Privacy Policy

1. Who this policy covers

Homeowners — people requesting an estimate through a business’s form.
Customers and their staff — businesses with an ArborUp account, the people who sign in, and the crew members who receive notifications.
Visitors — anyone browsing arborup.app, trying the demo, or requesting a demo.

2. What we collect

If you request an estimate

The kind of service you need (for example, tree removal or storm cleanup).
Where the work is: the address you type, or — only if you allow it — your device’s location, which we convert to a street address using a mapping service and show you to confirm or correct. Sharing your location is optional; you can always type the address instead.
Photos you choose to take or upload.
A voice memo, if you record one, and a written transcript generated automatically from it.
A written description of the job, if you type one.
Your name, phone number, email address (if you provide it), and how you’d like to be contacted.
Technical details sent by your browser, such as browser type and IP address, which we use for security and troubleshooting.

Photos, recordings, and descriptions contain whatever you choose to include — a picture may show your house, and a recording carries your voice. Only send what you’re comfortable sharing with the business.

If you run a business on ArborUp

Business details: name, phone, email, website, tagline, logo, banner image, and brand color. These appear on your public estimate form.
The email addresses of the people who sign in, and the phone numbers and email addresses that receive new-request notifications. For each phone number we keep a consent record: when the opt-in text was sent, when and how the person replied, and whether they later replied STOP.
What you do in the dashboard: status changes, internal notes, and settings.
Sign-in information: a session cookie after you use a sign-in link, and a cookie that remembers which business you’re viewing.
Server logs, including IP address and the pages requested.
Usage analytics in the dashboard — see “Analytics and cookies” below.

If you visit the site or request a demo

What you enter in the demo or contact form — name, company, email, phone, and message. It’s emailed to us and kept as ordinary business correspondence.
Server logs, as above.
Usage analytics on arborup.app’s marketing pages — see “Analytics and cookies” below.
The demo estimate form at /e/demo doesn’t save anything you enter and doesn’t load analytics.

Analytics and cookies

We use Google Analytics on arborup.app’s marketing pages and the admin dashboard to understand how they’re used: pages viewed, how you arrived, browser and device type, approximate location from your IP address, and a random identifier stored in a cookie so repeat visits can be counted. We use it to see what’s working on the site, not to identify you. We don’t turn on its advertising features, and Google may use the data only to provide the service to us. You can block it with your browser’s settings or Google’s opt-out add-on; the site works the same either way.

The estimate forms we host for businesses and the private lead links we send crews don’t load analytics or set analytics cookies. Beyond analytics, we use only the cookies the admin dashboard needs to work: a sign-in session and your current business selection. We don’t use advertising cookies.

3. How we use information

Deliver estimate requests. Save the request and send it to the business — by text or picture message and by email to the people the business designates — with a private, time-limited link to the full request.
Make the request useful. Transcribe voice memos into text, turn device coordinates into a street address, and show photos and a map link in the dashboard and lead view.
Run and secure the service. Sign people in, keep each business’s data separate, detect abuse, fix problems, and keep backups.
Talk with customers and prospects. Respond to demo requests and support questions and send notices about the service.
Improve the product, using aggregated or de-identified information wherever possible.
Meet legal obligations and enforce our Terms of Service.

We don’t use the contents of estimate requests to train AI models, and we don’t use homeowners’ contact information to market anything to them.

4. How we share information

With the business you contacted. The business you requested an estimate from receives everything you submit. From there it’s in their hands, under their own practices; we aren’t responsible for how a business uses your information after we deliver it. Contact the business with questions about its practices.
With the providers who help us run ArborUp. We rely on third-party companies for hosting and infrastructure, database and file storage, authentication (the sign-in emails), email delivery, text and picture messaging, speech-to-text transcription, map and address lookups, and website analytics. Each provider receives only what it needs for its job — the messaging provider gets the notification and the photo it carries, the transcription provider gets the audio, the mapping provider gets coordinates, the analytics provider gets the usage data described above — and may use it only to provide the service to us, not for its own purposes. We may change providers at any time to keep the service running well, which is why this policy mostly describes categories rather than naming each one. You can ask us for the current list.
For legal reasons. When required by law, subpoena, or court order, or to protect the rights, safety, or property of Delineator, our customers, or others.
In a business transfer. If Delineator is involved in a merger, acquisition, or sale of assets, information may transfer as part of that deal. We’ll require the recipient to honor this policy.
At your direction or with your consent.

We do not sell personal information, and we don’t share it with third parties for their own marketing or for targeted advertising.

The above excludes text messaging originator opt-in data and consent: the phone numbers that agreed to receive notification texts, and the record of that consent, will not be shared with any third parties. They are used only to send the notifications described on our text message notifications page.

5. Our role with estimate requests

For estimate requests, the business you contacted decides what’s collected and what happens after delivery; we process that information on the business’s behalf and under its instructions. In data-protection terms, the business is the controller and we are the processor. If you want to access, correct, or delete a request you sent, start with the business — it can ask us to act and we will. You can also contact us directly and we’ll help, including by passing your request along to the business.

6. How we protect information

Photos and recordings are kept in private storage that isn’t publicly reachable and are shown through short-lived signed links.
The links we text and email to crews expire (72 hours by default) and can be revoked. We store only a one-way hash of the link token, not the token itself.
Each business’s data is kept separate, and access is scoped to that business’s users. Delineator’s own access is limited to operating and supporting the service.
Information is encrypted in transit.

No system is perfectly secure, so we can’t guarantee security. We work to keep information safe and will notify affected customers of a breach as the law requires.

7. How long we keep information

Estimate requests (photos, recordings, transcripts, contact details): as long as the business’s account is active, unless the business deletes them or asks us to sooner.
Business account information: for the life of the account.
After an account closes: we make the data available for export for 30 days on request, then delete it within a reasonable period, except for backup copies that expire on their own schedule and records we’re required to keep.
Demo and contact messages: for as long as we have a business reason to keep them.
Server logs: briefly, for security and troubleshooting.

8. Your choices and rights

Sharing your device location is optional — decline and type an address instead. Photos, voice memos, and email are optional too, though photos help the business give you an accurate estimate.
Customers can update business details and notification recipients in settings, and remove anyone who should no longer receive notifications.
Notification texts go only to numbers a business adds and that have replied YES to our opt-in text. To stop them, reply STOP to any message, ask the business to remove you, or contact us. Details at arborup.app/sms.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain uses of it. To exercise these rights, contact us — or, for an estimate request, the business you sent it to. We’ll verify your request and respond as the law requires, and we won’t treat you differently for asking.
For California residents: we don’t sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of.