Your information, explained clearly.

Effective July 23, 2026 · California residents

1. Scope and operator

This Policy applies to LandscapeGenie.com, its California C-27 directory and project questionnaire, contractor and administrator portals, lead and call-click records, review workflow, transactional email, and any Landscape Genie text or voice feature that links to this Policy. “Landscape Genie,” “we,” “us,” and “our” mean the service and its operator.

It does not govern a contractor’s independent website, calls, texts, emails, estimates, contracts, or work; CSLB; GraystoneRiskMan.com; insurers; or other sites reached through links. Those parties determine their own privacy practices. Our Terms explain the service relationship in more detail.

2. Information we collect

Information you provide

• Homeowner identifiers and contact details: name, email, phone, project ZIP, optional project address, and notes.
• Project information: selected contractors, project type, questionnaire answers, timing, budget range, property-area information, and other project preferences.
• Contractor and administrator information: contractor email, public phone or address overrides, map coordinates, work preferences, portal status, pause status, support messages, and account activity.
• Review information: homeowner review contact name and phone, rating, review text, display-name preference, before-and-after photos, optional 10–30 second audio, consent attestations, and an optional signed consent-form PDF.
• Communications: messages, questions, support requests, and information you choose to send us.

Information collected automatically

• request time, page path, source page, IP address used for security/rate limiting, browser and server logs, and delivery or error status;
• a bounded session identifier used to reduce duplicate call-click events;
• when a contractor call link is tapped: contractor license, time, page source, and project ZIP when available;
• authentication cookies, challenge state, session timestamps, and security audit information;
• transactional-email metadata such as recipient, message identifier, acceptance, delivery, bounce, or complaint status; we disable marketing open tracking and tracked-link rewriting in our configured transactional email service.

A call-click record does not tell us whether a call connected, its duration, or what was said. Landscape Genie does not record an ordinary click-to-call conversation.

Public and third-party sources

Contractor records begin with public CSLB data. Administrators and contractors may supply corrections or supplemental public contact details. OpenStreetMap/Nominatim or another configured mapping provider may return map tiles, matched addresses, or coordinates. Transactional email and communications providers return delivery and abuse-prevention events.

3. California categories of personal information

Depending on how you use the service, we may collect categories described by California law: identifiers; customer-record/contact information; commercial or project information; internet or network activity; approximate location or a project street address you provide; audio and visual content; professional or licensing information; and inferences such as project or work-type preferences. Authentication information and an exact project address may be treated as sensitive personal information. We use sensitive information only for the service, security, and other purposes permitted by law—not to infer unrelated characteristics.

We do not ask for government identification numbers, financial-account credentials, precise medical information, racial or ethnic origin, religious beliefs, sexual orientation, union membership, or message contents unrelated to a landscape project. Please do not place unnecessary sensitive information in a free-text field.

4. Why we use information

• rank and display California C-27 directory records based on a project ZIP and disclosed featured placement;
• validate and send a project request to up to four selected contractors or an administrative fallback inbox;
• email a homeowner receipt with the project reference, summary, and selected profile links;
• send contractor-entered start-date and completion notices and provide a secure homeowner project timeline;
• operate contractor and administrator authentication, preferences, lead workflow, reminders, and support;
• record call-button intent and show it only to the associated contractor and administrator;
• verify, moderate, publish, and remove reviews and approved media;
• geocode an administrator-entered contractor business address and display map results;
• prevent duplicate submissions, spam, fraud, unauthorized access, abuse, and security incidents;
• debug, maintain, back up, audit, and improve reliability and accessibility;
• comply with law, enforce our Terms, and establish or defend legal claims.

5. When and to whom information is disclosed

Selected contractors

We disclose a submitted homeowner’s contact details and project information only to the specifically selected contractor records, subject to their delivery settings, or to the Landscape Genie administrative inbox when direct delivery is unavailable. Contractors become independent recipients and must use the information only to respond to that project and comply with applicable privacy and communications law.

Service providers

We disclose only what is reasonably needed to vendors that host or secure the service, deliver email, provide mapping/geocoding, back up data, monitor availability, or transmit communications. Current or contemplated categories include Postmark for transactional email; Twilio for SMS/voice where enabled; OpenStreetMap tile services and Nominatim for mapping/geocoding; network and server-hosting providers; and professional security, legal, or technical support. These providers may process IP addresses, routing data, message content, recipient details, device data, and delivery metadata as needed to provide and protect their services.

Legal, safety, and business events

We may disclose information when reasonably necessary to comply with lawful process, protect a person or the service, investigate abuse or fraud, enforce agreements, obtain professional advice, or complete a financing, reorganization, sale, or transfer. A successor must honor this Policy for information collected under it unless it gives legally required notice and choice.

6. Calls, texts, Twilio, and communication choices

The project-request consent authorizes each contractor named beside the checkbox to contact the homeowner separately about that project. Landscape Genie provides the introduction; each contractor controls its later communications and opt-out handling. Reply STOP to the contractor that sent a text, and contact that contractor for access or deletion of messages it independently retains.

Where Landscape Genie separately offers SMS or voice features, Twilio or another provider may process phone numbers, message or call content, routing details, date, time, duration, delivery status, IP/device data, and abuse-prevention signals. Twilio states that it may collect or monitor United States and Canadian message content to detect spam, fraud, and policy violations. Landscape Genie records the opt-in source and honors STOP, CANCEL, END, QUIT, UNSUBSCRIBE, OPTOUT, and similar reasonable revocation requests. Reply HELP or contact us for assistance. Message and data rates may apply; frequency varies; carriers are not liable for delayed or undelivered messages. We may send one final opt-out confirmation.

We do not treat a project email address or phone number as consent to unrelated promotional text messages. A future marketing program would require its own clear opt-in and updated disclosures.

7. Reviews, photos, recordings, and consent

A homeowner may use the lead reference and original project email to create a short-lived signed session, view milestone and public-contact information for contractors connected to that request, and submit feedback after a contractor marks work finished. A contractor may also submit a completed-project review request with homeowner contact information and project photos. Pending content is private to the associated homeowner session, contractor, and administrators. An administrator confirms rating, review text, display name, image publication, and any recording/publication permission. Approved review text, rating, chosen display name, and approved images become public on the contractor profile. Rejected and pending content is not public.

Audio is optional, never plays automatically, and is published only after approval. California generally requires all parties to consent before recording a confidential communication. We require consent before recording and separate permission to publish. A signed consent PDF may be stored privately for the audit record and is never shown on a public profile. A review can be approved without audio or a consent PDF. A homeowner self-recorded clip must contain only that homeowner’s voice and may not record an ordinary telephone call or another person. The session cookie is HTTP-only and expires automatically.

An administrator may permanently delete a review and associated photos, audio, and consent PDF. Associated lead data can then be deleted from the active portal record. Deletion cannot retract email already delivered to a recipient or immediately remove a copy from a time-limited backup.

8. AI-assisted and automated processing

Where enabled, rules or AI-assisted tools may help classify project answers, rank records, summarize information, draft communications, detect abuse, or assist content moderation. We use human administrator review for publication, suspensions, and other material portal actions. Automated output may be inaccurate and is not legal, contracting, licensing, safety, engineering, financial, or insurance advice.

We do not use homeowner project content to train public, general-purpose AI models unless we first provide additional notice and obtain any consent required by law. We do not use AI to make final decisions about insurance, credit, employment, legal rights, or access to essential services.

9. Cookies, local storage, maps, and browser privacy signals

The public directory does not require an advertising cookie. Protected portals use signed, HTTP-only cookies for short-lived authentication. The browser may use session storage for a random, bounded call-click identifier that reduces duplicate events and is cleared with the browser session. Map tiles load from the configured map provider, which receives ordinary connection information such as the requesting IP address and browser headers.

We do not currently respond differently to a legacy “Do Not Track” header because no uniform standard governs it. We recognize legally required opt-out preference signals, including Global Privacy Control where applicable. Because we do not sell or share personal information for cross-context behavioral advertising, honoring such a signal does not change that practice.

10. Retention and deletion criteria

• Verification codes: expire after 10 minutes and are stored only in protected, non-readable verification form.
• Portal sessions: administrator sessions expire after 8 hours and contractor sessions after 12 hours, unless ended earlier.
• Lead, call-click, workflow, support, and review records: retained while needed to provide the portals, document delivery and consent, resolve disputes, prevent abuse, or satisfy legal obligations, and until removed through administrator action or an approved request.
• Published reviews: retained while the contractor profile and approved review remain active, unless removed sooner.
• Security and provider logs: retained according to operational need and provider settings.
• Backups: encrypted/restricted operational backups are scheduled with a rolling 30-day server retention; deleted active data may remain in those backups until rotation.

We apply the shortest period reasonably consistent with the stated purpose, legal requirements, security, and dispute resolution. We may de-identify information so it can no longer reasonably be linked to a person and retain that de-identified information, subject to a commitment not to re-identify it.

11. Security

Measures include HTTPS, restricted server permissions, separation of public and private review media, signed session cookies, hashed one-time codes, rate limits, authenticated administrator and contractor portals, transactional-delivery authentication, backups, monitoring, and audit records. No internet service is perfectly secure. Do not send sensitive identity documents by ordinary email. Contact us promptly if you suspect unauthorized access.

12. California privacy rights

When the California Consumer Privacy Act applies, a California resident may request to know the categories and specific pieces of personal information collected; learn the sources, purposes, and recipient categories; delete information subject to exceptions; correct inaccurate information; opt out of sale or sharing; limit certain sensitive-information uses; and receive equal service without retaliation for exercising a right. Even when a statutory threshold or exception applies, we will make reasonable efforts to address verified access, correction, and deletion requests.

How to submit a request

Email admin@landscapegenie.com with the subject “California Privacy Request,” or call (619) 761-1113. Describe whether you seek access, correction, deletion, an opt-out, or another action. Include the project reference or contractor license when available, but do not send identity documents until we provide a secure method.

We will verify a request by matching information already associated with the record and may request additional limited information when needed. An authorized agent may submit a request with proof of authority; we may also confirm the request directly with the resident. We will respond within the time required by applicable law and explain any lawful exception. To appeal or question a response, reply to the decision email with “Appeal” in the subject.

13. Children

The service is for adults and is not directed to children under 13. We do not knowingly collect personal information from a child under 13 or knowingly sell or share information of anyone under 16. Contact us to request removal if you believe a child submitted information.

14. Changes to this Policy

We may update this Policy prospectively as the service or law changes. We will change the effective date and provide prominent notice before a material change that uses previously collected information in a materially different way. We will not make a materially retroactive change without the notice and choice required by law.

15. Contact

Privacy questions, requests, accessibility needs, or complaints may be directed to admin@landscapegenie.com or (619) 761-1113. You may also review California privacy resources published by the California Privacy Protection Agency.