GrowSheet Privacy Policy

Effective date: upon publication · Last updated: July 12, 2026

This Privacy Policy explains how ARDEO LABS LLC ("we," "us") handles information in connection with GrowSheet — our apps, website, and share pages (the "Service"). It is part of, and should be read with, our Terms of Service.

1. Who this covers

GrowSheet is a business tool used by wholesale nurseries. If you are a grower with an account, this policy describes how we handle your data. If you are a buyer who submitted an order request or subscribed to a grower's list, the grower is the controller of that relationship; we process your information on their behalf as described in "Buyer information" below.

2. What we collect

• Account data: your name, email, nursery name, and team roles.
• Business content: catalog, lots, counts, capture photos, availability lists, orders, invoices, statements, and the buyer contact details you enter or accept.
• Capture photos: photos you take of your crop, which are processed (including by our AI provider) to draft counts and sizes you then confirm. When you publish an availability list, its featured crop photo is served from a public web address as part of that list's page and PDF; your other photos stay private to your business.
• Usage and device data: app and page interactions, device and log information, collected to run and improve the Service (product analytics via PostHog; crash and error diagnostics via Sentry, configured not to send personal information). Usage events are keyed to a pseudonymous account identifier, which is linkable to your account but carries no buyer information. Where website session replay is enabled, all form inputs are masked.
• Billing data: handled by our payment processor (Stripe); we do not store card numbers.

3. How we use it

To provide and secure the Service; to draft counts from your photos (with your review); to render and serve the pages you publish; to process billing; to send you service and, where you opt in, product messages; to detect abuse; and to comply with law. We do not use your content to train AI models, and we do not sell your data.

Buyer-facing email (availability broadcasts) and the transactional mail the Service requires are delivered by Resend. Push notifications go to a grower's own devices only — buyers never receive push. We protect the public order form from spam and abuse using Cloudflare Turnstile; the challenge sends the visitor's IP address to Cloudflare for verification, and we do not log or store the IP addresses of buyers who submit requests.

4. AI processing

When you use capture features, the relevant photos are sent to our AI provider to generate suggested counts, container sizes, and ready-states. The output is a suggestion you confirm; GrowSheet does not identify or appraise plants. We send only what is needed for the feature and under contractual confidentiality.

5. Buyer information

When a buyer submits an order request, their contact details are quarantined and revealed to the grower only when the grower accepts the request. When a buyer subscribes to a grower's availability list, we store their email to deliver that grower's list and process one-click unsubscribes and delivery complaints. Suppression of an unsubscribed or bounced address survives re-subscribe attempts. Buyers do not have GrowSheet accounts.

6. Published pages and links

When you publish an availability list, or share an invoice or statement, GrowSheet serves it at an unguessable link, along with its PDF and (for availability) CSV. Anyone who has that link can view that page — the items, container sizes, quantities, prices, your business details, and, for invoices and statements, the buyer's name and the amounts. Treat these links like the documents themselves. You control who receives them, and you can regenerate a link at any time, which revokes the old one.

7. Where your data lives

Data is stored with Supabase (PostgreSQL and file storage) in the United States, encrypted in transit (TLS) and at rest. Access in our systems is enforced by row-level security scoped to your organization; buyer contact details for pending requests are additionally locked so that no end-user role can read them at all (see "Buyer information" above). Capture photos live in a private bucket and are shown to you through short-lived signed links. Published pages, PDFs, and CSVs are served from our site infrastructure (Fly.io, US region). A working copy of your business data also lives on your own device for offline use; deleting the app removes it.

8. Sharing and subprocessors

We share data with service providers who help us run the Service, under contracts that limit their use to providing those services. We may disclose information to comply with law or protect rights and safety, and in connection with a merger or acquisition (with notice where required). We do not sell personal information.

Each provider processes data only as needed to provide its service to us, under its own contractual data-protection commitments.

9. Retention and deletion

We keep your data while your account is active. When you delete your business, it is scheduled for permanent deletion after a 7-day grace window (so a mistake isn't forever) and fully removed within 30 days of your request, except records we must retain for tax, accounting, or legal reasons (for example, subscription payment records). Backups age out on a rolling schedule of no more than 30 additional days. Export is available for free at any time (JSON and CSV) and survives cancellation; the export file contains your records, and photo files are not bundled into it.

One deliberate exception: an unsubscribed, bounced, or complained buyer email stays on our suppression list indefinitely. Keeping it is what lets us guarantee we never mail that address again; it is used for nothing else.

10. Your choices and rights

• Access & portability: export everything from Settings → Export my data.
• Correction: edit your content in the app.
• Deletion: delete your business from Settings → Delete account (7-day grace, then permanent), or email us and we'll do it.
• Marketing opt-out: one-click unsubscribe in every non-transactional email, plus in-app controls for the weekly digest and push notifications.
• State privacy rights: depending on where you live (e.g., California, Colorado, Virginia, Florida), you may have statutory rights to access, delete, correct, or obtain a copy of your personal information, and to non-discrimination for exercising them. We honor these requests for everyone, resident or not. We do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA.

To exercise any right: [email protected]. We verify requests via your account email and respond within the time required by applicable law (generally 45 days). If you're a buyer without an account, tell us the grower and the email address you used.

11. Security

We use industry-standard measures — row-level security on every table, tenant isolation, pending buyer contact details readable by no end-user role, encryption in transit and at rest, short-lived signed links for private photos, and no card data in our systems — to protect your data. No system is perfectly secure, but we work to protect your information and to notify you of material incidents as required by law.

12. Children

The Service is for businesses and is not directed to children under 18; we do not knowingly collect their data.

13. Changes

We may update this policy; material changes will be announced in the app or by email. Continued use after the effective date is acceptance.

14. Contact

Questions about privacy? Email [email protected]. The data controller is ARDEO LABS LLC, a Florida limited liability company.