Privacy Policy

What we collect depends on how you deal with us.

Website visitors

• Quote requests. If you fill in the “Request a quote” form we collect your name, phone number and/or email address, the property address, the service you need, and any details you add. If you give an email address, we send a confirmation to it.
• Address suggestions. As you type an address into the form, what you've typed is sent to our address-lookup provider so we can suggest matching Maine addresses.
• No tracking. We don't use analytics, advertising or social-media tracking tools on our website.

Customers

Our staff create customer accounts; there is no public sign-up. For customers we keep:

• your name, email address and phone number, and your sign-in password (stored only in scrambled, hashed form);
• the addresses of the properties we service and any notes about them, plus map coordinates we work out from each address so we can plan crew routes;
• your service history: scheduled and completed visits, job notes, service requests, and the service contracts you accept (including the name you type to sign and when you signed);
• photos and notes you add to a job or service request;
• messages you send to and receive from our office in the app or portal;
• invoices and their payment status. Card payments are handled by Stripe; we never see or store your full card number;
• your notification settings, and a push-notification token for your phone if you allow notifications.

Crew members and staff

• name, email address, phone number, sign-in password (hashed) and crew assignment;
• photos taken to show a job was completed or why it was skipped, the reason for a skipped job, and job notes;
• messages between crews and the office;
• the device's location while the crew Job map is open (see Location below);
• a push-notification token for the phone if notifications are allowed.

Technical information

Like any website or app, our servers receive your IP address and basic device and browser details when you connect. We use these to keep the service secure (for example, to limit repeated sign-in attempts) and to diagnose errors.

• Only crew members' devices. The mobile app asks crew members for permission to use their location while the app is in use. We don't collect location from customers' devices.
• Only while the Job map is open. While a crew member has the Job map screen open and the app is in the foreground, the app sends the phone's approximate position to us about every 45 seconds. It stops when they leave that screen or the app goes to the background. The app never tracks location in the background and never asks for “Always” location access.
• Why. So managers can see where crews are on the day's job map, and so the crew member can see their own position on the map.
• Only the latest position. We keep one position per crew member and overwrite it each time. We don't keep a location history. The position is deleted if the crew member's account is removed.
• Crew members can turn location off at any time in their phone's settings; the job map still works without it.

Crew members photograph completed or skipped work as proof of the visit. Customers can add a photo to a job or service request, and managers can photograph extra work added to a job. The app only uses your camera or photo library when you choose to take or attach a photo.

When a photo is uploaded we resize it and remove the hidden information phone cameras embed in image files, such as the GPS location where it was taken and the device details. Photos are kept in private storage and can only be viewed through your account or by our staff.

• One sign-in cookie. When you sign in to the customer portal we set a single cookie that keeps you signed in. It can't be read by scripts on the page, and it ends after 30 minutes of inactivity or 12 hours at most.
• Browser storage. The portal stores a small amount of information in your browser so that signing in or out in one tab applies to your other open tabs.
• Mobile app. The app keeps your sign-in in your phone's secure storage. If you turn on Face ID, Touch ID or fingerprint unlock, that check happens entirely on your phone; we never receive your biometric data.
• We don't use advertising or analytics cookies, which is why you won't see a cookie banner.

• to respond to quote requests and set up new customers;
• to schedule, route and carry out the work, and to show you what's been done;
• to send invoices, take payments and keep accounting records;
• to contact you about your service, including notifications and emails about visits, messages, invoices, password resets and occasional announcements;
• to keep accounts secure, prevent misuse and fix problems;
• to meet our legal, tax and accounting obligations.

We do not sell your personal information, and we don't share it with anyone for advertising. Our staff and crews see the information they need to do their jobs, such as the service address and job notes. Outside ACME, we use these service providers, which handle information on our behalf:

• Railway (hosting): runs our website, app servers, database and photo storage, in the United States, and keeps backup copies of our database.
• Stripe (online payments): when you pay an invoice online, you pay on Stripe's secure checkout page. We send Stripe the information needed to process the payment, such as the invoice number and amount; your card and billing details go directly to Stripe and are covered by Stripe's privacy policy.
• Resend (email delivery): sends our emails, such as quote confirmations, password resets, notifications and announcements, so it receives your email address and the message.
• Expo, Apple and Google (push notifications): deliver app notifications to your phone, so they receive your device's push token and the notification text.
• LocationIQ (address lookup): receives address text to suggest addresses as you type and to turn property addresses into map coordinates.
• Map providers: maps in the mobile app are drawn by Apple Maps (iPhone) and Google Maps (Android). Staff-only maps in our office dashboard load map images from OpenStreetMap and map marker icons from a public content-delivery network (unpkg).
• Sentry (error monitoring): when something breaks, we may send an error report so we can fix it. We set it up to leave out cookies, form contents and request bodies, to strip email addresses and web-address details from reports, and not to record screens.
• Better Stack (uptime monitoring): checks that our website is online. It doesn't receive your personal information.

We may also disclose information if the law requires it, to protect our rights or someone's safety, or as part of a sale or transfer of our business, in which case this policy would continue to apply to your information.

• We keep account, property and service information for as long as you're a customer or crew member, and afterwards for as long as we reasonably need it for our records.
• We keep invoices and payment records for as long as tax and accounting rules require.
• Quote requests are kept so we can follow up and avoid duplicates. You can ask us to delete yours.
• Some things are short-lived by design: password-reset links expire after 15 minutes, invoice payment links after 120 days, and a crew member's location is overwritten with each update.
• Push-notification tokens are removed when you sign out of the app or when your phone stops accepting our notifications.
• We keep backup copies of our database, both with our hosting provider and in encrypted offline storage controlled by the owner. When we delete your information, older copies may remain in those backups until they're replaced or deleted in our normal backup cycle, and we won't restore deleted information except to recover from a technical failure.

We use encrypted (HTTPS) connections, store passwords only in hashed form, sign you out automatically after a period of inactivity, keep photos in private storage, and limit staff access to what each role needs. No system is perfectly secure, so please use a strong password, keep it to yourself, and tell us right away if you think someone else has used your account.

Our services are for property owners and our own staff. They are not aimed at children under 13, and we don't knowingly collect information from them. If you believe a child has given us personal information, contact us and we'll delete it.

• Update your details. You can change your email address, phone number, password and notification settings in your account settings, or ask us to update other details.
• Emails and notifications. Announcement emails include an unsubscribe link. You can turn individual notification types on or off in your account settings, and turn off push notifications in your phone's settings. We'll still send essential messages about your account, such as password resets.
• Phone permissions. You can allow or deny camera, photo, location and notification access in your phone's settings at any time.
• Access, correction and deletion. You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email info@acmelandscapingmaine.com and we'll respond within 30 days. Depending on where you live, you may have additional rights under your state's law.

You can ask us to close your account and delete your personal information at any time. Accounts are set up by our staff, so deletion requests are handled by our staff too:

1. Email info@acmelandscapingmaine.com with the subject “Delete my account”.
2. Send it from the email address on your account if you can, and include your name and phone number or service address so we can find your account. We may contact you to confirm the request came from you.
3. A member of our staff will handle your request and respond to you within 30 days. Deletion isn't automatic; it starts when we receive your email.

We'll close your account so it can no longer be used to sign in and stop sending you notifications. We'll then delete or anonymize the personal information we don't need to keep. We may keep invoices and payment records, and the records of work we did that go with them, as required by law (for example, tax and accounting rules) or to resolve a dispute.

We keep backup copies of our database, both with our hosting provider and in encrypted offline storage controlled by the owner. When we delete your information, older copies may remain in those backups until they're replaced or deleted in our normal backup cycle, and we won't restore deleted information except to recover from a technical failure.

Deleting the app from your phone doesn't delete your account. You don't need an account to ask us to delete a quote request; just email us the same way.

We may update this policy as our services change. When we do, we'll post the new version on this page and change the effective date at the top. If we make a significant change, we may also let you know by email or in the app.

Questions or requests about your privacy? Email info@acmelandscapingmaine.com or write to us:

See also our Terms of Service.