Privacy Policy

Account details. When you create an account we ask for your name, email address, and a password (stored only as a secure hash). When you set up your company we ask for the company name, its state, and optionally a phone number.

Your business records. As you use TurfOrbit you enter information about your own customers and work: names, phone numbers, email addresses, service addresses, quotes, jobs, invoices, notes, photos of completed work, equipment, and crew time-clock entries. This data belongs to your business. We store and process it only to run the service for you.

Billing. Subscriptions are processed by Stripe. Card numbers go directly to Stripe and never touch our servers; we keep only a Stripe customer reference and your subscription status.

Technical logs. Our hosting provider keeps short-term request logs (IP address, browser type, pages requested) for security and troubleshooting. We do not use analytics, advertising, or tracking services on the site or in the app.

Contact form. If you write to us through the contact page we receive your name, email, and message, and use them only to reply.

To provide the product: building quotes, scheduling jobs, planning routes, sending quotes and invoices to your customers, tracking payments, and emailing you a weekly summary of your business.

AI features. When you use an AI feature we send the relevant text to Anthropic's Claude model to produce the result: for quotes, the job description you typed plus your price list; for route planning, the day's job titles, addresses, and durations. The output is a suggestion that you review before anything is sent to a customer.

Maps and drive times. To estimate drive times we send service addresses (address only, no names) to OpenStreetMap's geocoding and routing services. Results are cached so an address is looked up once.

Service messages. On your instruction, we email or text your customers quote links, invoice links, payment reminders, appointment changes, and review requests, sent under your company name. We also send you account emails such as sign-in confirmations and password resets.

We do not use your data to train AI models, and we do not sell it.

Only the service providers needed to run TurfOrbit, and only for that purpose:

• Supabase — database, sign-in, and file storage (United States)
• Vercel — website and application hosting
• Anthropic — AI quote and route generation
• Stripe — subscription payments
• Resend — sending email
• Twilio — sending text messages
• OpenStreetMap services — address lookup and drive-time estimates

We may also disclose information if required by law, or to protect the rights and safety of our users. We never sell personal information and never share it for advertising.

Text messages are sent only to customers who gave their phone number to the business they work with, and only for service purposes: appointment changes, quotes, and invoices. Message frequency is low. Reply STOP to any message to opt out, or HELP for help. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

TurfOrbit uses cookies for one thing: the sign-in session that keeps you logged in. Those cookies are strictly necessary for the app to work, so no cookie banner is shown. We do not use advertising or analytics cookies.

Your browser's local storage remembers two preferences on your device only: light or dark mode, and the crew screen's language. Neither is sent to us.

When you pay, you are taken to a checkout page run by Stripe, which sets its own cookies under Stripe's privacy policy.

Photos your crew attaches to a job are stored at long, unguessable web addresses so they load quickly in the app and in links you share. Anyone who has the exact link to a photo can view it, so treat those links like the photos themselves.

We keep your data for as long as your account is active. If you close your account or ask us to delete it, we delete your data within 30 days, except for records we must keep for tax, accounting, or legal reasons (for example, billing history), which we keep only as long as the law requires.

Data is encrypted in transit and at rest. Each company's data is isolated by database-level access rules, passwords are stored as secure hashes, and access requires a signed-in account. No system is perfectly secure, so please use a strong, unique password.

You can view and edit your business records in the app at any time, and export invoices as a spreadsheet from the Invoices page. You can also ask us to access, correct, export, or delete the personal information we hold about you, and we will respond within 30 days. Depending on where you live (including California and other U.S. states with privacy laws) you may have additional rights; we honor those requests the same way. We will never treat you differently for exercising them.

If you are a customer of a business that uses TurfOrbit and want your information changed or removed, contact that business directly, or contact us and we will pass the request along.

To make any request, use the contact form.

TurfOrbit is a business tool and is not directed at children. We do not knowingly collect information from anyone under 18.

If we make meaningful changes we will update the date at the top of this page and, for significant changes, tell account holders by email or in the app.

Questions or requests about this policy: use the contact form. See also our Terms of Service.