Privacy Policy

Effective Date: October 21, 2026 · Version 2.3.1

This Privacy Policy describes how WINDHAMTECH LLC, which operates the SnowLawn platform ("SnowLawn," "we," "us," or "our"), collects, uses, and protects your personal information when you use the SnowLawn website and apps ("Platform").

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, password (where you use one), and account type (Customer or Provider)
• Profile Information: Address, profile picture, service preferences
• Provider Information: Business name, service areas, services and prices, business hours, photos, and whether you confirm that you carry business insurance (self-reported; SnowLawn does not verify it)
• Payment Information: Processed securely through Stripe — SnowLawn does not store full credit card numbers
• Communications: Messages sent through the Platform between Customers and Providers
• Reviews and Ratings: Feedback you submit about services received or provided

1.2 Information Collected Automatically

• Usage Data: Pages visited, searches, and steps taken toward a quote or booking (for example tapping Call, Get quotes or Book Now on a provider's page), tagged with a random session identifier kept in your browser's session storage for the life of the tab; date and time of access and browser type. These records contain no name, phone number or account identifier
• Device Information: Device type, operating system, unique device identifiers, and — if you turn on notifications in the app or your browser — a push notification token
• Location Data: The precise location of on-duty crew members through the SnowLawn app, disclosed and consented to in the app before it is collected (see Section 7); IP-based approximate location
• Cookies: Session cookies, authentication tokens, and preference settings
• Email Engagement: For the emails we send to listed business addresses (Section 1.3), whether each was delivered, bounced or opened — a small image in the email tells our email provider when it is opened — and whether its link was used

1.3 Information from Public Sources

We build provider listings from publicly available business directories, open map data from the Overture Maps Foundation (see Data Sources) and businesses' own websites: business name, address, phone number, website, hours, services and public ratings, and the email address a business publishes on its website. We may text a listed business number: a one-time invitation to claim its listing, and a notification when a nearby customer asks for a quote on a service it lists — at most three texts a day to a number, between 8 am and 9 pm its local time (a narrower window where state law requires one), each one saying Reply STOP. A STOP ends all of them. Until a business claims its listing, we may also email the address its website publishes: a one-time invitation to claim the listing and, when we cannot text the business, a notification when a nearby customer asks for a quote on a service it lists (at most one a day and three a week to an address), with updates on that request — a message from the customer, an accepted price, or a withdrawn request. Each of these emails is marked as an advertisement and carries our postal address and an unsubscribe link; unsubscribing stops them to that address. We keep a record of sends and opt-outs as compliance evidence. A business may ask us to correct or remove its listing at admin@snowlawn.net.

2. How We Use Your Information

We use the information we collect to:

• Facilitate connections between Customers and Providers
• Process transactions and payments
• Provide crew location sharing, route planning and real-time service tracking
• Send service-related notifications (booking confirmations, updates, reminders)
• Improve and personalize the Platform experience
• Respond to customer support inquiries
• Prevent fraud and enforce our Terms of Service
• Comply with legal obligations

3. Information Sharing

We may share your information with:

• Other Users: Customers can see Provider profiles, reviews, and service information. Providers can see Customer name, phone number, email address, service address, and booking details for bookings they are offered or have confirmed
• Providers, when you request a quote: We share your name, phone number, email address, service address, property details, request notes and any photos you attach with the nearest service providers so they can respond — including local businesses that have not yet claimed their SnowLawn listing, which we text at their publicly listed number. Providers may call or text you directly about your request. A provider's access to your request through their quote request link ends when the request closes or 30 days after you accept a quote
• Payment Processors: Stripe processes payments on our behalf
• Service Providers: Cloud hosting (Google Cloud Platform); maps, satellite imagery and address suggestions (Google Maps Platform); address geocoding (OpenStreetMap Nominatim); email delivery and email open tracking (SendGrid); text messaging and phone calls (Twilio); push notifications (Apple Push Notification service, Firebase Cloud Messaging); error monitoring (Sentry — receives technical data such as IP addresses when an error occurs); AI text generation (OpenAI, for optional price estimates and profile drafts, which receive service type, property size and city — never your name or contact details; Anthropic, which writes listing descriptions from publicly available business information). Each processes data only on our instructions
• Legal Requirements: When required by law, subpoena, or government request

3a. Sign-In Providers & Google Limited Use

You may sign in with a phone code, Google, Apple or Facebook. When you use a sign-in provider, we access its data only as described here:

• Sign in with Google, Apple or Facebook: we receive only your name and email address (Apple may give a private relay address), solely to create and secure your SnowLawn account, and we store the provider's account identifier so you can sign in again.
• Revocation: deleting your SnowLawn account clears these identifiers. You can also revoke SnowLawn's access at your Google Account permissions, in your Apple ID settings under Sign in with Apple, or in Facebook's Apps and Websites settings.

4. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• JWT-based authentication with token rotation
• CSRF protection
• Rate limiting to prevent abuse
• Google Cloud Secret Manager for credential storage
• Regular security audits and monitoring

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information as required by law, for fraud prevention, or to resolve disputes. Upon account deletion request, we will delete or anonymize your data within 30 days, except where retention is legally required. Records of the texts we send and receive (who, when, what template, delivery status, and opt-outs) are kept for at least five years as compliance evidence, including for people without accounts; message bodies may be cleared after 90 days. Voice messages left on our texting number are kept the same way: the calling number, time and length for five years; the recording itself is deleted after 90 days. Records of the emails we send to listed business addresses (the address, when, which email, and its delivery and open status) are kept for at least five years as compliance evidence, and an address that unsubscribes, reports spam or bounces stays on a do-not-email list so these emails never go to it again. Crew location history is kept for 30 days (Section 7). Usage and funnel records (Section 1.2) are kept for up to 400 days so a week can be compared with the same week a year earlier, then deleted. Survey answers are kept until you ask us to erase your data. If you requested a quote without creating an account, you can request erasure of your request details by emailing admin@snowlawn.net.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information
• Opt out of non-essential communications
• Export your data in a portable format
• Withdraw consent for location tracking at any time

To exercise these rights, contact us at admin@snowlawn.net.

7. Location Data & Crew Location Sharing

Crew members of a provider business who use the SnowLawn app can go "on duty". While on duty, the app collects the phone's precise location — including in the background, when the app is closed or not in use — roughly every two minutes when the phone has moved. It is used to show the crew member's position to their crew lead and the business they work for, to send the closest person to the next job and to track route progress. The app explains this and asks for consent before any location permission is requested.

• Shared with the crew member's crew lead and the business they work for
• Collected only while on duty — sharing stops when the member goes off duty and switches off by itself after 10 hours
• Location history is kept for 30 days and then deleted
• Customers may see a provider's approach to their own address during an active visit, never at other times
• Never used for advertising
• Controllable — a crew member can decline the in-app disclosure, go off duty, or revoke location access in their phone's settings at any time

8. Cookies & Local Storage

We use:

• Essential Cookies: Required for authentication and CSRF protection
• Local Storage: Storing authentication tokens and user preferences
• Session Storage: A random session identifier for usage analytics (Section 1.2), discarded when the tab closes
• Advertising Measurement: We load Google's ads measurement tag site-wide, configured for conversion measurement only — ad-personalization signals are disabled and restricted data processing is enabled, so these cookies measure whether ad visits lead to quote requests and are not used to build advertising profiles.

Beyond the advertising measurement described above, we do not use third-party advertising or analytics tracking cookies.

9. Children's Privacy

The Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a user under 18, we will promptly delete it.

10. SMS/Text Message Communications

If you provide your phone number, you may receive SMS/text messages from SnowLawn related to booking confirmations, service updates, account verification, provider communications and, occasionally, a one-question survey about a request you made or received. These messages are sent via third-party service providers (e.g., Twilio) who process your phone number solely to deliver messages on SnowLawn's behalf. Message and data rates may apply. Message frequency varies based on your activity.

Replying STOP to any SnowLawn text stops all texts to that number — including booking, verification and payment texts — until you reply START. To turn off marketing texts only, use the "Marketing texts" setting in your account. Because verification codes are sent by text, stopping all texts may limit your ability to sign in or use certain Platform features.

Calls to our texting number. If you call 844-954-3481, an automated menu answers. Press 1 and we stop all texts to the number you are calling from, the same as replying STOP. Press 2 to leave a voice message of up to two minutes. Our telephone provider (Twilio) keeps a record of each call — the calling number and the time — and stores the recording of any message until we delete it after 90 days (Section 5). We keep the opt-out against your number and, for a message, the calling number, time and length, and use them only to act on your request and to listen to your message.

11. Data Breach Notification

In the event of a data breach involving the unauthorized access or acquisition of your personal information, SnowLawn will:

• Notify affected users as soon as practicable and without unreasonable delay, in compliance with New Hampshire's data breach notification law (RSA 359-C:20) and other applicable state laws
• Provide written notice describing the nature of the breach, the categories of personal information affected, and the steps taken to address the breach
• Notify the New Hampshire Attorney General's Office and any other regulators as required by applicable law
• Offer complimentary credit monitoring services when the breach involves Social Security numbers, financial account information, or other highly sensitive data
• Post prominent notice on the Platform for breaches affecting a large number of users

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on the Platform. Your continued use of the Platform after changes constitutes acceptance.

13. Contact Us

For privacy-related questions or to exercise your data rights: