Effective date: August 2, 2026
Last updated: August 2, 2026
This Data Processing Addendum ("DPA") is part of the Terms of Service between you ("Customer") and LawnProSoftware.com LLC ("LawnPro"). It applies automatically when you use the Service, and you do not need to sign anything for it to take effect. If you need a countersigned copy for your records, email support@lawnprosoftware.com.
When you use LawnPro, you put personal information into the Service about your own customers and employees: names, addresses, phone numbers, email addresses, service and job history, invoices and payment records, notes, and photos. We call that "Customer Personal Data."
This DPA describes how we handle Customer Personal Data on your behalf. It does not cover information we collect about you as our own customer, such as your billing details and how you use the Service; that is described in our Privacy Policy.
You are the controller of Customer Personal Data, or, under United States state privacy laws, the business. You decide what data to collect, why, and what to do with it.
We are the processor, or the service provider, and we act on your behalf. We handle Customer Personal Data only to provide the Service to you and only on your documented instructions. Your use of the Service, together with the Terms of Service and this DPA, constitutes those instructions.
You are responsible for having a lawful basis to collect the data you put into LawnPro, for giving the required notices to the people it relates to, and for making sure your instructions to us comply with applicable law.
We will process Customer Personal Data only to deliver, secure, support, and maintain the Service for you, and to comply with law.
We will not sell Customer Personal Data. We will not share it for cross-context behavioral advertising. We will not use it for our own commercial purposes, and we will not combine it with data from other sources except as permitted by applicable law to deliver the Service.
If we are required by law to process Customer Personal Data in a way that goes beyond your instructions, we will tell you first, unless the law prohibits us from doing so.
We may create and use aggregated and de-identified data that cannot reasonably be linked to you or to any individual, to operate and improve the Service.
We limit access to Customer Personal Data to personnel who need it to do their jobs, and everyone with access is bound by confidentiality obligations.
We maintain administrative, technical, and physical safeguards designed to protect Customer Personal Data against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit, access controls and authentication, tokenization of stored payment cards through a specialist provider, monitoring and logging, and regular application updates.
You are responsible for the parts of security within your control: keeping credentials confidential, managing which of your employees have access, removing access when someone leaves, and securing your own devices and networks.
You grant us general authorization to engage subprocessors to help deliver the Service. We enter into a written agreement with each subprocessor imposing data protection obligations consistent with the commitments in this DPA, and we remain responsible to you for their performance.
We will provide you with a current list of our subprocessors on reasonable request. Email support@lawnprosoftware.com and we will send it to you.
We will tell you about the addition or replacement of a subprocessor, and you may reasonably object to the change. If you do, we will work with you in good faith to resolve the objection. To be notified of subprocessor changes, ask us to add you to the notification list at the address above.
Payment processors and their sponsoring financial institutions act as independent controllers of payment and identity data for their own legal, regulatory, and card network obligations. That processing is governed by their own agreements with you, not by this DPA. The payment processors we currently use are named in Section 6 of the Terms of Service.
If one of your customers asks to see, correct, delete, or receive a copy of their personal information, that request is yours to answer. The Service gives you the tools to find, edit, export, and delete records yourself.
If a request comes to us directly, we will not respond to it substantively. We will tell the person to contact you, and we will let you know we received it, unless the law prohibits us from doing so.
If you need help responding and cannot do it through the Service, contact us and we will provide reasonable assistance.
If we become aware of a breach of security leading to the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of or access to Customer Personal Data in our systems, we will notify you without undue delay.
Our notice will describe what we know about the nature of the incident, the categories and approximate volume of data involved, the likely consequences, and the steps we are taking. We will provide further information as our investigation progresses and will reasonably cooperate with you in meeting any notification obligations you have.
Notifying you is not an admission of fault or liability.
While your account is active, you can export your data from the Service at any time. Please export anything you want to keep before you cancel.
After your account is cancelled or terminated, you may ask us in writing to delete Customer Personal Data, and we will do so within a reasonable period. We may keep data where the law requires it, where we need it to resolve a dispute or enforce our agreements, and in routine backups until those backups expire on their normal schedule. Data retained in backups remains protected by this DPA.
On reasonable written request, and no more than once a year unless a regulator or a security incident requires otherwise, we will provide the information reasonably necessary to demonstrate our compliance with this DPA. We may satisfy a request with written responses, documentation of our security practices, or a third-party report where one is available.
We are based in the United States and we process and store Customer Personal Data in the United States. If you transfer personal information to us from outside the United States, you are responsible for ensuring the transfer complies with the law that applies to you, and we will reasonably cooperate in putting any required transfer mechanism in place.
Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, or a comparable state privacy law applies, we act as your service provider or processor. We are prohibited from, and will not, sell or share Customer Personal Data, retain or use it outside the direct business relationship between us, or use it for any purpose other than the business purposes you have specified. We certify that we understand and will comply with these restrictions.
If this DPA conflicts with the Terms of Service on the handling of Customer Personal Data, this DPA controls. On everything else, the Terms of Service control.
Each party's liability under this DPA is subject to the limitations and exclusions in Section 14 of the Terms of Service.
LawnProSoftware.com LLC
497 Sutton Bridge Rd
Rainbow City, AL 35906
Email: support@lawnprosoftware.com
Phone: 205-369-7052