Privacy Policy

1. Introduction

Welcome to Scapego ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our lawn care management application and related services (collectively, the "Service").

By using Scapego, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

• Contact Information: Name, email address, phone number
• Business Information: Company name, business address, tax identification information
• Account Credentials: Username, password (encrypted), and authentication data
• Profile Information: User preferences, service settings, and customization options

2.2 Location Data

We collect and process location information to provide core functionality of our Service, including job site navigation, route optimization, and service area management. This may include:

• Precise GPS coordinates when using the mobile application
• Service addresses and job site locations
• General location data derived from IP addresses

2.3 Photos and Camera Access

With your permission, we access your device camera and photo library to:

• Capture before/after photos of lawn care services
• Document property conditions and service progress
• Store visual records for invoicing and client communication

Photos are stored securely and associated with specific jobs or customer accounts. You can manage photo permissions through your device settings.

2.4 Financial Information

We collect and process financial data to facilitate payments and invoicing:

• Invoice details, payment amounts, and transaction history
• Payment processing information through our third-party provider, Stripe
• Bank account information (for direct deposits, if applicable)
• Billing addresses and payment preferences

Important: We do not directly store complete credit card numbers. Payment card information is securely processed and stored by Stripe, our PCI-DSS compliant payment processor. Please review Stripe's Privacy Policy for information on how they handle your payment data.

2.5 Usage and Technical Data

We automatically collect certain information when you use our Service:

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, browser type, access times, pages viewed)
• Application usage patterns and feature interactions
• Performance data and error reports

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our lawn care management platform
• Account Management: To create and manage your account, authenticate your identity, and provide customer support
• Payment Processing: To process invoices, payments, and financial transactions
• Communication: To send service-related notifications, updates, and respond to inquiries
• Location Services: To enable GPS navigation, route planning, and location-based features
• Documentation: To store photos and records of completed services for business purposes
• Analytics: To analyze usage patterns and improve our Service
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with legal obligations and enforce our terms of service

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the data and context:

• Contract Performance: Processing necessary to perform our contract with you
• Legitimate Interests: Processing for our legitimate business interests (e.g., improving our Service, fraud prevention)
• Consent: Where you have given explicit consent (e.g., location tracking, camera access)
• Legal Obligation: Processing required to comply with legal requirements

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party companies to perform functions on our behalf, including:

• Stripe: Payment processing and financial transactions
• Cloud Storage Providers: Data hosting and storage services
• Analytics Providers: Usage analytics and performance monitoring
• Communication Services: Email and notification delivery

These service providers have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

5.2 Business Transfers

If Scapego is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government agencies).

5.4 Protection of Rights

We may disclose information when we believe it is necessary to protect the rights, property, or safety of Scapego, our users, or others.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication protocols
• Regular security assessments and updates
• Access controls and employee training
• Secure data centers with physical safeguards

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of information:

• Account Information: Retained while your account is active and for a reasonable period after account closure for business and legal purposes
• Financial Records: Retained for up to 7 years to comply with tax and accounting regulations
• Photos and Service Records: Retained for the duration of customer relationships and as needed for business purposes
• Usage Data: Typically retained for 24 months or as required for analytics and improvements

When information is no longer needed, we will securely delete or anonymize it.

8. Your Privacy Rights

8.1 General Rights

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal and contractual obligations)
• Data Portability: Request a copy of your information in a structured, machine-readable format
• Object: Object to processing of your information for certain purposes
• Withdraw Consent: Withdraw consent where processing is based on consent (without affecting prior processing)

8.2 GDPR Rights (EEA Residents)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to restriction of processing
• Right to lodge a complaint with a supervisory authority
• Right to object to automated decision-making and profiling

8.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• Right to Know: Request information about the categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information (subject to exceptions)
• Right to Opt-Out: Opt-out of the "sale" of personal information (Note: We do not sell your personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your CCPA rights

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at support@hardhatledger.com. We will respond to your request within the timeframes required by applicable law (typically 30 days for GDPR and 45 days for CCPA).

9. Children's Privacy

Scapego is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer information from the EEA to other countries, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to protect your information in accordance with GDPR requirements.

11. Third-Party Links

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

12. Do Not Track Signals

Some web browsers have a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. Our Service does not currently respond to Do Not Track signals or similar mechanisms.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)
• Displaying a prominent notice within the Service

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

15. Categories of Personal Information (CCPA Summary)

For California residents, here is a summary of the categories of personal information we collect:

We do not sell your personal information. We may share information with service providers as described in Section 5.