Privacy Policy

When you use LawnBrain AI, we collect:

• Account Information: Email address, name, and password (encrypted)
• Lawn Photos: Images you upload for diagnosis
• Property Details: ZIP code, city, state, grass type, and lawn size
• Usage Data: Diagnosis history, preferences, and activity logs
• Payment Information: Processed securely by Stripe (we never store card details)

• Provide AI-powered lawn diagnosis and recommendations
• Personalize advice based on your location and grass type
• Send service updates and account notifications
• Improve service quality
• Process payments and manage subscriptions

Your data is stored securely using:

• Supabase: SOC 2 Type II certified database hosting
• Encryption: All data encrypted at rest and in transit (TLS/SSL)
• Access Controls: Role-based permissions and authentication
• Regular Backups: Automatic daily backups for disaster recovery

For new initial scans, photos are stored privately and opened through owner-authenticated links. Older diagnosis photos may still have public links; this update does not change those existing photos.

You have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request account and data deletion
• Portability: Export your diagnosis history
• Opt-out: Unsubscribe from marketing emails

We do not sell your personal information. We may share data with:

• Service Providers: Stripe (payments), OpenRouter (AI analysis), Vercel (hosting and analytics), Sentry (error monitoring and crash reporting), Supabase (authentication and data storage)
• Legal Requirements: When required by law or to protect our rights
• Aggregated Data: Anonymous usage statistics for research (no personal info)

Before analyzing a new scan, we ask for permission to share your photo and notes, plus available property location, weather, and recent care context, with OpenRouter and its downstream AI providers. Permission applies only to that analysis. The downstream provider may vary between analyses.

OpenRouter and downstream providers’ data policies apply. Retention and model-training practices can vary by provider; we do not promise that providers retain no data or never use it for training.

We use essential cookies for:

• Authentication and session management
• Remembering your preferences
• Basic analytics (page views, feature usage)

We do not use third-party advertising cookies or trackers.