Privacy Policy
Effective date: 2 August 2026 Last updated: 2 August 2026
Nine Yards is built and operated by one person in Southern California, United States. Contact: dan@getnineyards.com
This policy explains what Nine Yards collects, why, who sees it, and what you can ask for. It is written in plain English on purpose.
1. Who this covers
- You, the subscriber — the person or company that signs up for a Nine Yards account.
- Your end customers — homeowners and businesses whose names, phones, addresses, gate codes, job notes, prices and bills you store in the app.
- Your crew — people who open day sheets and related links you send them. They do not create Nine Yards accounts.
- Website visitors — people who load getnineyards.com without signing up.
If you put someone else's information into Nine Yards, you are responsible for having a lawful reason to do so — for example, they hired you for lawn or landscape work.
Your customers' data belongs to you, not to us. For the information you enter about your own customers, you decide what is collected and why; Nine Yards holds and processes it on your behalf so the product works.
2. What Nine Yards is
Software for small lawn and landscape companies. It can include a company website and price form, a customer book, prices and acceptance links, bills and card payment links, scheduling and repeat jobs, and crew day sheets in English and Spanish.
Card payments are processed by Stripe. Nine Yards never sees or stores full card numbers.
3. Information we collect
3.1 Account and billing
- Company name, your name, email, and password
- Your password is stored using Argon2, a one-way hash. It cannot be read back, by us or by anyone with a copy of the database.
- Plan selection and subscription status
- Stripe customer and subscription identifiers, and payment status. Card details stay with Stripe.
- Anything you send us by email for support
3.2 Business data you enter
Whatever you choose to put in the product, which may include customer and property details (name, phone, address, gate codes, notes), job descriptions, prices, accept and decline outcomes, bills, payment status, schedule and day-sheet content, and the content of your public company website.
3.3 Share-link activity
Crew day sheets, price links and bill links open with secret URLs rather than logins. Our web server keeps standard request logs — time, IP address, browser type — as any web server does, which we use to run the service and investigate abuse. People who open your links are not asked to create an account and are not tracked across other sites.
3.4 Technical and security logs
IP address, browser and device type, timestamps, and login attempts including failed ones. These exist to keep the service up and to detect attacks.
3.5 The marketing site
The public pages at getnineyards.com run no analytics, no advertising pixels, and no third-party trackers of any kind. There is no Google Analytics, no Facebook pixel, and no tag manager. The site uses no cookies at all; the product itself sets a single session cookie so you stay signed in. If that ever changes, this section will name what was added.
3.6 What we deliberately do not collect
- Full payment card numbers — Stripe handles those
- Government ID numbers, unless you type one into a free-text notes field, which you should not do
- GPS tracking of crew phones
4. How we use information
To provide and operate the product, authenticate you and protect accounts from abuse, process subscriptions and show payment status, generate share links, host your company website and lead form, answer support requests, maintain security and debug outages, and meet legal obligations.
We do not sell your customer list. We do not sell or share personal information. We do not rent or trade data for advertising. No part of this business is funded by advertising.
5. Who we share information with
Only what is needed to run the service:
| Recipient | Why |
|---|---|
| Stripe | Subscription billing, and card payments your customers make on bills |
| DigitalOcean | Application and database hosting, San Francisco, United States |
| Twilio | Only for text messaging features, and only once you switch them on and use them |
| Professional advisors | An accountant or lawyer, only if needed and under confidentiality |
| Authorities | When required by law or valid legal process, or to protect rights and safety |
There is no email marketing provider, no CRM, no analytics vendor, and no advertising network in this list, because the product does not use any.
Your end customers and crew see only what you put on the links you send them. That is you sharing with them, not us selling anything.
Service providers are not permitted to use your content for their own marketing.
6. How your data is stored and protected
- Data lives in PostgreSQL, hosted in the United States.
- Tenant isolation uses PostgreSQL row-level security, enforced by the database itself rather than only by application code. One company's rows are not reachable from another company's session even if the application has a bug.
- Passwords are hashed with Argon2.
- All traffic uses HTTPS, with HSTS.
- The site sends a strict Content Security Policy and related browser security headers.
- Card data is handled entirely by Stripe.
No method of storage or transmission is perfectly secure. If we learn of a breach affecting you, we will tell you as promptly as practical and as required by law.
A note on gate codes. Access codes and lockbox instructions are the most sensitive thing in the system. Store only what the crew actually needs, and remember that what you enter can appear on the day-sheet links you send.
7. Share links
Some features work without a login, by secret link. Treat those links like keys:
- Anyone holding the link can open what it points to, until the underlying record changes or the link is revoked.
- Do not post them publicly, and take care when forwarding.
- Email dan@getnineyards.com if a link leaks and needs replacing.
- Share pages tell search engines not to index them. That reduces the risk of a leaked link being found, but it does not eliminate it.
8. How long we keep it
- While you subscribe — we keep your account and business data so the product works.
- If you stop paying — the app switches off, but your data is not immediately deleted out from under you. Email us for an export or a deletion.
- After a deletion request — we delete or anonymise personal data within about 30 days, except records we must keep for tax, dispute, or legal reasons.
- Backups — deleted data may persist in backups for a limited rotation period before ageing out.
- Logs — kept only as long as useful for operations and abuse investigation.
9. Your choices and rights
You can access and update most business data inside the app, request a full export by email (same day where practical), request deletion of your account and personal data, cancel your subscription at any time, and change your password.
Depending on where you live you may also have rights to correct data, object to or restrict certain processing, or appeal a refusal. Email dan@getnineyards.com with the subject line "Privacy request." We may need to verify it is really you.
We will not treat you worse for exercising any of these rights.
California residents may use an authorised agent; we will take reasonable steps to verify both the agent and you.
10. California and other U.S. state privacy notices
Nine Yards is a one-person business providing B2B software.
Categories collected: identifiers (name, email, phone, IP); commercial information (plan, bills); customer records you enter; internet activity (server logs); geolocation only where it appears in addresses you type.
Sources: you; your end customers through forms and links you enable; automatic server logs; Stripe for payment status.
Disclosure: to the service providers listed in Section 5, for business purposes only.
We do not "sell" personal information, and we do not "share" it for cross-context behavioural advertising, as those terms are used in the CCPA and CPRA. We do not profile anyone for ads. Sensitive information you store, such as access codes, is used only to provide the service you asked for.
11. Children
Nine Yards is for businesses. We do not knowingly collect personal information from children. If you believe a child provided data, contact us and we will delete it.
12. Where your data lives
The service is built in the United States for U.S. lawn and landscape crews, and is hosted in the United States. If you use it from another country, your information will be processed in the U.S., which may have different data-protection rules than where you live.
13. Changes to this policy
If we make material changes we will update the date at the top of this page and, where appropriate, email the account address on file. Continuing to use the service after a change means you accept the updated policy, except where the law requires otherwise.
14. Contact
Nine Yards — Southern California, United States dan@getnineyards.com
For privacy requests use the subject line "Privacy request." For security issues use "Security."
← Back to Nine Yards