Privacy Policy

Last updated: April 2026

Introduction

TurfTechAdvisor ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web service.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (first and last)
• Profile photo (optional)
• Business name and address (optional)
• Phone number (optional)

Customer Data

When you use our customer management features, you may store information about your lawn care customers, including:

• Customer names and contact information
• Property addresses and lawn details
• Service history and application records
• Before/after photos of completed work

Important: You are responsible for ensuring you have appropriate consent to store customer information in our service.

Usage Data

We automatically collect:

• Device information and operating system
• App usage patterns and feature interactions
• Crash reports and performance data

Location Data

With your permission, we may access your location to provide weather conditions, soil temperature data, and route optimization features. Location data is used only when you actively use these features and is not stored long-term.

How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process your subscription payments
• Send you service-related notifications
• Improve and optimize our application
• Respond to your support requests
• Comply with legal obligations

Subscription and Payment Data

When you subscribe to a paid plan, we collect and process:

• Subscription status and billing period
• Payment method type (we do not store full card numbers)

Payment processing is handled by Stripe (web) and Apple/Google (mobile). We do not have access to your full payment card details.

QuickBooks Online Integration (Optional)

Current status: Direct in-app sync to QuickBooks Online is in development and pending Intuit's app-review approval. Today, TurfTechAdvisor only exports billing data as a QuickBooks-ready CSV file that you manually download and import into QuickBooks — no OAuth connection, no automatic data exchange. The terms in this section describe how the direct integration will behave when it becomes available; we disclose them now so you can review what will happen before turning the integration on.

If and when you choose to connect TurfTechAdvisor to your QuickBooks Online account, the integration will use Intuit's official OAuth 2.0 authorization flow. We will only access your QuickBooks data after you explicitly authorize the connection on Intuit's "Allow access" screen.

What QuickBooks Data We Access

When you connect QuickBooks, we use the com.intuit.quickbooks.accountingscope, which gives TurfTechAdvisor read and write access to:

• Your QuickBooks company information (company name, country) — used only to confirm the connection and display the connected company in your settings
• Your QuickBooks customer list — read to look up an existing customer by display name when you push an invoice; if no match is found, we create a new QuickBooks customer using only the display name from your TurfTechAdvisor customer record
• Your QuickBooks service items and income accounts — read so we can ensure a "Lawn Care Services" item exists, and create one if it does not. We do not modify any other items or accounts
• Your QuickBooks invoices — used only to create new invoices that mirror invoice records you build in TurfTechAdvisor. New invoices are created with QuickBooks' email and print status set to "unsent" so that you can review and send them from within QuickBooks. We do not auto-send invoices to your customers and we do not read or modify any invoices created outside of TurfTechAdvisor

We do not access your QuickBooks bank accounts, payroll, transactions, vendors, employees, expenses, time tracking, or any data not directly required for invoice synchronization.

How QuickBooks Credentials Are Stored

Intuit issues us an OAuth access token, an OAuth refresh token, and your QuickBooks "Realm ID" (company ID). These credentials are stored in our production database (hosted on managed infrastructure that provides disk-level encryption at rest), scoped to your TurfTechAdvisor user account, transmitted only over HTTPS, and never shared with other TurfTechAdvisor users or used for any purpose other than communicating with QuickBooks on your behalf. Access tokens are automatically refreshed in the background so you do not have to reconnect frequently.

How to Disconnect QuickBooks

You can revoke TurfTechAdvisor's access to your QuickBooks at any time by clicking the Disconnect button on the Settings → Integrations page. When you disconnect:

• We immediately delete your QuickBooks access token, refresh token, and Realm ID from our active database. Copies in routine system backups are aged out within 30 days as part of normal backup rotation
• We notify Intuit to revoke the OAuth grant on their side
• Any TurfTechAdvisor invoices already pushed to QuickBooks remain in your QuickBooks account (since they belong to you, not us)

You can also revoke access at any time from Intuit's "Manage My Apps" page (https://qbo.intuit.com/app/managemyapps).

Intuit's Privacy Policy

Once data is sent to or received from QuickBooks, it is also subject to Intuit's privacy practices. Please review Intuit's privacy policy at https://www.intuit.com/privacy/statement/.

Data Sharing

We do not sell your personal information. We may share data with:

• Stripe: Our web payment processor, to manage subscriptions and process payments
• RevenueCat: Our mobile subscription management provider, to process in-app purchases
• Intuit (QuickBooks Online): If you choose to connect QuickBooks, we share with Intuit only the data required to create invoices in your QuickBooks account: the customer display name (used to match or create a QuickBooks customer record), invoice line items (service description, service date, quantity, unit price, amount), an optional invoice number, and an optional invoice memo. We do not send customer phone numbers, email addresses, or street addresses to QuickBooks. See the QuickBooks Online Integration section above for details.
• Service Providers: Third parties that help us operate our service (hosting, analytics)
• Legal Requirements: When required by law or to protect our rights

Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest. However, no method of transmission over the Internet is 100% secure.

Data Retention

We retain your account data as long as your account is active. Customer data you enter is retained until you delete it or close your account. You can request deletion of your data at any time by contacting us.

See our public Account Deletion page for deletion steps, the data removed, and backup-retention details.

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Opt out of certain data processing

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know: You may request a copy of the categories and specific pieces of personal information we have collected about you over the past 12 months
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions
• Right to Opt Out of Sale: We do not sell your personal information. We have not sold personal information in the prior 12 months and have no plans to do so
• Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different level of service because you exercised any of these rights

To exercise any of these rights, email us at team@turftechadvisor.com with "CCPA Request" in the subject line. We will respond within 45 days.

Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: team@turftechadvisor.com