Privacy Policy

1. Introduction

ArborSmart ("ArborSmart," "we," "us," or "our") provides a cloud-based business management platform for tree care companies, including web and mobile applications, a customer portal, and related services (collectively, the "Services"). ArborSmart owns and operates the websites located at arborsmart.com and getarborsmart.com (the "Websites") and the application available at app.arborsmart.com and through the Apple App Store (the "App").

This Privacy Policy describes how we collect, use, disclose, and otherwise process personal information in connection with the Websites and the Services. By accessing or using the Websites or the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Scope

This Privacy Policy applies to personal information we collect (a) from visitors to our Websites and prospective customers ("Visitors"); and (b) from businesses that subscribe to the Services ("Customers") and the individuals they authorize to use the Services ("Users").

Customers may use the Services to store information about their own clients, employees, and contractors ("End Users"). With respect to that information ("Customer Data"), ArborSmart acts as a service provider (processor) on behalf of the Customer, which determines what information is collected and how it is used. Our processing of Customer Data is governed by our agreement with the Customer. End Users who have questions about their information should contact the relevant Customer directly.

3. A Note About Children

The Websites and Services are intended for businesses and are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it promptly. If you believe we have done so, please contact us at hello@getarborsmart.com.

4. A Note to Users Outside the United States

ArborSmart is based in the United States, and our service providers store and process information in the United States. If you access the Websites or Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction.

5. Information We Collect

Information you provide to us. We collect information you provide directly, including:

• Contact and inquiry information, such as your name, email address, company name, phone number, role, and any message you submit through a contact or interest form;
• Account information, such as the name, email address, password, and role of each User;
• Reviews and feedback, such as ratings, comments, and survey responses, together with your name and company if you choose to provide them;
• Billing information, such as billing contact details. Payment card information is collected and processed directly by our payment processor and is not stored on our servers; and
• Customer Data, such as client names, addresses, phone numbers, and email addresses; estimates, jobs, schedules, invoices, and payments; employee timesheets, time-off, and crew assignments; vehicle inspections; notes, photographs, and signatures.

Information collected automatically. When you use the Websites or Services, we and our service providers automatically collect certain technical information, such as IP address, browser type, device type, operating system, referring URL, pages viewed, and the date and time of access. We also record the link, QR code, or campaign through which you reached us.

Location information. If a User enables location sharing and grants permission on their device, the App collects the device's precise location to display crew and vehicle positions and to verify clock-ins at job sites. Location is collected only while sharing is enabled and can be disabled at any time in the App or in the device settings.

Camera and photos. If a User grants permission, the App accesses the device camera and photo library solely to allow the User to capture or select photographs to attach to records within the Services.

6. Use of Personal Information

We use personal information to:

• provide, operate, maintain, and improve the Websites and Services;
• review sign-up requests and create and administer accounts;
• respond to inquiries and communicate with you about the Services;
• send service-related communications, such as invitations, notifications, reminders, and security alerts;
• process payments and maintain billing records;
• publish reviews and testimonials, where you have consented and we have approved publication;
• understand how the Websites are used and measure the effectiveness of our outreach;
• detect, investigate, and prevent fraud, abuse, and security incidents; and
• comply with legal obligations and enforce our agreements.

We do not use Customer Data for any purpose other than providing the Services to the Customer, as instructed by the Customer, or as required by law.

7. Cookies and Other Tracking Technologies

Our Websites do not use cookies. We use Cloudflare Web Analytics, which collects aggregate usage statistics without cookies and without identifying or tracking individual visitors across websites. We do not use advertising pixels, social media trackers, or third-party advertising networks.

The Services store authentication and preference information in your browser or device storage so that you remain signed in and so the Services can function offline. This information is used only to operate the Services.

The App does not track you across apps or websites owned by other companies, does not access your device's advertising identifier, and does not contain third-party advertising or analytics software.

8. How We Respond to Do Not Track Signals

Because we do not track Users across third-party websites or services, we do not respond differently to "Do Not Track" browser signals.

9. Sharing of Personal Information

We do not sell personal information, and we do not share personal information for targeted advertising. We disclose personal information only as follows:

• Service providers. We share information with vendors that perform services on our behalf, including cloud hosting (Fly.io); website hosting, analytics, and email forwarding (Cloudflare); email delivery (Resend); payment processing (Stripe); artificial intelligence features such as estimate suggestions and the organization of job notes (OpenAI); address geocoding (OpenStreetMap Nominatim and the U.S. Census Bureau Geocoder); and map imagery (Esri). These providers are permitted to use personal information only as necessary to provide services to us.
• Within a Customer's account. Customer Data is visible to that Customer's Users according to the roles and permissions the Customer assigns. Where a Customer uses the customer portal, the Customer's clients may view their own estimates, jobs, and invoices.
• Legal requirements. We may disclose information if required to do so by law or in response to a valid subpoena, court order, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of ArborSmart, our Customers, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, personal information may be transferred to the successor, subject to this Privacy Policy.
• With consent. We may share information for any other purpose with your consent.

10. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy. Customer Data is retained for as long as the Customer's account remains active. Following cancellation, Customer Data remains available for export for thirty (30) days and is thereafter deleted, except where retention is required by law (for example, financial records retained for tax purposes). Inquiry, review, and feedback records are retained until you request their deletion or they are no longer needed. Deleted data may persist in backups for a limited period until overwritten in the ordinary course.

11. Account Deletion

Any User may delete their own account at any time from Settings → Danger zone in the App or on the web. A Customer administrator may delete the entire company account from the same location, which permanently removes the Customer's data from the Services. You may also request deletion by contacting us.

12. Your Rights and Choices

Subject to applicable law, you may request to access, correct, delete, or obtain a portable copy of the personal information we hold about you, and you may object to or ask us to restrict certain processing. You may also withdraw any consent you have given, including consent to publish a review. To make a request, contact us at hello@getarborsmart.com. We will respond within thirty (30) days and may need to verify your identity before fulfilling the request.

If your information is Customer Data, please direct your request to the relevant Customer. We will assist Customers in responding to such requests.

Marketing communications. You may opt out of marketing emails at any time by replying to the message or contacting us. Service-related communications for active accounts will continue.

Device permissions. You may withdraw location, camera, or photo permissions at any time in your device settings.

13. Texas Residents

Texas residents have rights under the Texas Data Privacy and Security Act, including the right to confirm whether we process their personal data and to access, correct, delete, and obtain a copy of it, and to opt out of targeted advertising, the sale of personal data, and profiling. We do not sell personal data or use it for targeted advertising or profiling. To exercise your rights, contact us at hello@getarborsmart.com. If we decline to act on your request, you may appeal by replying to our decision, and if the appeal is denied, you may contact the Texas Attorney General.

14. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS), password-protected accounts, expiring access tokens, and logical separation of each Customer's data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a security incident affecting personal information, we will notify affected Customers and regulators as required by applicable law.

15. Third-Party Links and Services

The Websites and Services may contain links to, or integrate with, third-party websites and services, including social media and mapping services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

16. Amendment of This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. If we make material changes, we will notify Customers by email or through the Services before the changes take effect. Your continued use of the Websites or Services after the effective date constitutes acceptance of the updated Privacy Policy.

17. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

ArborSmart
1900 Knightsbridge Rd
Irving, TX 75039
United States
Phone: (469) 703-5477
Email: hello@getarborsmart.com

← Back to ArborSmart