Privacy Policy

Last updated: 18 July 2026

This policy explains our practices in plain language. It is not legal advice. If you need formal advice about your obligations or ours, please consult an Australian privacy / technology lawyer.

LawnOps ("LawnOps", "we", "us", "our") provides business management software for lawn and garden care operators, including quoting, scheduling, run sheets, invoicing, payments, a lead-generating website, and Find a Mower — a free public business directory (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

This policy applies to:

• Operators — people and businesses who create or are provisioned a LawnOps account;
• Listed businesses — businesses shown on Find a Mower (whether or not they have claimed a listing);
• End Customers — homeowners and other people who submit quote requests or other details through an Operator's LawnOps-powered website, Find a Mower, quote or invoice.

1. Information we collect

Account & business information

• Name, business name, email address, phone number and password (hashed, never stored in plain text) when you create or claim an account.
• Business details you add, such as ABN, address, logo, service area, hours and payment terms.

Customer & job data you enter

• Client names, addresses, phone numbers, email addresses, property details and job notes that Operators enter to run their business.
• Quotes, invoices, job schedules, run sheet records, before/after photos, and payment status.

Lead & website data

• Quote requests submitted by End Customers (name, phone, email, address, service requested, optional intake answers and photos) are stored and delivered to the relevant Operator or marketplace routing flow.

Find a Mower directory listings

Find a Mower is a free Australian business directory of lawn and garden care businesses. For directory listings we may hold:

• Business name, suburb / service area, public phone, public business email, website or listing URL, services offered, and (if available) ABN and related ABR entity details;
• Claim / remove tokens, claim status (e.g. unclaimed, claimed, opted out), and whether the listing is active;
• Provenance metadata such as listing source type (e.g. self-serve list, admin import) and, where recorded, the public source URL we used (the business's own website or another clearly public business listing).

We aim to list business contact details that the business already publishes for customers — not private consumer data, staff home contacts, leaked lists, or purchased consumer marketing lists. We do not sell directory contact lists.

Payment information

• Payments are processed by Stripe. LawnOps does not collect or store full card numbers — Stripe handles card data under its own PCI-compliant systems.

Integration data

• If an Operator connects a third-party service (Google Calendar, Xero, MYOB or QuickBooks), we store the OAuth access/refresh tokens needed to sync data with that account. Tokens are encrypted at rest and used only for the connected feature.

Technical & usage data

• IP address, browser type, device information, pages visited and timestamps, collected for security, rate-limiting, directory analytics (e.g. suburb page views) and diagnosing errors.
• If configured by an Operator's marketing site, Google Analytics and/or Meta Pixel may collect anonymised visitor analytics.

2. How we source directory listings

Listings may be created when:

• A business lists itself via Find a Mower (self-serve);
• A business claims an existing listing using a claim link;
• LawnOps staff add a listing from publicly available business information (for example details published on the business's own website or another public business directory), typically via an admin import that should include a source URL where available.

Being listed does not mean the business applied to join LawnOps, paid us, or endorsed us. Free listing does not remove privacy or spam-law obligations — it means we publish a public business directory entry and give the business easy ways to claim, correct or remove it.

3. How we verify ABNs ("Verified")

• Verified on Find a Mower means we checked the Australian Business Number against the Australian Business Register (ABR) using the official ABN Lookup service (when configured), and the ABN appears valid / active for the purpose of that check.
• Verified is not a paid badge, a quality rating, insurance check, police check, or endorsement of the business's work.
• If ABR lookup is unavailable, we may still store an ABN you provide and show it as unverified until it can be confirmed.

4. How we use information

• To provide, operate and maintain the Service (quoting, scheduling, invoicing, payments, run sheets, websites and Find a Mower).
• To publish and maintain directory listings so homeowners can find local lawn and garden businesses.
• To send transactional and service emails/SMS (e.g. quote/invoice delivery, job reminders, password resets, lead alerts).
• To contact listed businesses about their listing (claim, confirm still active, remove / opt-out, or — where an account exists — account access), identifying ourselves as LawnOps and providing a clear way to stop contact.
• To process subscription billing via Stripe.
• To power optional AI features (e.g. AI-drafted quotes, AI routing, an AI business assistant) using OpenAI's API. Prompts sent to OpenAI are limited to the job/quote context needed and are not used by us to train third-party models.
• To detect, prevent and respond to fraud, abuse and security incidents.
• To comply with legal obligations, including tax and accounting record-keeping.

Under the Australian Privacy Principles, we rely on purposes such as providing the Service you request, our legitimate interests in operating a public B2B directory of publicly available business contact details, and (where required) consent. We limit use to the purposes described in this policy.

5. Emails, SMS and the Spam Act

Some messages we send to businesses (for example "you're listed", "claim your listing", or invitations to use LawnOps) may be commercial electronic messages even when the product is free. When we send those messages we aim to:

• Clearly identify LawnOps as the sender;
• State an honest purpose (directory listing, claim, remove, or account access);
• Use business contact addresses that appear to have been published for customer contact;
• Include a working one-click remove / unsubscribe for listing outreach (and honour opt-outs promptly).

Where a LawnOps login already exists, password-reset or account emails are sent so the account holder can access or secure that login. Preferable practice for newly discovered businesses is: list → invite to claim → the business creates their own account. Self-serve "list my business" flows may create an account when the business submits the form and chooses a password themselves.

6. Who we share information with

We do not sell personal information or directory contact lists. We share data only with service providers who process it on our behalf, and only as needed to deliver the Service:

Directory listing fields shown on Find a Mower (business name, suburb, public contact details, Verified status where applicable) are public by design. We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, property or safety of LawnOps, our users, or the public.

7. Data retention

We retain account and business data for as long as your account is active. If you close your account, we delete or anonymise personal data within a reasonable period, except where we are required to retain records (e.g. financial records for tax purposes, typically 7 years under Australian law).

Opted-out directory listings are deactivated and we stop outreach; we may retain minimal records (e.g. email hash or token status) so we do not re-contact you after you have opted out.

8. Security

We use industry-standard safeguards, including encrypted connections (TLS) between your browser and our servers, hashed passwords, encrypted storage of OAuth tokens, and role-based access controls scoped to each Operator's own organisation. No system is 100% secure, and we cannot guarantee absolute security.

9. Your rights and choices

• Access & correction — Operators can update account and business details in Settings. Listed businesses can claim a listing to edit details, or email us to request a correction.
• Remove listing / opt-out — use the one-click remove link in our directory emails, or contact us. We honour remove requests promptly and stop further listing outreach for that listing.
• Operators: remove hosted website — Operators can take down their LawnOps-hosted website and Find a Mower presence from the Website settings in the app.
• Export — request a copy of your data by contacting us at the address below.
• Deletion — request deletion of your account and associated personal data, subject to legal record-keeping requirements.
• Marketing / directory outreach — you can opt out of listing outreach via remove links; transactional emails required to operate an active account (e.g. password resets you request, invoices) cannot be opted out of while that account is active.

If you are located in the EU/EEA or California, you may have additional rights under the GDPR or CCPA respectively. We honour these rights for all users where reasonably practicable. Australian users may contact the Office of the Australian Information Commissioner (OAIC) about privacy concerns.

10. End Customers of an Operator

If you submitted your details through an Operator's LawnOps website, quote or invoice, that Operator is generally responsible for how they use your information as their customer. LawnOps processes it to deliver the Service. To access, correct or delete your information held by an Operator, please contact the Operator directly; if you're unable to reach them, contact us and we will assist where we can.

11. Cookies

We use essential cookies/local storage to keep you signed in and remember preferences. Operator marketing sites may use analytics cookies (Google Analytics, Meta Pixel) only where the Operator has configured them, for aggregated, anonymised traffic insight.

12. Children's privacy

The Service is intended for business use by adults operating a lawn and garden care business, and for adult homeowners requesting quotes. We do not knowingly collect personal information from children under 16.

13. International data transfers

Our infrastructure providers may process data outside Australia (e.g. the United States). Where this occurs, we rely on providers with appropriate data protection safeguards in place.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where appropriate, we will notify Operators by email.

15. Contact us

Questions about this Privacy Policy, a directory listing, or your data? Contact us at privacy@lawnops.com.au.

Related: Terms of Service · Find a Mower · List or claim