Privacy Policy

1. Two kinds of data — and our two roles

Account and site data. When a lawn care or turf treatment business (a “Subscriber”) signs up for Nytrojen, or when a visitor registers interest on our website, we collect that information for ourselves and are responsible for it as described in this policy.

Subscriber customer data. Subscribers store records about their own customers in the platform — names, service addresses, phone numbers, emails, service history, invoices. That data belongs to the Subscriber; we process it on the Subscriber's behalf to provide the Service and do not use it for our own purposes. If you are a customer of a business that uses Nytrojen, direct privacy questions or requests about your information to that business — we support Subscribers in fulfilling them, including data export and deletion tools built into the platform.

2. Information we collect

Depending on how you interact with us, we collect:

• Account information — name, email, phone number, business name, and login credentials (passwords are stored only as salted hashes).
• Billing information — subscription and payment records. Card details are collected and stored by our payment processor, Stripe; we never see or store full card numbers.
• Waitlist and contact submissions — the email address and details you submit through forms on nytrojen.com.
• Usage data — pages visited, features used, device and browser information, and IP address, collected through cookies and similar technologies to operate, secure, and improve the Service. Our analytics includes session replay with form inputs masked.
• Support communications — messages you send us for help requests.

3. How we use information

We use the information we collect to provide and operate the Service; authenticate users and secure accounts; process subscription billing; respond to support requests; send service-related communications (such as billing notices and important product updates); understand how the Service is used so we can improve it; and comply with legal obligations. We do not sell personal information.

4. SMS and mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties, except with service providers acting on our behalf solely to deliver the messages you have consented to receive. You may opt out of any SMS at any time by replying STOP.

5. How we share information

We share information only with service providers who help us operate the Service, and only for that purpose. These providers are bound by confidentiality obligations and include: cloud hosting and infrastructure (Vercel), database hosting (Turso), payment processing (Stripe), email delivery (Postmark), SMS delivery (Twilio), mapping and geocoding (Google Maps, Mapbox), product analytics (PostHog), and error monitoring (Sentry).

We may also disclose information when required by law or legal process, to protect the rights, safety, or property of Nytrojen, our Subscribers, or others, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to the transferred data until updated).

6. Data retention

We retain account information for as long as the account is active and as needed to meet legal, tax, and accounting obligations. When a Subscriber cancels, their platform data is retained for 90 days — so they can reactivate or complete an export — and then permanently deleted. Internal audit logs are retained for 90 days. Short-lived authentication records (login attempts, verification codes) are pruned automatically within days.

7. Security

We use administrative and technical safeguards to protect information: encryption in transit (TLS), encrypted storage of sensitive credentials, hashed passwords, role-based access controls, per-Subscriber data isolation, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security — but we work to protect your information and will notify affected parties of a breach as required by law.

8. Your choices and rights

Subscribers can access, correct, and export their account data from within the Service, and can request deletion by contacting us. You can opt out of marketing email using the unsubscribe link in any promotional message; service-related messages (such as billing notices) are sent as long as your account is active. Depending on where you live, you may have additional rights under laws such as the CCPA — including the right to know what personal information we hold about you and to request its deletion. To exercise any of these rights, contact us at support@nytrojen.com; we will verify and respond to requests as required by applicable law.

If you are a customer of a Nytrojen Subscriber, requests about your data should go to that business, which controls it.

9. Children

The Service is for business use and is not directed to children under 13. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision; material changes will be communicated through the Service or by email.

11. Contact

Questions about this Privacy Policy or our data practices can be sent to support@nytrojen.com.