Data Processing Statement

When a homeowner uses your Mowify widget, they give you their address and contact details. You decide why that data is collected and what happens next — you are the data controller. Mowify only measures the property, prices it with your rules and stores the result for you — we are your data processor. We never sell homeowner data, never market to your customers and never use your customer list for our own purposes.

• Homeowner data (address, coordinates, lawn polygon, area, quote, name, email, phone): the lawn-care business is controller; Mowify is processor.
• Business account data (your login, company details, pricing rules, billing): Mowify is controller.

This statement, together with our Terms, forms the written processing agreement required by Article 28 UK GDPR. If your own clients require a countersigned DPA, email rroruman@gmail.com and we will provide one.

• Subject matter: measuring a residential lawn from aerial imagery and producing a price.
• Duration: for as long as your Mowify account is active, plus up to 30 days of backups.
• Nature and purpose: storage, geospatial computation, automated image analysis, quote generation and quote emails.
• Data subjects: UK homeowners and prospective customers who request a quote from you.
• Categories of data: property address and coordinates, aerial measurements, contact details, quote amounts. No special category data, and Mowify asks for no payment details from homeowners.

• We process homeowner data only on your documented instructions — using the product is that instruction.
• Everyone with access is bound by confidentiality, and access is limited to what support requires.
• Data is encrypted in transit (TLS) and at rest, with row-level isolation so no company can read another company's data.
• We assist you with data subject requests, security incidents and impact assessments.
• We notify you without undue delay if we become aware of a personal data breach affecting your data.
• On termination we delete your data on request, or after account deletion.

• Supabase — database, authentication and storage (EU region).
• Cloudflare — application hosting and delivery.
• Stripe — subscription billing for business accounts only (no homeowner data).
• Aerial imagery and address providers — receive a coordinate or address string to return imagery or a match; they do not receive homeowner contact details.
• Google (Gemini via Lovable AI) — analyses the aerial image tile to outline grass. The tile contains no name, email or phone number.
• Email delivery provider — delivers quote and notification emails.

We tell you before adding a new sub-processor that handles homeowner data, and you may object.

Data is stored in the UK/EU. Where a sub-processor processes data outside the UK, transfers rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

Deletion is self-serve and documented. In order of scope:

• One customer or quote: delete it from Leads or Customers in your dashboard. The customer record, quote and its measurement are removed immediately.
• Everything for your company: Account → Delete account removes your login and, if you are the only member, your company with all quotes, customers, properties and measurements. This is immediate and irreversible.
• A homeowner's request to you: you can action it yourself in the dashboard. If you need our help, email rroruman@gmail.com with the postcode and we will action it within 30 days and confirm in writing.
• Backups: deleted data disappears from encrypted rolling backups within 30 days.
• Records we must keep: invoices and payment records are retained for six years for UK tax purposes. These contain business, not homeowner, data.

You can also take a full copy of everything we hold at any time: Account → Export my data returns a machine- readable JSON file covering your company, customers, quotes, measurements and email log.

Data protection questions and requests: rroruman@gmail.com. You may also complain to the UK Information Commissioner's Office.