Privacy Policy

Effective Date: February 23, 2026 · Version 2.0.0

This Privacy Policy describes how SnowLawn ("we," "us," or "our") collects, uses, and protects your personal information when you use the SnowLawn platform ("Platform").

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, password, and account type (Customer or Provider)
• Profile Information: Address, profile picture, service preferences
• Provider Information: Business name, service areas, service types offered, pricing, certifications, insurance documentation
• Payment Information: Processed securely through Stripe — SnowLawn does not store full credit card numbers
• Communications: Messages sent through the Platform between Customers and Providers
• Reviews and Ratings: Feedback you submit about services received or provided

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, date and time of access, browser type
• Device Information: Device type, operating system, unique device identifiers
• Location Data: GPS data for real-time crew tracking (with your consent), IP-based approximate location
• Cookies: Session cookies, authentication tokens, and preference settings

2. How We Use Your Information

We use the information we collect to:

• Facilitate connections between Customers and Providers
• Process transactions and payments
• Provide real-time service tracking
• Send service-related notifications (booking confirmations, updates, reminders)
• Improve and personalize the Platform experience
• Respond to customer support inquiries
• Prevent fraud and enforce our Terms of Service
• Comply with legal obligations

3. Information Sharing

We may share your information with:

• Other Users: Customers can see Provider profiles, reviews, and service information. Providers can see Customer name, service address, and booking details for confirmed bookings
• Payment Processors: Stripe processes payments on our behalf
• Service Providers: Cloud hosting (Google Cloud Platform), mapping (Google Maps API)
• Legal Requirements: When required by law, subpoena, or government request

3a. Google User Data & Limited Use

SnowLawn offers the option to sign in with Google and to connect your Google Calendar. When you use these features, we access Google user data only as described here:

• Sign in with Google: we access your basic profile (name) and email address, solely to create and secure your SnowLawn account.
• Google Calendar (optional, providers only): if you choose to connect your calendar, we access your calendar events (https://www.googleapis.com/auth/calendar.events) solely to create, update, and remove events for your SnowLawn bookings and to display your availability. We access only the events needed for this scheduling function.
• Storage & revocation: Google access tokens are stored securely and used only to provide these features. You can disconnect Google Calendar at any time in your provider settings, and revoke access entirely at your Google Account permissions.

4. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• JWT-based authentication with token rotation
• CSRF protection
• Rate limiting to prevent abuse
• Google Cloud Secret Manager for credential storage
• Regular security audits and monitoring

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information as required by law, for fraud prevention, or to resolve disputes. Upon account deletion request, we will delete or anonymize your data within 30 days, except where retention is legally required.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information
• Opt out of non-essential communications
• Export your data in a portable format
• Withdraw consent for location tracking at any time

To exercise these rights, contact us at privacy@snowlawn.net.

7. Location Data & GPS Tracking

Our Platform uses GPS tracking for real-time crew tracking during active service delivery. Location sharing is:

• Active only during confirmed, in-progress bookings
• Visible only to the Customer who booked the service
• Not stored beyond the service completion
• Controllable — Providers can turn off tracking in their device settings

8. Cookies & Local Storage

We use:

• Essential Cookies: Required for authentication and CSRF protection
• Local Storage: Storing authentication tokens and user preferences
• Advertising Measurement: When you arrive from one of our ads, Google Ads conversion cookies may be used to measure whether ad visits lead to quote requests. These are set by Google and are not used by us to build advertising profiles.

Beyond the advertising measurement described above, we do not use third-party advertising or analytics tracking cookies.

9. Children's Privacy

The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a user under 18, we will promptly delete it.

10. SMS/Text Message Communications

If you provide your phone number, you may receive SMS/text messages from SnowLawn related to booking confirmations, service updates, account verification, and provider communications. These messages are sent via third-party service providers (e.g., Twilio) who process your phone number solely to deliver messages on SnowLawn's behalf. Message and data rates may apply. Message frequency varies based on your activity.

You may opt out of non-essential SMS messages at any time by replying STOP. You can also manage your notification preferences in your account settings. Opting out of essential messages (such as verification codes) may limit your access to certain Platform features.

11. Data Breach Notification

In the event of a data breach involving the unauthorized access or acquisition of your personal information, SnowLawn will:

• Notify affected users as soon as practicable and without unreasonable delay, in compliance with Massachusetts data breach notification law (M.G.L. c. 93H) and other applicable state laws
• Provide written notice describing the nature of the breach, the categories of personal information affected, and the steps taken to address the breach
• Notify the Massachusetts Attorney General's Office and the Director of Consumer Affairs and Business Regulation as required by law
• Offer complimentary credit monitoring services when the breach involves Social Security numbers, financial account information, or other highly sensitive data
• Post prominent notice on the Platform for breaches affecting a large number of users

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on the Platform. Your continued use of the Platform after changes constitutes acceptance.

13. Contact Us

For privacy-related questions or to exercise your data rights: