Privacy Policy

1. Who we are

MowFlow is operated by MOWFLOW LLC, an Illinois limited liability company (the "Platform"). This policy describes the information the Platform collects, how it's used, and the choices you have. Independent operators using the Platform are separate data controllers for the customer data they collect and serve through their own businesses.

2. What we collect

• Account info — name, email, password hash, and two-factor authentication enrollment for operators and platform admins. For customers: name, email, billing address, and mailing address.
• Service info — the property address you submit for a quote, the aerial measurements MowFlow derives from public USDA NAIP imagery, the pricing the operator has configured, and the resulting quote.
• Payment info — processed by Stripe; MowFlow stores a customer reference and the last 4 digits of the card, not full card details. Bank account information for operators is held by Stripe directly under Stripe's privacy policy.
• Communications — SMS messages exchanged between operators and customers via Twilio, including delivery receipts and opt-out (STOP) requests, retained per A2P 10DLC compliance requirements.
• Operational telemetry — error reports, web analytics, and audit-log entries that record platform actions for security and debugging. Sensitive fields (API keys, full addresses, payment identifiers) are redacted from telemetry.

3. How we use it

Account, service, and payment info are used to provide the quote, payment, and scheduling functions of the Platform. Communications are routed to enable operator-customer messaging. Operational telemetry is used for security monitoring, error reporting, and improving the service. The Platform does not sell personal information to third parties.

4. Sharing with operators

When you request a quote from an operator on MowFlow, your contact info, property address, and quote are shared with that operator so they can deliver the service. Operators are independent businesses; their use of your data is governed by their own privacy practices in addition to the operator agreement they have with MowFlow.

5. Sub-processors

The Platform uses the following sub-processors: Stripe (payments), Twilio (SMS), Resend (transactional email), Neon (database), Vercel (hosting), Sentry (error monitoring), PostHog (analytics), Axiom (log retention), OpenRouter (LLM inference), and the USDA NAIP public imagery program (no PII transmitted).

6. Your choices

You can request export or deletion of your account data by emailing support@mowflow.app. Operators can close their account at any time; the audit log retains the actions taken under the account per the platform's record-keeping obligations.

7. SMS messaging

Customers opt in to SMS by submitting a quote-request or booking form on an operator's MowFlow-hosted website with an explicit SMS-consent checkbox that is unchecked by default; consent is never pre-checked and is not a condition of any purchase. Messages are transactional, customer-care, and occasional promotional (quotes, appointment and service reminders, crew-ETA notices, invoices, and seasonal offers). Message frequency varies based on quote activity and active services (typical range: zero to a handful of messages per week per active customer). Message and data rates may apply. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent are not shared with any third parties, excluding the aggregators and service providers (for example, Twilio) used solely to deliver the messages. Reply STOP to any message to unsubscribe from further messages; reply HELP for assistance or contact support@mowflow.app.

8. Security

The Platform uses TLS for in-transit encryption, encrypted storage at the database layer, role-separated database connections with tenant-scoped row-level security, and rate limiting on unauthenticated surfaces. Production secrets are stored in a managed environment-variable store with access limited to the deploying user.

9. Changes

Material changes to this policy will be communicated to active operators at least 30 days in advance via email and an in-app notice. Continued use after the effective date constitutes acceptance.

10. Contact

Questions about this policy can be sent to support@mowflow.app.