, PLEASE REFRAIN FROM ACCESSING AND/OR USING OUR PLATFORM.
1. TO WHOM DOES THIS POLICY APPLY?
1.1.
This Policy applies to all Users of our Platform and/or Services, including Clients, individuals acting on a Client’s behalf, and End Users, irrespective of the extent to which they use the Services.
1.2.
The applicability of this Policy extends to Users regardless of the device type used to access our Platform and/or Services, whether a laptop or desktop computer, or a mobile or tablet device. Deep Lawn does not currently offer a dedicated mobile application; the Platform is accessed through a web browser.
1.3.
Pursuant to Section 13, we do not knowingly collect or solicit Personal Information from anyone under the age of eighteen (18), and our Terms of Service require that Users of the Platform be at least eighteen (18) years of age. If you are under the age of eighteen (18), please do not attempt to register for the Services, request a quote, or send any information about yourself to us.
2. WHAT IS THE INFORMATION THAT WE COLLECT FROM YOU?
2.1.
To access and use our Services, users are required to provide the following information to the Company at the time of setting up their Account or at different instances, including, without limitation:
2.1.1.
Basic Information: This includes your full name, company name, business address, and professional role or designation.
2.1.2.
Contact Information: This includes your business email address, phone number, mailing address, and other contact details voluntarily provided by you.
2.1.3.
Verification Data: We implement verification and security measures at the time of Account creation and login and may collect related information such as authentication tokens, login timestamps, verification records, and other security-related information solely for the purpose of verifying user identity, securing Accounts, and preventing unauthorized access.
2.1.4.
Communication with Us: Any communications sent to us, including emails, support requests, onboarding discussions, product feedback, training requests, or other correspondence.
2.1.5.
Property and Measurement Data: We collect and process information necessary to provide our Services, including property addresses, property measurement requests, AI-generated property measurements, pricing information, quotations, service selections, and other information submitted by Clients or End Users through the Platform.
2.1.6.
Client Business Information: We collect information uploaded or configured by Clients for the operation of the Platform, including pricing rules, service offerings, territories, customer records, CRM configuration, subscription preferences, workflow settings, and other business information necessary for providing the Services.
2.1.7.
API and Integration Information: Where you integrate third-party applications or services with the Platform, we may collect information required to establish and maintain such integrations, including API credentials, access tokens, integration identifiers, synchronization logs, and related technical information.
2.1.8.
Billing Information: We may collect business billing information, including billing contact details, billing addresses, tax information, invoice details, purchase history, and other information required for subscription management and invoicing. Payment card information is processed by our third-party payment processors and is not stored by the Company.
2.1.9.
Device and Technical Information: This includes information that may assist us in identifying your device and improving the security and functionality of the Platform, including browser type and version, operating system, device identifiers, IP address, login timestamps, session logs, software usage patterns, referring URLs, and diagnostic information.
2.1.10.
Administrative and Configuration Activity Data: This includes logs and records relating to administrative actions performed on the Platform, including the creation, modification, or deletion of User Content, configuration of user permissions, integrations, subscription settings, access controls, and other security-related or administrative changes.
2.1.11.
Usage Information: This includes information relating to your interaction with the Platform, including the pages or features accessed, the number of times you access the Platform, the duration of your sessions, clickstream data, feature usage, activity logs, and other information collected to improve the functionality, performance, and user experience of the Platform.
2.1.12.
Additional Information: This includes any other information that you voluntarily provide while participating in product demonstrations, webinars, customer support interactions, surveys, beta-testing initiatives, marketing activities, or other interactions with the Company.
2.2.
You agree to provide us with your Personal Information whenever you use our Services by performing any of the following functions:
•
Accessing our Platform and/or Services through any web browser or compatible device;
•
Registering for or signing into your Account;
•
Requesting property measurements, quotations, or other Services through the Platform;
•
Configuring your Account, pricing rules, integrations, or other Platform settings;
•
Communicating or corresponding with us;
•
Participating in onboarding, demonstrations, training sessions, surveys, or customer support activities; or
•
Otherwise interacting with the Platform or Services.
2.1.
You understand and acknowledge that certain Personal Information is provided directly by you, while other information, including Device and Technical Information and Usage Information, may be collected automatically when you access or use the Platform. You are responsible for ensuring that the information you provide is accurate, complete, and up to date.
2.2.
We strive to take appropriate technical and organizational measures to ensure that your Personal Information is kept secure and confidential, and we retain such information only for as long as is necessary to fulfil the purposes for which it was collected or as otherwise required or permitted under applicable law. The Company stores and uses Personal Information solely for the purposes described in this Policy and does not use such information for purposes that are incompatible with those purposes without an appropriate legal basis.
2.3.
Further, you understand and acknowledge that, in order to operate and provide the Platform and Services, we engage trusted third-party service providers as described in Section 5 of this Policy. Such service providers process Personal Information only on our behalf, under appropriate contractual obligations, and solely to the extent necessary to provide, maintain, support, or improve the Platform and Services.
2.4.
Access to your Personal Information is limited to our employees, contractors, affiliates, agents, and authorized third-party service providers who reasonably require such access to perform their respective functions or provide services on our behalf. Such persons are subject to appropriate confidentiality and security obligations.
2.5.
When you use our Platform, we collect and store information that you provide from time to time, together with information collected automatically through your use of the Platform. In general, you may browse certain portions of our Website without revealing any Personal Information about yourself. However, once you create an Account, request Services, or otherwise provide Personal Information, you are no longer anonymous to us. Where applicable, we indicate which information is mandatory and which information is optional. You may choose not to provide certain information; however, doing so may limit your ability to access or use certain features or Services offered through the Platform.
3. HOW DO WE COLLECT THE INFORMATION?
3.1.
We employ various methods to gather information, ensuring a comprehensive understanding of User interactions and preferences. The collection of Personal Information is facilitated through the following processes:
3.1.1.
Information You Give Us: When you provide the information described in Section 2 to us directly, including at the time of creating an Account, subscribing to or using the Services, requesting property measurements or quotations, through a Client’s Online Sales widget, communicating with us, or otherwise interacting with the Platform.
3.1.2.
Session Management: We study session metrics to understand how Users interact with the Platform. This helps us understand how Users access and utilize our Services. We may use third party tools and analytics tools to collect aggregated information, including page views, feature usage, session duration, and navigation patterns. On the ONline Sales widget and quote pages, these tools also record sessions in real time, with typed text masked and payment card fields excluded. This information enables us to improve the functionality, performance, and overall user experience of the Platform.
3.1.3.
User Analytics: We analyze User behavior and preferences by collecting, processing, and analyzing Personal Information across the Platform. This enables us to maintain the accuracy and reliability of our Services, identify unusual or unauthorized activities, improve our AI-powered property measurement and quoting capabilities, and enhance the overall user experience.
3.1.4.
Log Files: Our servers automatically collect certain technical information transmitted by a User’s browser when accessing the Platform or a Client’s embedded Online Sales widget, including IP address, browser type, operating system, referring URLs, date and time of access, requested pages, and related diagnostic information. Such information is used for security monitoring, troubleshooting, diagnosing technical issues, administering the Platform, and analyzing usage trends.
3.2.
In addition to direct User interactions, we utilize various browser-based and server-side data collection methods to enhance User experience, ensure Platform security, improve Platform performance, and maintain the reliability of the Services. These methods assist in maintaining secure access to Client-specific accounts, supporting enterprise-grade deployments, monitoring Platform usage, supporting third-party integrations, and improving the functionality of the Platform. Users may manage certain data preferences through their browser settings, where applicable. The Platform uses the following categories of cookies and similar technologies:
3.2.1.
Strictly Necessary Cookies: These cookies are required to operate the Platform, maintain secure authenticated sessions, protect User Accounts, enable the Online Sales widget, and comply with applicable legal and security requirements.
3.2.2.
Functional Cookies: These cookies remember User preferences, such as language, display settings, and other configuration preferences, to enhance the functionality of the Platform.
3.2.3.
Performance and Analytics Cookies: These cookies, including those used by third party providers, collect aggregated information regarding page views, clicks, navigation patterns, feature usage, and other Platform interactions to help us improve the performance, functionality, and user experience of the Platform.
3.2.4.
Session Cookies: These are temporary cookies that are stored during your browsing session and are automatically deleted when you close your browser. They support essential Platform functionality and maintain authenticated sessions during your use of the Services.
3.3.
Web Beacons, Pixel Tags, and Similar Technologies: We may use web beacons, pixel tags, and similar technologies on the Platform and in service-related communications to understand how Users interact with the Platform and our communications. Information collected through these technologies is used to monitor Platform usage, improve functionality, evaluate the effectiveness of service-related communications, and support operational analytics.
3.4.
You may configure your browser to refuse cookies or delete existing cookies. However, disabling certain cookies may cause portions of the Platform, including the Online Sales widget and certain authenticated features, to function improperly or not at all.
4. WHY DO WE COLLECT YOUR INFORMATION?
4.1.
We collect your Personal Information only for lawful and legally permissible purposes, which include the following:
4.1.1.
Provide the Services: To operate the Platform, generate AI-assisted property measurements, calculate pricing through Internal Quoting and Geopricing™, enable the Online Sales widget, process Bulk Data and API measurement requests, facilitate integrations with third-party systems, and provide customer support to Clients and, where applicable, End Users.
4.1.2.
Account Administration and Verification: To create and administer Client Accounts, verify User identity through email verification and other authentication methods, manage User roles and permissions, administer subscription plans, monitor usage volumes, process overage billing, and maintain the security of the Platform.
4.1.3.
Generate Quotes and Facilitate Transactions: To enable Clients to generate quotations and, where applicable, facilitate the purchase of services through the Online Sales widget, including transmitting an End User’s contact information, property information, measurement results, pricing information, quotations, and order information to the applicable Client.
4.1.4.
Facilitate Payments: To facilitate the collection and processing of payment information by our third-party payment processors on behalf of Clients. Deep Lawn does not store payment card information.
4.1.5.
CRM and Third-Party Integrations: To process and transmit Client-authorized information, including End User contact information, property measurement data, pricing information, quotations, order information, and other relevant business data, to a Client’s connected CRM, payment processor, or other integrated third-party systems, in accordance with the Client’s instructions.
4.1.6.
Detect and Prevent Fraud: To detect, investigate, prevent, and respond to fraud, unauthorized access, security incidents, abuse of the Platform, and other activities that may compromise the security or integrity of the Platform, the Services, or our Users.
4.1.7.
Improve the Platform: To analyze usage patterns, monitor Platform performance, diagnose technical issues, troubleshoot errors, conduct research and development, and improve the functionality, reliability, accuracy, security, and usability of the Platform and Services. Where reasonably practicable, we may use aggregated or de-identified information for these purposes.
4.1.8.
Communicate with You: To respond to your inquiries, provide customer support, send administrative, operational, security, and transactional communications, notify you of updates relating to the Platform or Services, and otherwise communicate with you regarding your Account.
4.1.9.
Compliance with Law: To comply with applicable legal, regulatory, tax, accounting, and contractual obligations; respond to lawful requests from governmental or regulatory authorities; enforce our agreements; and establish, exercise, or defend legal claims.
4.2.
For Users residing in the United States, additional rights and disclosures relating to the processing of Personal Information may apply as set out in Schedule I, which forms part of this Privacy Policy.
4.3.
For Users residing in the European Economic Area, the United Kingdom, Switzerland, or other jurisdictions where applicable privacy laws require additional disclosures, please refer to Schedule II, which supplements this Privacy Policy and sets out the applicable legal bases for processing, international data transfers, and the rights available under those laws. If you are located in any other jurisdiction and have any questions or require additional information regarding the processing of your personal data, please contact us at Hello@DeepLawn.com for inquiries.
4.4.
You acknowledge and agree that your Personal Information may be processed by the Company and disclosed to our affiliates, trusted third-party service providers, and other authorized recipients solely to the extent necessary to provide, maintain, secure, and improve the Platform and Services, or as otherwise described in this Privacy Policy or required by applicable law.
4.5.
You further acknowledge and agree that we may communicate with you through email, telephone, SMS, or other electronic means regarding your Account, the Platform, and the Services where such communications are necessary for the provision, administration, security, or operation of the Services.
5. WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH AND WHY?
5.1.
We do not sell Personal Information collected through the Platform.. We do not share End User or Client Personal Information collected through the Platform with any third party for analytics, monitoring, reporting, or marketing purposes beyond what is reasonably necessary to provide and improve the Platform and Services described in this Policy. Our public website and our sign-up pages use advertising technologies, as described in Section 5.1.2 below. To facilitate our Services, we may share Personal Information with the following categories of recipients:
5.1.1.
Third-Party Service Providers: We engage trusted third-party service providers to perform services on our behalf, including property measurement and imagery, payment processing, customer relationship management (CRM) integrations, cloud hosting and infrastructure, analytics, communications, tax calculation, and other business operations necessary to provide the Platform and Services. These service providers are authorized to access and process Personal Information solely to perform services on our behalf and are contractually obligated or otherwise required to process such information in accordance with applicable Data Protection Laws.The categories of third-party service providers we use, and their respective functions, include:
5.1.1.1.
Mapping & Imagery: Mapping & Imagery providers which receive property addresses and geographic coordinates to generate aerial imagery, property measurements, and related outputs.
5.1.1.2.
Payment Processing / PCI Vaulting: Payment Processing / PCI Vaulting which process or securely vault payment information. Deep Lawn does not store End User payment card information.
5.1.1.3.
CRM Integrations: Jobber, HubSpot, Aspire, Service Autopilot, FieldRoutes, and Zapier, which receive Client-authorized information, including, where applicable, End User name, email address, telephone number, property address, measurement data, imagery, pricing information, quotations, and order information, at the Client’s direction.
5.1.1.4.
Cloud Hosting & Infrastructure: Cloud Hosting & Infrastructure which provide hosting, storage, infrastructure, monitoring, and Platform support services.
5.1.1.5.
Analytics Providers: Analytics providers, which provide aggregated Platform usage analytics to help us monitor and improve the performance and functionality of the Platform and our website.
5.1.1.6.
Communications: Communications which transact email communications, schedule demonstrations and meetings; and process web forms. Deep Lawn does not currently use any SMS or text messaging service provider.
5.1.1.7.
Other Services: Other Services for tax rate calculations and affiliated direct-mail marketing products.
5.1.2.
Advertising Partners: On our public website and our sign-up pages, we use advertising technologies, including the Meta Pixel. These technologies collect information such as IP address, browser and device identifiers, cookie IDs, pages viewed, and actions taken on the website, such as form submissions. They share this information with Meta and other advertising partners, who may use it for their own purposes, including measuring and personalizing advertising across other sites and apps. Under some U.S. state privacy laws, this may be considered a “sale” or “sharing” of personal information, or processing for “targeted advertising.” You can opt out by emailing Hello@DeepLawn.com with the subject “Opt out of ad tracking.” Our website and sign-up pages do not change how they operate in response to browser “Do Not Track” signals.
5.1.3.
Density Blaster and Mail Fulfilment: Where a Client uses Density Blaster to conduct direct-mail marketing campaigns, third party providers may be used to generate mailing lists within Client-designated geographic areas, printing and mailing services. Only the information necessary to provide such services, including mailing addresses where applicable, is shared for this purpose.
5.1.4.
Employees and Independent Contractors: Our employees, contractors, and authorized personnel may access Personal Information only on a need-to-know basis for the purpose of providing, maintaining, supporting, securing, and improving the Platform and Services. Such persons are subject to appropriate confidentiality obligations.
5.1.5.
Affiliates: We may share Personal Information with our parent company, subsidiaries, affiliates, or other entities under common ownership or control, provided that such entities process Personal Information in accordance with this Policy.
5.1.6.
Corporate Transactions: We may disclose Personal Information in connection with any proposed or completed merger, acquisition, financing, reorganization, sale of assets, bankruptcy, dissolution, or other corporate transaction. Any successor or acquiring entity will be required to process Personal Information in accordance with this Policy or provide notice of any material changes to its privacy practices, where required by applicable law.
5.1.7.
Legal Compliance: We may disclose Personal Information to courts, law enforcement agencies, governmental authorities, regulators, tax authorities, or other authorized third parties where we believe such disclosure is necessary or appropriate to:
5.1.7.1.
comply with applicable law, regulation, legal process, subpoena, court order, or governmental request;
5.1.7.2.
enforce our Terms of Service or other agreements;
5.1.7.3.
investigate, prevent, or respond to fraud, security incidents, or other unlawful activities;
5.1.7.4.
protect the rights, property, or safety of Deep Lawn, our Clients, End Users, other Users, or the public; or
5.1.7.5.
establish, exercise, or defend legal claims.
Before responding to any request for Personal Information, we assess its scope, validity, and legal basis and disclose only the minimum amount of Personal Information reasonably necessary to comply with the applicable legal obligation or request.
5.1.8.
Consent: We may disclose your Personal Information for additional purposes where you have expressly consented to such disclosure or where we have otherwise notified you of the intended disclosure before collecting your Personal Information.
6. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
6.1.
In compliance with applicable Data Protection Laws, we retain your Personal Information only for as long as is necessary to fulfil the purposes for which it was collected, to provide the Platform and Services, or as otherwise required or permitted by applicable law.
6.2.
Unless a different retention period is required by applicable law, contractual obligations, or a Client’s instructions, we retain Personal Information while the applicable Client’s Account is active and afterward for as long as reasonably necessary for the purposes described in this Policy, or until deletion is requested under Section 6.3. We may retain Personal Information for a longer period where required to comply with applicable legal, regulatory, tax, accounting, or contractual obligations.
6.3.
You may request the deletion of your Personal Information or, where applicable, the deletion of your Account at any time by contacting us using the details provided in this Policy. Upon receipt of a verified request, we will initiate the deletion process and use commercially reasonable efforts to complete such deletion within thirty (30) days, subject to applicable legal, contractual, or technical limitations. During this period, you may request an export of your Personal Information where such functionality is available. Where immediate deletion is not reasonably practicable, including where information is contained in secure backups or is required to be retained for legal, regulatory, or operational purposes, we may retain such information until deletion is reasonably practicable or de-identify or anonymize it so that it can no longer reasonably be associated with you. Any anonymized or de-identified information may be retained and used for analytics, research, product development, security, and other lawful business purposes.
6.4.
All Personal Information is stored using commercially reasonable administrative, technical, and physical safeguards, including secure cloud infrastructure and encryption where appropriate. Our retention practices are designed to align with applicable Data Protection Laws, industry standards, and our contractual obligations.
6.5.
Notwithstanding the foregoing, we may retain Personal Information for longer periods where reasonably necessary to:
6.5.1.
comply with applicable legal, regulatory, tax, accounting, auditing, or reporting obligations;
6.5.2.
establish, exercise, or defend legal claims;
6.5.3.
investigate, detect, prevent, or respond to fraud, security incidents, or other unlawful activities;
6.5.4.
enforce our agreements, including our Terms of Service and other applicable policies; resolve disputes;
6.5.5.
maintain appropriate business and financial records;
6.5.6.
or protect the rights, property, safety, or security of the Company, our Clients, End Users, Users, or third parties.
6.6.
Residual copies of Personal Information may remain in secure backup systems for a limited period following deletion until such backups are overwritten or securely deleted in accordance with our backup retention schedules. During this period, such information will remain subject to the safeguards described in this Policy and will not be used for any purpose other than disaster recovery, security, compliance, or other legitimate operational purposes.
6.7.
Where reasonably practicable, we will retain anonymized or de-identified information in preference to identifiable Personal Information. We will not attempt to re-identify de-identified information except where necessary to verify our de-identification processes or where required or permitted by applicable law.
7. HOW DO WE PROVIDE FOR THE SECURITY OF YOUR PERSONAL INFORMATION?
7.1.
We have implemented commercially reasonable technical, administrative, and organizational measures designed to protect Personal Information against unauthorized access, disclosure, alteration, loss, misuse, or destruction. Such measures include, without limitation:
7.1.1.
Encryption in Transit: Connections to the Platform over the internet are encrypted using Transport Layer Security (“TLS”).
7.1.2.
Encryption at Rest: Personal Information we store is encrypted at rest.
7.1.3.
Access Controls: Access to Personal Information is limited by role, each Client can access only its own data, and internal administrative access requires multi-factor authentication and is logged.
7.2.
We rely on infrastructure and service providers that maintain recognized industry security certifications.
7.3.
Full payment card numbers, CVV codes, and card expiration dates are stored exclusively by our PCI DSS-compliant third-party payment processors and payment vault providers. Deep Lawn does not store such payment card information and retains only processor-issued payment tokens, customer identifiers, or other limited billing information necessary to administer the Services.
7.4.
We continuously monitor and review our security controls and may update or enhance our security measures from time to time to address evolving security threats, improve the resilience of the Platform, and maintain compliance with applicable laws and industry standards.
7.5.
The security of your Account also depends on you. You are responsible for maintaining the confidentiality of your login credentials and for restricting access to your Account. If you become aware of any unauthorized access to or use of your Account, you should notify us immediately.
7.6.
While we implement commercially reasonable safeguards to protect Personal Information, no method of transmission over the Internet or method of electronic storage is completely secure. Accordingly, we cannot guarantee the absolute security of your Personal Information, and any transmission of information to or through the Platform is at your own risk. Nothing in this Policy shall be construed as a guarantee that unauthorized access, security incidents, or data breaches will never occur. We remain committed to continually evaluating and enhancing our security practices to protect the confidentiality, integrity, and availability of the Platform and the Personal Information entrusted to us.
8. HOW DO WE HANDLE DATA BREACHES AND SECURITY INCIDENTS?
8.1.
Pursuant to Section 7 of this Policy, we implement commercially reasonable technical and organizational measures designed to prevent unauthorized access to, or disclosure of, Personal Information. While we strive to prevent security incidents and data breaches, no security measure can eliminate all risk.
8.2.
In the event of a security incident or data breach affecting Personal Information, we will take appropriate steps to investigate, contain, mitigate, and remediate the incident in accordance with applicable Data Protection Laws and industry standards. Our response includes, without limitation, the following measures:
8.2.1.
Identification: We promptly identify, assess, and investigate actual or suspected security incidents affecting the confidentiality, integrity, or availability of Personal Information or the Platform.
8.2.2.
Containment: We take appropriate technical and operational measures to contain the incident, prevent further unauthorized access, minimize potential harm, and preserve relevant evidence where appropriate.
8.2.3.
Notification: Where required by applicable law, we will notify affected Users, Clients, regulatory authorities, or other relevant stakeholders of a confirmed security incident within the timeframes prescribed by applicable Data Protection Laws. Such notifications will, where appropriate, describe the nature of the incident, the categories of information involved, the potential impact, the measures taken or proposed to address the incident, and any recommended steps that affected individuals should take to protect themselves.
8.2.4.
Cooperation with Authorities: Where required or appropriate, we will cooperate with law enforcement agencies, regulatory authorities, and other governmental bodies in investigating and responding to security incidents and complying with our legal obligations.
8.2.5.
Remediation and Post-Incident Review: Following the containment and resolution of a security incident, we conduct an internal review to evaluate the effectiveness of our response, identify the root cause where practicable, implement corrective measures designed to reduce the likelihood of recurrence, and enhance our security controls and incident response procedures.
9. DO WE TRANSFER YOUR PERSONAL INFORMATION ACROSS BORDERS?
9.1.
Storage of Personal Information: We store Personal Information using trusted third-party cloud infrastructure and hosting service providers that maintain appropriate technical and organizational security measures. Personal Information may be stored and processed in data centers operated by us or our authorized service providers. As our business evolves, we may change or add hosting providers or data center locations to support the operation of the Platform and Services.
9.2.
International Data Transfers: By accessing or using the Platform or Services, you acknowledge and understand that your Personal Information may be transferred to, stored in, or processed in countries other than the country in which you reside, including countries where we or our trusted third-party service providers maintain facilities or operations, for the purposes described in this Policy.
9.3.
The data protection and privacy laws of such jurisdictions may differ from those of your country of residence and, in certain circumstances, your Personal Information may be subject to lawful requests by courts, governmental authorities, law enforcement agencies, or regulatory bodies in accordance with applicable law.
9.4.
Where we transfer Personal Information across national borders, we implement appropriate technical, contractual, and organizational safeguards designed to ensure that such Personal Information continues to receive a level of protection consistent with this Policy and applicable Data Protection Laws. We also require our third-party service providers that process Personal Information on our behalf to process such information only in accordance with our instructions, applicable contractual obligations, and applicable Data Protection Laws.
9.5.
As we expand the availability of the Platform into additional jurisdictions, we may update this Policy to reflect any additional legal or regulatory requirements applicable to the processing of Personal Information in those jurisdictions.
10. HOW DO WE USE ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING?
10.1.
Our AI-powered measurement technology analyzes aerial and satellite imagery of a property address submitted by a Client to generate property measurements. A Client may review and adjust the AI-generated measurements within the Platform.
10.2.
Geopricing™ allows a Client to define its own service areas by drawing boundaries, entering zip codes, or setting drive-time radii, and to assign different services, packages, and discounts to each service area. Geopricing™ uses inputs and configurations created by the Client; it does not use End User Personal Information to generate pricing recommendations.
10.3.
No third-party AI or large language model service provider is used to power our measurement, Geopricing™, or other AI-driven features; these capabilities are developed and operated by Deep Lawn.
11. WHO IS THE DATA CONTROLLER AND DATA PROCESSOR OF YOUR PERSONAL INFORMATION?
11.1.
The Company may act either as a Data Controller or as a Data Processor, depending on the nature of the Personal Information processed and the purposes for which it is processed.
11.2.
Where the Company determines the purposes and means of processing Personal Information, including in connection with the administration of the Platform, account registration and management, billing, customer support, security, marketing, and compliance with applicable laws, the Company acts as the Data Controller and is responsible for complying with the obligations applicable to Data Controllers under the applicable Data Protection Laws. This Privacy Policy describes how we process Personal Information when acting in this capacity.
11.3.
Where the Company processes Personal Information solely on behalf of a Client in connection with the provision of the Platform and Services, including Personal Information relating to a Client’s End Users, the Company acts as a Data Processor (or Service Provider, where applicable under Data Protection Laws). In such cases, the relevant Client acts as the Data Controller (or Business, where applicable), determines the purposes and means of processing such Personal Information, and is responsible for complying with its obligations under applicable Data Protection Laws.
11.4.
When the Company acts as a Data Processor, we process Personal Information only in accordance with the documented instructions of the applicable Client, except where otherwise required by applicable law. If you have questions regarding how a Client processes your Personal Information or wish to exercise your rights in relation to such processing, you should contact the relevant Client directly.
11.5.
The third-party service providers identified in Section 5 of this Policy may act as sub-processors engaged by the Company to assist in providing the Platform and Services. Such sub-processors process Personal Information only on behalf of the Company and, where applicable, the relevant Client, and are contractually required to implement appropriate technical and organizational measures to protect Personal Information and to process it only in accordance with applicable Data Protection Laws and the Company’s documented instructions.
11.6.
Where the Company acts as the Data Controller, you may contact us regarding the processing of your Personal Information using the contact details below:
Address: 5900 Balcones Drive #11979 Austin, TX, 78731
Email: Hello@DeepLawn.com
Telephone: +1 512-831-7912
12. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
12.1.
You, as a data subject, have certain rights in relation to your Personal Information under applicable Data Protection Laws, including the following:
12.1.1.
Request Access to your Personal Information: This allows you to receive confirmation as to whether we process your Personal Information, obtain a copy of the Personal Information we hold about you, and verify that we are processing it lawfully.
12.1.2.
Request Correction of your Personal Information: This allows you to request that any inaccurate, incomplete, or outdated Personal Information we hold about you be corrected or updated.
12.1.3.
Request Erasure of your Personal Information: This allows you to request that we delete or remove your Personal Information where there is no lawful basis for us to continue processing or retaining it.
12.1.4.
Object to the Processing of your Personal Information: This allows you to object to our processing of your Personal Information for certain purposes, including, where applicable, direct marketing or processing based on our legitimate interests.
12.1.5.
Request Data Portability: Where applicable under Data Protection Laws, you may request that your Personal Information be provided in a structured, commonly used, and machine-readable format, either to you or to another data controller designated by you, where technically feasible.
12.1.6.
Request Restriction of Processing: You have the right to request that we restrict the processing of your Personal Information in circumstances permitted under applicable Data Protection Laws. During such restriction, we may continue to store your Personal Information but will process it only where permitted by law.
12.1.7.
Request Further Information: You have the right to request additional information regarding our processing of your Personal Information, including the purposes of processing, the categories of Personal Information processed, the categories of recipients with whom the Personal Information has been or will be shared, and the applicable retention periods.
12.1.8.
Withdraw your Consent: Where we process your Personal Information based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal. Please note that withdrawing your consent may affect our ability to provide certain features or functionality of the Platform.
12.1.9.
Opt Out of Marketing Communications: You may object to our use of your Personal Information for marketing purposes at any time. You may opt out by following the unsubscribe instructions contained in our marketing communications or by contacting us directly.
12.2.
Jurisdiction-Specific Rights:
12.2.1.
If you are residing in the United States, including California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or any other jurisdiction with an applicable consumer privacy law, please refer to Schedule I, which sets out the state-specific rights and protections available to you.
12.2.2.
If you are located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction whose laws provide additional privacy rights, please refer to Schedule II, which supplements this Privacy Policy and describes the additional rights available to you under applicable Data Protection Laws.
The above Schedules form an integral part of this Privacy Policy.
12.3.
Exercising Your Rights: You may exercise any of the rights described above by contacting us at Hello@DeepLawn.com. To protect your Personal Information from unauthorized access, disclosure, alteration, or deletion, we may require you to verify your identity or provide additional information before processing your request.
12.4.
Where the Company acts as a Data Processor on behalf of a Client, we may direct your request to the applicable Client, who acts as the Data Controller, or require that Client’s cooperation to fulfil your request, as described in Section 11 of this Policy.
12.5.
We are committed to respecting and protecting your privacy and will make reasonable efforts to respond to your requests in accordance with applicable Data Protection Laws. However, certain rights may be subject to limitations or exceptions under applicable law, and we may decline a request where we are legally permitted or required to do so, including where complying with the request would violate applicable law, adversely affect the rights of another individual, or prevent us from fulfilling our legal obligations.
12.6.
If your rights are not specifically addressed in this Privacy Policy or the accompanying Schedules, you may nevertheless contact us using the details provided above to inquire about our processing of your Personal Information or to exercise any rights available to you under applicable Data Protection Laws.
12.7.
Where permitted under applicable law, if you believe that our processing of your Personal Information violates applicable Data Protection Laws, you may have the right to lodge a complaint with the competent supervisory authority or other regulatory authority in your jurisdiction. We encourage you to contact us first so that we may have the opportunity to address your concerns and resolve the matter directly.
13. ARE CHILDREN ALLOWED TO USE OUR PLATFORM?
13.1.
This Platform is strictly prohibited for use by individuals under the age of eighteen (18) years or the age of majority as defined by the applicable laws of their country of residence. Specifically, individuals under the age of sixteen (16) residing in European Union (EU) countries and those under thirteen (13) years old in the United States or United Kingdom are also restricted from accessing our Platform and Services (collectively referred to as “Minors”) Accessing or using the Platform by Minors constitutes a violation of our Terms of Service and Privacy Policy.
13.2.
We do not knowingly collect, solicit, or process any Personal Information from Minors.
13.3.
If you are a parent or legal guardian (“Guardian“) and believe your child has provided us with Personal Information, we urge you to promptly contact us at Hello@DeepLawn.com. Upon verification of your Guardian status, we will promptly take all necessary steps to remove and delete such information from our records.
14. HOW CAN YOU EXPRESS YOUR COMPLAINTS AND CONCERNS?
14.1.
Any Client or End User with a complaint or grievance regarding our data handling practices or this Policy may contact us at Hello@DeepLawn.com. We will acknowledge and work to resolve complaints in a timely and courteous manner, and will keep you informed of any escalation avenues available to you if you remain unsatisfied with our response. We will never ask for full card numbers, CVV codes, PINs, or bank account details by email, phone, or text message. We encourage Users to report any suspected phishing or fraudulent solicitation purporting to be from Deep Lawn to Hello@DeepLawn.com.
15. HOW ARE CHANGES MADE TO THIS POLICY?
Deep Lawn may amend this policy from time to time by posting the revised Policy and updating the effective date above. For material changes, Deep Lawn will use commercially reasonable efforts to notify Customer, such as by email to the Account’s registered contact or an in-Platform notice, at least fifteen (15) days before the revised Policy takes effect for that Customer’s then-current Subscription term. Customer’s continued use of the Deep Lawn Services after the effective date of the revised Policy constitutes acceptance of that Policy; if Customer does not agree to the revised Policy, Customer’s sole remedy is to decline to renew its Subscription and to cease using the Deep Lawn Services before the revised Policy takes effect.
16. HOW CAN YOU CONTACT US?
Should you need additional information or have any questions or complaints regarding the handling of your Personal Information, please feel free to reach out to us through any of the following channels:
Email: Hello@DeepLawn.com
Contact No: +1 512-831-7912
Additionally, you can reach out to us through our Contact Us page for further assistance.
Schedule I: United States Residents
We are dedicated to adhering to the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA) and other relevant state privacy regulations. If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nevada, Oregon, Texas, Utah, Vermont, Virginia, or Washington, or if you fall under the protections offered by privacy laws in those states, this section serves as an addition to our primary Privacy Policy, detailing your specific rights and protections.
According to the CCPA, “Personal Information” encompasses any data that can identify, relate to, describe, or be reasonably associated with a specific consumer or household. This includes a variety of information types such as names, addresses, and online identifiers, among others.
We make every effort to ensure that the Personal Information we gather is precise, relevant, and utilized correctly. You have the right to access, delete, and request disclosures regarding your Personal Information. For any questions or to exercise these rights, please reach out to us using the contact details provided below.
A. YOUR PRIVACY RIGHTS:
•
Right to access: You can access the information that has been provided by you by reaching out to us at Hello@DeepLawn.com.
•
Right to withdraw consent: The consent that you provide for the collection, use, and disclosure of your Personal Information will remain valid until such time it is withdrawn by you in writing. If you withdraw your consent, we will stop processing the relevant Personal Information except to the extent that we have other grounds for processing such Personal Information under applicable laws. We will respond to your request within a reasonable timeframe. You may withdraw your consent at any time by contacting us; and
•
Right to Opt-Out: You have the right to opt out of certain processing activities, such as the sale of Personal Information or the use of Personal Information for targeted advertising purposes. To opt out, email Hello@DeepLawn.com with the subject “Opt out of ad tracking.” Deep Lawn will respect your preferences and refrain from such activities upon your request.
•
Right to correction: You are responsible for maintaining the accuracy of the information you submit to us, including but not limited to your Contact Information. For any necessary updates or corrections to your Personal Information, Users can easily modify details using the provided Platform functionalities or by reaching out to us at Hello@DeepLawn.com.
•
Right of Access and Portability: In some jurisdictions, applicable law may entitle you to request certain copies of your Personal Information or information about how we handle your Personal Information, request copies of Personal Information that you have provided to us in a structured, commonly used, and machine-readable format, and/or request that we transmit this information to another service provider, where technically feasible.
•
Right of Erasure: In some jurisdictions, you can request that your Personal Information be deleted.
B. DATA CONTROLLER AND PROCESSOR:
Under various U.S. privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) and other state-specific regulations, we act as the “Data Controller” as well as “Data Processor” of Personal Information. To ensure compliance, we operate our services in a manner that guarantees: Personal Information is processed fairly, lawfully, and transparently; and it is collected and used only for legitimate and specified purposes.
C. APPEAL PROCESS:
If you disagree with Deep Lawn’s response to your privacy rights request or believe your rights have not been adequately addressed, you have the right to appeal. You can submit your appeal in writing to Deep Lawn at 5900 Balcones Drive #11979 Austin, TX 78731 with the subject line “Appeal of Privacy Rights Request”
D. DATA RETENTION AND DE-IDENTIFICATION:
We are committed to retaining Personal Information only for as long as necessary to fulfil the purposes for which it was collected, as outlined in our main Privacy Policy (see Section 6). We may also take measures to de-identify Personal Information in accordance with applicable laws and regulations.
E. LODGING A COMPLAINT
If you believe your rights have been violated or are dissatisfied with our response, you have the right to lodge a complaint with the federal agencies such as the Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB). You may also contact the State Attorney General’s Office of your residential state. These organizations are responsible for handling complaints related to data protection and ensuring compliance with the privacy laws.
F. ADDITIONAL INFORMATION:
For more detailed information on how we handle your Personal Information, including our data collection practices, security measures, and third-party disclosures, please refer to our main Privacy Policy available.
Schedule II - European Union Residents
We are committed to ensuring compliance with the European Union General Data Protection Regulation (GDPR).
Although our Privacy Policy explains how we meet all of our obligations for United States Users, we also have some Users who are habitually located in the European Union (‘EU Residents’) who have additional rights with respect to their Personal Data.
Personal Data is defined as: “Any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier”. The term “Personal Data” should be considered fundamentally interchangeable with the expression “Personal Information” for the purposes of this Privacy Policy.
Under the GDPR, we are the “Data Controller” and “Data Processor” of Personal Data. As part of our GDPR compliance, we provide and operate the Platform in a way that ensures: Personal Data (i.e. Personal Information) is processed fairly, lawfully, and in a transparent manner; and collected and processed only for specified and lawful purposes.
We ensure that the Personal Data we collect about you is accurate, complete, and used for its intended purpose. You may access, review, correct, and update your Information by contacting us by email at the contact details below.
EUROPEAN UNION RESIDENTS
In certain circumstances, you have certain rights regarding your Personal Information. A summary of each right and how you can exercise it is detailed below. To exercise any of these rights, please contact us at Hello@DeepLawn.com. Such requests should include information to allow us to verify your identity (e.g. your name, address, email address, or other information reasonably required).
Where we receive your request to exercise one of these rights, we will respond without undue delay and within the time required by applicable law. This may be extended in certain circumstances, e.g. where requests are complex or numerous.
We will provide the information free of charge, except where requests are manifestly unfounded or excessive, e.g. because of their repetitive character. In these circumstances, we may charge a reasonable fee or may refuse to act on the request. We will advise you of any fees prior to proceeding with a request. We may ask for additional information to verify your identity before carrying out a request.
HOW CAN YOU EXERCISE YOUR RIGHT?
1. Right to access and/or correct your Personal Data
You have the right to access the Personal Data we hold about you, and to be provided with a copy of the information (in most circumstances). You also have the right to correct any information we may hold about you that is inaccurate.
2. Right to restrict the use of your Personal Data
You have the right to ask us to restrict the processing of your Personal Data where one of the following applies:
•
The processing is unlawful, but you want us to restrict the use of the data instead of deleting it;
•
Where you contest the accuracy of your Personal Data, the restriction will apply until we have verified the accuracy or corrected your Personal Data;
•
We no longer require the Personal Data for the purposes of the processing, but are required to keep it in connection with a legal claim;
•
You have exercised your right to object to the processing. The restriction will apply until we have taken steps to verify whether we have compelling legitimate grounds to continue processing.
3. Right to withdraw consent and request deletion of your Personal Data
•
You have the right to ask us to delete your Personal Data in most circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the Personal Data is required to comply with a legal obligation or for the establishment, exercise, or defence of legal claims.
•
You may object to our use of your Personal Data for marketing purposes, and you can let us know via the provided email address.
•
Further, you may also object to the processing of your Personal Data in cases where we have used legitimate interests as the basis for processing. In such cases, we will stop processing your Personal Data until we verify that we have compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms in asking us to stop processing the data, or in limited cases where we need to continue processing the data for the establishment, exercise, or defence of legal claims.
4. Data retention and anonymization
We are committed to retaining Personal Information only for as long as necessary to fulfil the purposes for which it was collected, as outlined in our main Privacy Policy (see Section 6). We may also take measures to de-identify Personal Information in accordance with applicable laws and regulations.
5. Right to data portability
In most cases, you have the right to receive all Personal Data you have provided to us in a structured, commonly used, and machine-readable format and to transmit this data to another data controller, where technically feasible.
6. Right to lodge a complaint with a supervisory authority
If you are a resident of the EU, you have the right to make a complaint at any time to the regulator in your jurisdiction. To find out how to contact your local regulator, please visit https://edpb.europa.eu/about-edpb/about-edpb/members_en.
We will allow and assist Users who are EU Residents to exercise these rights unless we have compelling and legitimate legal grounds not to (e.g. a legal obligation under United Kingdom legislation, or if the Personal Data has been fully anonymized).