Zippy Lawnz · Zippy Lawn Mapping
Security
What we collect, and what we don't
To map a lawn we need an address and the outline you draw or walk. If you save it, we keep your name, email and phone from your sign-in, any photos you choose to upload, and the questions you ask the chat assistant. Location is used only while you are walking a perimeter or taking a signal reading, never in the background. We do not collect or store card numbers: nothing is charged inside the tool, and payment happens on an invoice or in our store.
Where it lives
- Identity — Clerk handles sign-in, passwords and sessions. We never see or store your password.
- Maps, reports and account data — a Neon Postgres database in the United States, encrypted at rest.
- Photos — Cloudflare R2 object storage.
- The app and this site — Cloudflare Pages. The API — Railway.
- Email — Resend. Mapping — Google Maps. Chat assistant — Anthropic, given your site profile as context and nothing more.
Each service receives only what it needs to do its job. The full list is also in our Privacy Policy.
In transit and at rest
Everything travels over HTTPS, and both the app and this site tell browsers to insist on it (HSTS). Browser-side protections stop our pages from being framed by other sites or having their content re-read as something it isn't. Sign-in tokens are short-lived and verified on every request.
Who on our team can see what
Access is by role. Sales staff see the leads in their own territory; the business owner alone can grant roles. Installer partners see only the customers they brought or mapped. Every gated request is checked on the server, never just hidden in the interface.
Signed proposals
When you accept a proposal, we record the time, whether you drew or typed your signature, the network address and device the signature came from, and a SHA-256 fingerprint of the exact document you saw. A later edit can never be mistaken for what you agreed to, the printed copy carries the record, and you receive a signed copy by email.
Abuse protection
Every request is validated before it is handled, every route is rate-limited, uploads are checked by their content rather than their label, and the services we pay per call have their own budgets. When a limit closes it says so in plain words and reopens on its own.
Your controls
- Map a lawn without an account — nothing is saved until you sign up.
- Delete a saved map any time from your dashboard.
- Delete your account and everything under it from My Zippy → My account. It's immediate.
- Every marketing email carries an unsubscribe link; emails about your own account, map or proposal are separate.
Reporting a security issue
If you find a vulnerability, please tell us before telling anyone else: [email protected], or call or text 410-725-7500. Our security.txt carries the same details in the standard format. We acknowledge reports within two business days, keep you informed while we fix the issue, and will not pursue researchers who act in good faith — who avoid accessing other people's data, changing or destroying anything, and disrupting the service — while they help us.