Seed & Mow · Legal
California Privacy Notice
California privacy rights and how they relate to the service.
1. When this notice applies
This notice supplements the Privacy Policy for California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Seed & Mow. California residence alone does not determine whether a business is covered. The operator’s coverage and any voluntary rights offering have not yet been determined.
The operator, effective date and working request methods have not been confirmed. Actual practices over the preceding 12 months have also not been confirmed.
2. Categories, sources, purposes, and disclosures
The following is the current code-based inventory to reconcile against actual operations for the preceding 12 months. Information comes from you, your device and use of the service, and supporting providers. Business purposes include providing accounts and lawn features, processing requested AI responses, support, measurement, security, and meeting legal obligations.
- Identifiers and account/contact information: names, email addresses, account/session identifiers, and network identifiers. Recipients include Base44 and its relevant hosting, authentication, and security providers.
- Internet or electronic activity: feature/page events, completion/save events, technical logs, and browser/session context. Recipients include Base44 and its relevant service providers. Google Analytics and replay tools are planned and require a separate final configuration audit.
- Approximate location and lawn information: an optional city or region, property/lawn names, conditions, care history, and details you enter. Recipients include Base44 and AI-processing providers when the information is included in a requested coaching interaction.
- Visual information: optional lawn photos and associated technical records, for features available to you. Guest photos use Base44 private storage and native AI processing. Account photos, including saved guest copies, use AWS storage/delivery. Base44 and downstream AI providers process images when a supported analysis is requested.
- Inferences and user content: messages, responses, saved plans, and inferred lawn conditions. Recipients include the service providers needed to operate the feature.
- Sensitive personal information: account authentication information may fall within the legal definition. Free text or photos could also contain sensitive information you voluntarily include. The reviewed onboarding does not request precise location, government identifiers, health details, or payment-card information. Platform collection and any use that triggers a right to limit still need review.
- Commercial information: no active paid-product or subscription collection was established in this source review. Historical transactions, affiliate activity and support records still need to be reconciled with the actual business record.
3. Sale, sharing, and sensitive information
The preceding-12-month sale/sharing assessment is not complete. Whether personal information has been sold or shared, and the relevant recipient categories, have not been verified. This page does not provide a working opt-out control.
Providing information to a vendor can have different legal consequences depending on the contract, settings, and permitted use. Planned analytics, advertising, affiliate attribution, and recordings must be assessed before activation.
The review must also establish how any sensitive personal information is used, whether a right-to-limit notice or control is required, and the applicable handling of information about people under 16. No unverified exception or age policy is assumed here.
4. Your CCPA rights, where applicable
An authorized agent may make a request on your behalf, subject to permitted proof of authority and verification. An opt-out of sale or sharing must not require creating an account or identity verification.
- Know and access: request the categories and specific pieces of personal information collected about you, sources, purposes, and relevant recipient categories, and receive a portable copy where required.
- Delete: request deletion of covered personal information, subject to legal exceptions.
- Correct: request correction of inaccurate personal information.
- Opt out: direct a covered business to stop selling or sharing your personal information, where those activities occur.
- Limit: restrict certain uses and disclosures of sensitive personal information when that right applies.
- Non-discrimination: exercise your rights without unlawful discriminatory treatment.
5. Submitting and verifying a request
Email [email protected] to make a privacy request. Identify the relevant account or interaction and the right you want to exercise, without passwords or payment-card details. Reading this page or opening the email link does not send a request. Any additional required request methods and the end-to-end request process are still being reviewed.
For access, deletion, and correction requests, we may verify your identity using information reasonably related to the request and already held where possible. We will use verification information only for an appropriate verification and security purpose.
For covered CCPA requests, receipt of a request to know, delete or correct generally must be acknowledged within 10 business days, with a substantive response within 45 calendar days. A permitted extension can add up to 45 days with notice. Applicable opt-out and limit requests must be honored as soon as feasible and within 15 business days. These are conditional legal requirements to implement, not a claim that the unfinished request workflow currently meets them.
If a legal exception limits what can be deleted or disclosed, the response should explain the applicable reason. A refusal or limitation must not be disguised as successful deletion.
6. Global Privacy Control and choices
Where required, a valid opt-out preference signal such as Global Privacy Control must be processed as an opt-out of sale or sharing. A browser signal is not the same as a request to delete an account.
Signal detection, account association where applicable, downstream provider handling and revisit behavior still need implementation and testing. The Privacy Choices page describes the current limits; it does not record or confirm an opt-out.
7. Contact and updates
For privacy questions or requests, email [email protected]. The legal operator and any required postal contact are still being confirmed. No effective date is set. Where CCPA policy requirements apply, the required disclosures must be reviewed and updated at least annually and when material practices change.