Effective: [FILL IN: Effective Date]

Draft. This Privacy Policy has not yet been reviewed by our legal counsel and may change.

This Privacy Policy explains how VisionScaper collects, uses, shares and protects personal information when you visit visionscaper.com, use the VisionScaper Designer, or use the VisionScaper Contractor Hub and related apps (together, the “Services”). It also explains the choices and rights you have. We wrote it in plain language. If something is unclear, contact us.

1. The short version

• Browsing and designing: You can use the Designer without an account. Designs you make without signing in stay on your own device until you choose to save them to an account or send them to a contractor.
• We do not sell your personal information. We do not share it with advertisers for cross-context behavioral advertising.
• Contractors are our customers. If you send a design or quote request to a landscaper, we pass your details to that landscaper. If you are a landscaper’s customer inside the Contractor Hub, that landscaper decides what is done with your information (see section 7).
• AI features send your photo to AI providers only when you choose to use an AI feature (see section 5).
• You can ask to see, export, correct or erase your data. Contractor accounts have a self-service export and erase tool (see section 12).
• Payments are handled by Stripe. We never see or store full card numbers.
• Texts: We send text messages only for reasons you agreed to, and you can reply STOP at any time. We do not share mobile numbers or text-messaging consent with third parties for their own marketing.

2. Who we are and which parts of this policy apply to you

The Services are operated by [FILL IN: Legal Name], doing business as VisionScaper, located at [FILL IN: Address] (“VisionScaper,” “we,” “us” or “our”).

Different people use VisionScaper in different ways, so we treat the roles separately:

• Visitors and homeowners who browse the website, use the Designer, create a customer account or ask for quotes. For this information, VisionScaper decides why and how it is used (we are the “controller” or “business”).
• Contractors (landscape companies, their owners, managers and crew) who open a Contractor Hub account. For account, billing and usage information, VisionScaper is the controller or business.
• Customers, leads and properties that a contractor stores in the Contractor Hub (names, addresses, quotes, invoices, messages, photos and similar). For this information, the contractor is in charge and VisionScaper acts as the contractor’s “processor” or “service provider” (see section 7).

This policy does not cover a contractor’s own website, its own privacy practices, or any other company’s sites or services that we link to.

3. Information we collect

3.1 Information you give us

Category	Examples	When
Contact details	Name, email address, phone number, company name, message	Contact form, sales and support requests, trial sign-up
Account details	Name, email, phone, street address, town, state, ZIP, password (stored in hashed form), sign-in method	Creating a customer or contractor account
Photos and designs	Yard photos you take or upload, the plants, mulch, stone and edits you add, design names, notes, the “what matters most” choices you pick	Using the Designer, saving a design online, sending a design to a contractor
Job applications and work history	Résumé, work history, application answers, contact details, whether you agree to share your VisionScaper work history as a reference, and notes an employer keeps about its own applicants and employees	Applying for a job with a business, or an employer using the hiring tools
Verification information	Business name, license numbers, and identity details or documents you give to our identity-verification provider (Stripe Identity). We receive the result of the check, and the provider handles the documents under its own policy.	Applying as a contractor, or verifying your business
Reviews and public posts	Reviews you write, and designs or photos you choose to publish in the community or a contractor gallery	When you choose to post
Quote and project requests	What you want done, your address, photos, contact preferences	Requesting quotes or consultations
Contractor business details	Business name, logo, service area, team members, pricing, tax settings, plan choice	Setting up and running a Contractor Hub account
Customer and job records (entered by contractors)	Customer names, phone numbers, emails, property addresses, quotes, e-signatures, schedules, job notes, photos, invoices, payment status, messages	Using the Contractor Hub
Payment information	Billing name and address, plan, payment status. Card and bank details are entered with Stripe and are not stored by us.	Paying for a plan; contractors collecting payments from their customers
Communications	Text messages, emails, in-app chat, and call information or recordings where a contractor turns on those features	Messaging and receptionist features
Support and feedback	Messages, screenshots, survey answers	Contacting support

3.2 Information collected automatically

• Device and usage information: browser type, device type, operating system, language, IP address, pages and features used, dates and times, and error logs.
• Location: we derive approximate location from your IP address. If you use the bird’s-eye view, we use the address you type to look up imagery (Connecticut aerial photos come from the state’s public imagery program, and other places use mapping providers). If a contractor turns on team location, the Contractor Hub uses the position of a team member’s device only while that person is clocked in, and stops when they clock out. Route planning and job-site tools use addresses and, where you allow it, device location.
• Cookies and device storage: small files and browser storage that keep you signed in, remember settings and keep Designer work on your device (see section 10).

3.3 Information from other sources

• Sign-in providers: if you sign in with Google or Facebook, we receive the basic profile details you allow (such as your name, email address and profile identifier).
• Accounting and calendar connections: if a contractor connects QuickBooks, Xero or Google Calendar, we receive and send the records that the contractor approves, such as invoices, payments, customer lists and calendar events.
• Payment processors: Stripe tells us whether a payment succeeded, failed or was refunded, and the last four digits and brand of a card.
• Plant identification and mapping services: results returned for the photo or address you submit.
• Contractors: contractors may add you as a customer or lead and enter information about you (see section 7 and section 8).

3.4 Sensitive information

We do not ask for government identification numbers, health information, or biometric data. Please do not put that kind of information in photos, notes or messages. Photos of a yard may include people, vehicles or house numbers; please avoid uploading photos that show anyone who has not agreed to it.

4. How we use information

Purpose	Examples
Provide the Services	Run the Designer, save designs, create accounts, send your design or quote request to the contractor you choose, run the Contractor Hub, process payments, send quotes and invoices, schedule jobs
Verification, hiring and trust tools	Check contractor identity and licensing, pass job applications to the employers applicants choose, show shared work-history references, and run the contractor-only records described in section 8
Communicate with you	Reply to messages, send account, security, billing and service notices, confirmations, reminders and receipts
Marketing	Send product news and offers to people who asked for them or where the law allows. You can opt out at any time.
Improve and develop the Services	Understand which features are used, fix errors, test new features and improve accuracy and speed, using aggregated or de-identified information where we can
Safety, security and fraud prevention	Verify accounts, detect spam and bots (we use Cloudflare Turnstile on forms), investigate abuse, enforce our Terms of Service and protect people and property
Legal and compliance	Keep financial and tax records, respond to lawful requests, handle disputes, and comply with laws
Business operations	Plan, audit, support the sale or reorganization of our business, and keep records

If you are in a place that requires a legal basis for processing (see section 14), our bases are: performing our contract with you, our legitimate interests in running and securing the Services, your consent (for example for marketing or optional features), and compliance with legal obligations.

5. AI features

Some features use artificial intelligence. They run only when you or a contractor choose to use them. Examples include AI redesign of an area from a written description, AI erase and smart select, season and lighting changes, “make it real” pictures, plant and object identification, scale checks, and marketing or quote-writing helpers.

• What is sent: the photo or part of a photo you are working on and the text you type. Depending on the feature, this goes to our AI service providers, which include fal.ai (which runs image models such as FLUX and Meta’s Segment Anything) and Pl@ntNet (plant identification).
• Sign-in and limits: AI tools need a free account and daily credits so that we can prevent abuse and control cost. Each tool tells you what it will do before it runs.
• Labels: AI-generated pictures are marked “Concept picture – not a build-ready plan.” They are ideas, not engineering, measurements or promises of what a finished yard will look like.
• AI receptionist: if a contractor turns it on, callers are connected to an automated voice assistant run by our voice provider (currently Retell AI, using Twilio for the phone connection). Call audio, transcripts and the details a caller gives are processed to answer the call, record what the caller wants, and, where the contractor has set it, keep a recording or transcript. The contractor decides whether calls are recorded and how long transcripts are kept, and is responsible for telling callers.
• Safety checks: requests and results may be automatically screened for harmful content, and flagged requests may be blocked.
• Your control: you can use the Designer without AI. Please do not upload photos that you do not have the right to use or that show people who have not agreed.

6. How we share information

We do not sell personal information. We share it only in these ways:

6.1 With the contractor you choose

If you send a design, quote request or message to a landscaper, we give that landscaper the details you entered and the design or photos you attach. If you submit one request to several landscapers, each of them receives it. The landscaper’s own privacy practices then apply to what it holds.

6.2 With service providers who work for us

Type of provider	What they do	Examples
Payments	Process card and bank payments and subscriptions	Stripe
Text, call and voice	Send and receive texts and calls; run the AI receptionist	Twilio or Telnyx for texts and calls; Retell AI for the receptionist, if a contractor turns it on
Identity and licensing checks	Verify contractors	Stripe Identity and public licensing records
Email and mail delivery	Deliver emails and, where used, printed mail	Email delivery services and Lob (printed mail)
AI and image processing	Run the features in section 5	fal.ai, Pl@ntNet
Maps, imagery and address lookup	Show aerial imagery, check addresses, plan routes	Google (Maps, Places, Routes, 3D views), OpenStreetMap-based services and the State of Connecticut’s public aerial imagery
Sign-in and integrations	Let you sign in and connect accounts you choose	Google, Facebook, QuickBooks (Intuit), Xero, Google Calendar
Security and anti-spam	Detect bots and abuse	Cloudflare Turnstile
Hosting and infrastructure	Host the website, store data, back it up	[FILL IN: Hosting]
Analytics	Measure site and feature use	[FILL IN: Analytics]

These providers may use the information only to provide services to us, under written terms that require them to protect it. Each one also has its own privacy policy for information you give it directly.

6.3 Integrations you turn on

If you or your contractor connect another service (for example QuickBooks or Google Calendar), we exchange information with it as you authorize. You can disconnect it at any time in settings or in the other service’s account page.

6.4 Business changes

If we are involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of it. We will tell you if the new owner will use it in a materially different way.

6.5 Legal, safety and enforcement

We may disclose information when we believe in good faith that the law requires it (for example a valid court order or subpoena), to protect the rights, safety or property of people or VisionScaper, or to investigate fraud, abuse or breaches of our Terms of Service.

6.6 With your consent, and in aggregate form

We share information when you tell us to, and we may share aggregated or de-identified information that cannot reasonably be used to identify you.

6.7 People you choose to share with

If you publish a design or photo in the community or a contractor gallery, other people can see it, along with your public member name (never your email, phone or address). If you apply for a job, your application goes only to the businesses you apply to. If you agree to share your work history as a reference, previous employers’ factual records (dates worked, role and eligibility for rehire) are shown to employers you apply to, and you can see, dispute or withdraw them. Employers’ private notes about applicants and employees are never shared with other employers.

7. Contractors and their customers

A contractor who uses the Contractor Hub stores information about its own customers, leads and properties there. For that information:

• The contractor is responsible for it. VisionScaper processes it only to provide the Services to the contractor, and follows the contractor’s instructions and our agreement with them.
• The contractor is responsible for having the notices and permissions it needs, including permission to text or email its customers.
• If you are a contractor’s customer and want to see, correct, export or erase your information, contact the contractor first. If you contact us, we will pass your request to the contractor or help the contractor respond.
• We do not use a contractor’s customer information to market our own products to those customers, and we do not sell it.
• We may use aggregated, de-identified information drawn from many contractors (for example average job sizes) to improve the Services and to publish industry insights. It cannot be used to identify you or any customer.

Contractors can export a copy of all their records and can start erasure of their account or of one customer at any time (see section 12).

8. Contractor-recorded customer reliability records

Approved contractors may record factual events about customers they have worked with, each tied to a real invoice, appointment or quote in that contractor’s account. Examples include an invoice unpaid for 60 days or more, a payment more than 30 days late, a cancellation within 24 hours of an appointment, a no-show, a reversed payment, or a cancellation after materials were ordered.

• Who can see them: another approved contractor sees a short summary only for a customer that contractor is actually dealing with. They are not told which contractor recorded it.
• Matching: customers are matched across contractors using one-way hashed versions of email, phone and address. The raw details are not shared.
• Time limit: each record expires after 24 months.
• Your rights: you can ask what records exist about you, and you can dispute a record. A disputed record is hidden while we review it. Records are included when you ask for your data. Every view of a record is logged.
• Misuse: using these records to harass or discriminate, or disclosing them outside the Services, is prohibited and can lead to a contractor’s account being ended.
• What they are not: they are not credit reports, and they are not used to decide credit, employment, insurance or housing.

To ask about or dispute a record, write to [FILL IN: Email]“>[FILL IN: Email].

9. Text messages, calls and email

• Consent: we send marketing texts or emails only with your consent where the law requires it. Service messages (for example a confirmation, a verification code or an appointment reminder) are sent because you asked for the service. Consent to texts is never a condition of buying anything.
• Opt out: reply STOP to any text to end it, or HELP for help. Message and data rates may apply. Use the unsubscribe link in any marketing email.
• No sharing for marketing: we do not share mobile numbers, or text-messaging consent, with third parties or affiliates for their own marketing or promotional purposes.
• Messages sent by contractors: when a contractor texts or emails its customers through VisionScaper, the contractor is the sender and is responsible for getting the consent the law requires. Messages are carried by our communications providers (for example Twilio and Telnyx).
• Call recording and AI receptionist: if a contractor turns on call recording, transcripts or an AI receptionist, the contractor must tell callers and obtain any consent the law requires. Recordings and transcripts follow the retention settings described in section 11.

10. Cookies, device storage and tracking signals

We use a small number of cookies and browser storage features.

Type	What it does	Can you refuse it?
Essential	Keeps you signed in, protects forms and accounts, remembers that you accepted terms, and keeps Designer work, display settings and tips on your device	Not without breaking the feature
Source tracking	Remembers which contractor page or group sent you, so a request reaches the right contractor	Yes, by clearing cookies
Analytics	[FILL IN: Analytics Cookies]	Yes, through your browser or our cookie settings

Your browser controls. Most browsers let you block or delete cookies and site data. Designs saved only on your device will be lost if you clear it, so save important designs to an account first.

Do Not Track and Global Privacy Control. We honor the Global Privacy Control signal as a request to opt out of sale or sharing for advertising where the law requires it. Because we do not sell personal information or share it for cross-context behavioral advertising, there is nothing further to opt out of. There is no common standard for “Do Not Track” browser signals, so we do not respond to them separately.

11. How long we keep information

We keep personal information only as long as needed for the purposes in this policy, to meet legal duties, and to resolve disputes. Our current approach is:

Information	How long
Contact-form messages	[FILL IN: Contact Retention] after the last contact, then deleted
Designs saved only on your device	Until you delete them or clear your browser. We do not hold them.
Customer account and saved designs	Until you close your account, then deleted within [FILL IN: Delete Days], except as noted below
Contractor account records	While the account is active. After cancellation, you can export your data, and we then delete it within [FILL IN: Delete Days], except as noted below.
Invoices, payments and plan billing records	Up to [FILL IN: Financial Retention], or the period required by tax and accounting law. When a customer or account is erased, personal details on these records are removed and the money totals are kept.
Job applications and employer notes	[FILL IN: Application Retention], or until the employer or applicant deletes them
Call recordings, call transcripts and recording links	As set by the account owner in the Contractor Hub; a setting of 0 keeps them until deleted
Chat conversations	Default 180 days; the account owner can set it between 7 and 730 days
Contractor-recorded reliability records	24 months from the event
Security and server logs	[FILL IN: Log Retention]
Backups	Deleted data may remain in encrypted backups for up to [FILL IN: Backup Retention] before it is overwritten

12. Your choices and rights

• Access and copy: ask us for a copy of the personal information we hold about you. Contractor account owners can build a full export of every record (data files plus a photo list) from the account settings; the download link works for 7 days.
• Correct: update your details in your account settings, or ask us to fix them.
• Delete: close your account and ask us to erase your information. For contractor accounts, the owner can request erasure in the account settings. It starts a 14-day waiting period, we email a link to cancel the request, and the erase then goes ahead. Owners can also erase one customer, which anonymizes that customer while keeping invoice totals the law may require us to keep.
• Opt out of marketing: use the unsubscribe link, reply STOP to texts, or email us.
• Withdraw consent at any time where we rely on it. This does not affect what we did before.
• Disconnect integrations (Google, Facebook, QuickBooks, Xero, calendar) in settings or in the other service.

To make a request, email [FILL IN: Email]“>[FILL IN: Email] or [FILL IN: Address]. We may need to verify your identity, for example by matching details to your account, and we will not discriminate against you for using your rights. If you are a contractor’s customer, see section 7.

13. Additional notice for U.S. state residents

This section applies if you live in a state with a comprehensive privacy law, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others, as those laws apply to us. It covers the information we handle as a business, not information we process for contractors under section 7.

13.1 Categories we collected in the last 12 months

Category	Collected?	Disclosed for a business purpose to
Identifiers (name, email, phone, address, IP address, account ID)	Yes	Contractors you choose; service providers
Customer records (name, contact and billing details)	Yes	Payment and hosting providers
Commercial information (plans, quotes, orders, payment status)	Yes	Payment providers; the contractor concerned
Internet and device activity	Yes	Hosting, security and analytics providers
Geolocation (approximate from IP; address you enter; device location for contractor tools if enabled)	Yes	Mapping and hosting providers
Audio and call information (only where a contractor turns call features on)	Where enabled	Communications and voice providers
Photos and design content you upload	Yes	Contractors you choose; AI and image providers when you use AI features
Professional or employment-related information (applications, résumés, work history, employer notes)	Where you use the hiring tools	Employers you apply to or work for; hosting providers
Inferences (for example plant preferences or “what matters most” choices)	Limited	Contractors you choose
Sensitive personal information (account login credentials; precise geolocation if a contractor enables location tools)	Limited	Hosting providers. We use it only to provide the Services and do not use it to infer characteristics about you.

13.2 Selling and sharing

In the last 12 months we have not sold personal information and have not shared it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of anyone under 16.

13.3 Your rights

Depending on where you live, you may have the right to: know and access what we collect, use, disclose and share; receive a copy in a portable format; correct inaccurate information; delete information; opt out of sale, sharing, targeted advertising and certain profiling; limit the use of sensitive personal information; and not be treated unfairly for using these rights. You can use an authorized agent to make a request for you. We may ask for proof of the agent’s authority and for you to confirm your identity. We respond within the time the law allows (generally 45 days, with one extension where permitted).

13.4 Appeals

If we decline your request, you may appeal by replying to our decision or emailing [FILL IN: Email]“>[FILL IN: Email] with “Appeal” in the subject line. We respond to appeals within 60 days in writing, with the reasons. If you live in Connecticut and are unhappy with the result, you may contact the Connecticut Attorney General’s Office at portal.ct.gov/ag. Residents of other states can contact their state attorney general.

13.5 Other state notices

California “Shine the Light”: we do not disclose personal information to third parties for their own direct marketing. Nevada: we do not sell covered information as Nevada law defines it.

14. Canada, the UK, the EEA and international transfers

We are based in the United States, and the Services are designed for U.S. landscape businesses and homeowners. If you use them from another country, your information will be processed in the United States and other countries where our providers operate, which may have different data protection laws from yours.

• EEA and UK: where required, we transfer personal data using approved safeguards such as standard contractual clauses. You may have the right to access, correct, erase, restrict or object to processing, to data portability, to withdraw consent, and to complain to your data protection authority.
• Canada: you may ask for access to and correction of your information and may withdraw consent, subject to legal limits. You may also complain to the Office of the Privacy Commissioner of Canada.

15. Children

The Services are for adults. The Contractor Hub is for business use by people 18 or older. We do not knowingly collect personal information from children under 13 (or under the age set by local law). If you believe a child has given us personal information, email [FILL IN: Email]“>[FILL IN: Email] and we will delete it.

16. Security

We use reasonable administrative, technical and physical safeguards, including encrypted connections (HTTPS), access controls, hashed passwords, sign-in verification for sensitive account actions such as exports and erasure, activity logging, and limits on who can see customer records. No system is perfectly secure, so we cannot guarantee absolute security. Use a strong, unique password and keep your sign-in details private. If we learn of a breach affecting your information, we will tell you and the authorities as the law requires.

17. Third-party sites and services

The Services may link to or work with other sites, apps and social networks (for example sharing a design to social media, or a contractor’s own site). We do not control them and are not responsible for their privacy practices. Read their policies before giving them information.

18. Changes to this policy

We may update this policy as our Services, partners or the law change. We will post the new version here with a new “Last updated” date. If a change is material, we will give you more prominent notice, such as an email or a notice in the Contractor Hub, and ask for consent where the law requires it. Continuing to use the Services after a change takes effect means you accept the updated policy, except where the law requires your consent.

19. Contact us and complaints

[FILL IN: Legal Name], doing business as VisionScaper
Attention: Privacy
[FILL IN: Address]
Email: [FILL IN: Email]“>[FILL IN: Email]
Phone:

You can also use our contact form and choose “Privacy” or “A question about VisionScaper.” We aim to answer within 30 days. If you are not satisfied, you may complain to your state attorney general or your local data protection authority.

See also our Terms of Service.