This Privacy Policy describes how Plantburgh® LLC, a Pennsylvania limited liability company and parent of Plantburgh Products ("Plantburgh"), collects, uses, and shares personal data across three roles:
For Provider Clients and Crew Members: the Provider is the data controller. Plantburgh is the data processor. Direct privacy questions to your Provider in the first instance.
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email, business name, trade, crew size | Provider on signup or waitlist intake |
| Operational data | Clients, jobs, invoices, photos, schedules, messages | Provider and Crew during use |
| Provider Client data | Name, email/phone, address, service history, payment records | Provider entering or importing into the Service |
| Payment data | Card last-4, billing address, Stripe customer ID | Stripe (we never store full card numbers) |
| Usage telemetry | Page views, feature interactions, crash logs | Browser/app during use |
| AI conversation logs | Provider AI prompts, widget chat transcripts, attached images | Provider/Provider-Client interaction with AI features |
We do not sell personal data.
You may have the right to:
California residents have additional rights to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal data.
Provider Clients and Crew Members should direct requests to the relevant Provider in the first instance. Providers may submit requests to privacy@plantburgh.com.
By engaging the Service, Providers consent to receive service-related communications via email, SMS, or phone (account, billing, security, product updates). Provider Clients consent through their Provider's terms. Message types include account notifications, appointment reminders, on-the-way notifications, payment confirmations. Frequency typically 1–4 messages per month. Standard message and data rates may apply. Opt out of SMS by replying STOP; for help reply HELP. Marketing communications require separate opt-in.
Encryption in transit (TLS) and at rest (Firestore native). Tenant data isolation enforced via Firestore Security Rules. Multi-tenant audit logging on AI calls. Stripe Connect handles all card data.
In the event of a data breach affecting your personal information, we will notify affected parties within 72 hours of discovery. The notification will include the nature of the breach, data affected, steps taken, and recommended protective actions.
Plantburgh is based in the United States. By using the Service, you understand Provider Data may be processed in the U.S. and other jurisdictions where our sub-processors operate. [PLACEHOLDER — Standard Contractual Clauses for EU data subjects pending counsel.]
The Service is not directed at children under 18. Providers must not enter children's data without verifiable parental consent.
We will publish material changes here with at least 30 days' notice and prompt re-acceptance. Continued use after the effective date constitutes acceptance.
This Privacy Policy describes Plantburgh's processing across all Providers. Each Provider may publish their own privacy notice (managed in Settings → Legal & Policies) governing their direct relationship with their Provider Clients. The two operate at different layers and are not in conflict.
Email: privacy@plantburgh.com · Plantburgh LLC, Pittsburgh, PA.