Kempt Privacy Policy
This Privacy Policy explains what information Kempt collects, how we use it, and the choices you have. Kempt is software for independent lawn-care and landscaping businesses, built and operated from Tampa Bay, Florida. We keep this plain and honest because your trust is part of how you look like a pro.
1. Introduction and Scope
Kempt is a software service (SaaS) that helps independent lawn-care and landscaping businesses run their operations: a professional website, customer management, scheduling, invoicing and online payments, and messaging. This Privacy Policy describes how we handle personal information across everything we do.
In this policy, "Kempt", "we", "us", and "our" mean the Kempt service and its operator. "You" and "your" mean the lawn-care business that owns a Kempt account. "End customers" means the homeowners and property owners that your business serves and enters into Kempt.
This policy covers three groups of people:
- Visitors to our marketing site at kemptlawn.com and to the public business websites we host (at name.kempt.site or a custom domain).
- Business account owners who sign up for and use Kempt.
- End customers whose information a business stores and manages inside Kempt.
This policy is effective as of the date shown above.
2. Our Two Roles
Kempt handles data in two different roles, and the difference matters for your rights and ours.
For business account owners and site visitors, we are the controller of the information described in this policy. We decide how that information is collected and used to provide the Kempt service, and you can exercise your rights directly with us.
For end-customer data that a business enters and stores in Kempt (names, addresses, notes, and so on), the business is the controller and owner of that data, and Kempt acts as a service provider and processor. We handle that data on the business's behalf and under its instructions.
If you are an end customer and you want your information corrected or removed, please contact the lawn-care business you work with, since they control that data. Kempt will assist the business in responding to your request.
3. Information We Collect
We collect the following categories of information.
Account and business information. When you create an account, we collect your business name and legal name, contact email and phone number, your plan, and your settings. To sign you in, we collect a login email and password. Authentication is handled by our authentication provider; passwords are hashed and are never stored in plaintext by Kempt.
End-customer data you enter. As you use Kempt, you enter information about your end customers, including names, emails, phone numbers, service addresses, private notes, messaging-consent status, and invoice and payment metadata. As explained above, you are the controller of this data and we process it for you.
Payment metadata. Payments run through Stripe. Kempt does not store full card numbers. We store only payment metadata surfaced by Stripe, such as amount, status, and the last four digits of a card. Card data itself is handled by Stripe under PCI-DSS standards.
Usage, device, and log data. To operate and secure the service, we collect technical information such as IP address, browser type, pages viewed, and timestamps.
Cookies. We use only essential and functional cookies for login sessions and security. We also use a cookieless analytics service to count visits to our public pages. We do not use third-party advertising trackers. See the Cookies and Tracking section below.
4. How We Use Information
We use information for the following purposes:
- To provide and operate the service, including your website, customer list, scheduling, invoicing, and reminders.
- To process payments through Stripe and reflect payment status back to you.
- To deliver messaging, including SMS on the Pro plan and email reminders and receipts.
- To provide support and respond to your requests.
- To protect the service through security monitoring and fraud prevention.
- To improve and develop our products and features.
- To meet legal, tax, and compliance obligations.
We do not use end-customer data for our own marketing, and we do not sell personal information.
5. Text Messaging and Consent
SMS texting is a Pro plan feature, delivered through a telecommunications carrier partner using US local numbers. Our beta market is Tampa Bay, Florida. Texting is used for reminders, "on my way" notes, invoice-by-text, and review requests.
You, the business, are solely responsible for obtaining and maintaining the legally required consent from each end customer before texting them, and for complying with all applicable laws, including the federal Telephone Consumer Protection Act (TCPA), the Florida Telephone Solicitation Act (FTSA), CAN-SPAM, and carrier and CTIA requirements. Kempt provides tools to record consent and enforce guardrails, but you are the sender and the responsible party. Consent to receive messages is never a condition of purchase.
Kempt enforces guardrails to help you stay compliant: per-customer consent flags that separate transactional from promotional messages, quiet-hours limits that restrict messages to roughly 8am to 8pm in the customer's local time, a daily per-customer message cap, and automatic honoring of opt-out keywords (such as STOP or ALTO and their equivalents), which immediately suppress further messages.
Texting requires a one-time A2P 10DLC registration of your business and campaign with the carriers, which usually clears in one to three business days. Until it clears, the same messages are delivered by email. Message and data rates may apply to recipients.
Mobile opt-in information and phone numbers collected for SMS are not sold, and are not shared with third parties or affiliates for their own marketing or promotional purposes. Message content and consent records are shared only with our messaging and carrier provider, strictly to deliver the messages and maintain the compliance records those laws require.
7. Payments and Stripe
Payments are processed by Stripe. You create or connect your own Stripe account through Stripe Connect, and you are the merchant of record for your charges. Your own business name appears on your customer's statement. Funds flow through Stripe directly to your bank account on Stripe's standard payout schedule (typically about two business days).
Kempt never holds, touches, or controls the funds. Kempt is not a bank, money transmitter, or payment processor. Card data is handled by Stripe under PCI-DSS standards, and saved cards and autopay mandates are stored by Stripe under your Stripe account. Kempt stores payment metadata only, such as amount, status, and last four digits.
Your use of Stripe is also governed by Stripe's own agreements and privacy policy, including the Stripe Connected Account Agreement and Stripe Services Agreement. Refunds, disputes, and chargebacks are handled through Stripe and are your responsibility. Stripe may hold a new business's first payout while it verifies the account; this is Stripe's policy, not Kempt's.
8. Data Retention
We keep account and business information for as long as your account is active. We retain end-customer data on your behalf while your account is active and while you continue to use it.
You can export your customer list at any time with a one-click CSV export, and you can export your data before you cancel. After cancellation, Kempt retains data as needed to meet legal, tax, and compliance obligations, and then deletes or anonymizes it.
9. Your Rights and Choices
You have meaningful control over your information. As a business account owner, you can:
- Access and review the information in your account.
- Correct or update your business and customer information.
- Export your customer list at any time as a CSV file.
- Delete your data and cancel your account at any time, with no cancellation fee.
You can exercise these rights through your account or by contacting our support team. If you are an end customer, please contact the lawn-care business you work with to access, correct, or delete your information, since they control that data; Kempt will assist the business.
For messaging, recipients can opt out at any time using opt-out keywords such as STOP, which immediately stops further messages. To reach us about any privacy question or request, email [email protected].
10. Security
We protect your information using encryption in transit, access controls, and row-level tenant isolation that keeps each business's data separated from every other business's data.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach that affects your information, we will respond and provide notice as required by applicable law.
12. Children's Privacy
Kempt is a service for businesses and their commercial contacts. It is not directed to children under 13, and we do not knowingly collect personal information from children. The end-customer data stored in Kempt consists of business contacts, not information about children. If you believe a child's information has been provided to us in error, please contact us so we can address it.
13. Where We Operate
Kempt is built and operated in the United States, from Tampa Bay, Florida. Our beta launch market is Tampa Bay, Florida. If you use Kempt, your information is processed in the United States by us and by the service providers listed above.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you, for example by email or within the app, and we will update the effective date at the top of this policy. Your continued use of Kempt after the effective date means you accept the updated policy.
15. Contact Us
If you have any questions about this Privacy Policy or how we handle your information, contact us at [email protected].