Scope and Who We Are
This Privacy Policy describes how Gras Technologies LLC ("Gräs," "Gras," "we," "us," or "our") collects, uses, discloses, and protects information when customers, independent service professionals, crew members, and visitors use our websites, applications, communications, and related services. Independent professionals may maintain their own privacy practices for information they collect outside Gräs.
Information We Collect
The information we collect depends on your role and the features you use:
- Account and contact information: name, email, phone number, sign-in provider and account identifiers, business and service addresses, and customer or crew relationships. A Pro may create a customer record before that customer creates a Gräs account.
- Service and user content: bookings, schedules, property details, address-derived map coordinates, messages, photos, logos, reviews, notes, estimate signatures, and support or safety reports.
- Payment and business records: purchases, invoices, subscription history, payment status, saved-card summaries and authorization evidence, expenses, receipt images, equipment costs, and mileage records you enter.
- Device and activity information: installation and push-notification identifiers, app and operating-system versions, device model, sign-in and last-active information, product interactions, and diagnostic or security logs. Web and infrastructure providers may also process IP addresses and browser information.
Stripe, our payment processor, stores full card details. Gräs does not store full card numbers or security codes. For an authorized card on file, Gräs keeps Stripe identifiers, a limited card summary such as brand, last four digits, and expiration, and evidence of the customer's authorization. A linked Pro sees only the limited card summary needed to identify the authorized payment method.
How We Use It
We use your information to connect customers with lawn care professionals, schedule and manage services, process payments, send service notifications, and improve the platform. We also use records to provide business tools, manage team permissions, respond to support and safety reports, document consent, prevent fraud and abuse, and comply with legal obligations. We do not sell your personal information to third parties.
Optional AI Connections
When you authorize an assistant such as Claude or ChatGPT, it may receive workspace information within the permissions you approve, including customer, job, schedule, and related business records. Workspace access must be enabled, and write access requires separate owner consent. Review what you ask an assistant to access or change.
Manage permissions and revoke a connection in AI Connections. Revocation stops future authorized access; it does not erase information already received by the assistant provider. That provider's privacy policy and your account settings govern its processing, retention, and any use for model improvement. Gräs keeps connection and change records for access control, auditing, and eligible rollback.
Device Permissions & Browser Storage
You control camera, photo-library, and notification permissions through your device settings. Turning off a permission may prevent its associated feature from working. Service-address coordinates used for maps are derived from the addresses provided; they do not by themselves indicate collection of your device's GPS location.
The website uses browser storage and authentication technologies to keep you signed in, remember preferences, and save form drafts. Google Analytics collection on the website is currently disabled. You can clear or restrict cookies and site data in your browser; doing so may sign you out or remove locally saved drafts. Device permissions and SMS consent are separate from accepting our Terms.
Mobile Numbers and SMS Consent
If you affirmatively opt in, Gräs may send transactional text messages about appointments, scheduling, provider arrival and estimated arrival time, service accounts, invoices, and secure payment links. Message frequency varies. Standard message and data rates may apply. Consent to SMS is optional and is not a condition of purchase. Reply STOP to opt out or HELP for help.
Your mobile information will not be sold or shared with third parties for promotional or marketing purposes.
Text-messaging originator opt-in data and consent will not be shared with third parties for their own marketing. We may share mobile numbers and consent status only with providers that help us operate the messaging program—such as platform, telecommunications, hosting, security, and customer-support providers—or when required by law. We maintain consent evidence, including the disclosure version, method, date, associated service relationship, and opt-out history, to operate the program and demonstrate compliance.
See the public Gräs Text Messaging Program page for program details.
Photos & Messages
Yard photos attached to a request are private to you, the Pro you selected, their authorized crew, and authorized Gräs support or administrative personnel. Job photos and messages are available according to the related service relationship and access permissions. Providers described above may process them to operate the service, and content you authorize through an AI connection may be sent to that assistant. We use these records to quote, perform, document, and support the service, including investigating reports of abuse.
Analytics & Retention
We collect limited product events, device information, error data, and aggregate usage metrics to secure and improve Gräs. Our scheduled cleanup uses the following periods for selected records: 90 days for terminal email delivery records and team invitations; 180 days for in-app notifications; two years for messages and estimate delivery events; and seven years after the last update for declined, expired, or void estimates. AI rollback records expire after 30 days. Cleanup runs in batches, so removal can occur after the applicable period rather than at an exact deadline.
Active account and business records do not all have a fixed automatic expiry. Invoices, transaction records, support and safety records, audit logs, saved-card authorization evidence, and SMS consent and opt-out records may be retained after a customer relationship or account ends when reasonably necessary to honor suppression requests, establish consent history, resolve disputes, prevent abuse, or meet legal obligations.
Public Contractor Pages
Contractors may choose to publish a public business page. Public pages display only information selected for publication, such as business name, logo, services, service area, experience, ratings, and review excerpts. Public review summaries do not automatically publish a reviewer's contact details or service address. Text, photos, logos, and reviews can contain information that you choose to include; avoid posting private contact, financial, or sensitive information in public content. Customer lists and private financial records are not part of a public business page.
Children
Gräs is not directed to children and may not be used by anyone under 18. We do not knowingly collect information from minors; if we learn we have, we will delete it.
Data Storage & Security
Core account data is hosted on Google Firebase infrastructure. We use encrypted connections, provider-supported encryption at rest, authentication, and role-based access controls. Operational crew views restrict owner financial information. Access also depends on workspace membership and the service relationship. No system can guarantee absolute security; protect your account credentials and use device security controls, particularly on shared devices.
Your Choices
You can update your profile, choose operational email preferences, download a portable copy of your account data, or permanently delete your account fromSettings → Data & privacy on the web. In the iPhone app, open Settings → Privacy and account. Account deletion requires identity confirmation and is permanent; download your data first if you need a copy.
Deletion removes your sign-in, profile, related messages, and applicable private content. Customer-authored reviews and public review excerpts are removed. Deleting a customer account disconnects it from the Pro's business records; it does not erase the Pro's independent customer, job, estimate, or invoice records. Financial, authorization, dispute, audit, and safety evidence can remain for the purposes described above. Removing the app from your device does not delete your account.
If you cannot sign in, or need help with retained information, email support@get-gras.com. Tell us what you are requesting and the email associated with your account; do not send a password or full payment details. We may need to verify your identity. You can also revoke AI access in AI Connections, change notification permissions on your device, and withdraw SMS consent by replying STOP.
Depending on where you live, you may have rights to request access, correction, deletion, portability, or information about certain disclosures of personal information. We may verify your identity and retain information when an exception applies. You may use an authorized agent where applicable, subject to verification. We will not discriminate against you for exercising an applicable privacy right. If we decline a request, you may ask us to reconsider by replying to our response or contacting the same privacy address, including an appeal where applicable law provides one.
International Use
Gräs is operated for users in the United States. Information may be processed in the United States and other locations where our service providers operate, subject to applicable safeguards.
Policy Changes
We may update this policy as the platform, law, or our practices change. We will update the effective date and provide additional notice when required. Material changes do not retroactively convert an SMS opt-out into consent.
Contact
Questions about this policy? Reach us at support@get-gras.com. For SMS program assistance, email support@get-gras.com.