Privacy Policy

Effective: April 9, 2026  |  Version 2.0

This Privacy Policy describes how ArbAssist ("we," "us," "our") collects, uses, and protects your information across our products: Guardian (guardian.arbassist.com), ArbKeep (arbkeep.com), CanopyKeep (canopykeep.com), arborist public websites (*.arbassist.com), and the ArbAssist marketing site (arbassist.com).

1. Information We Collect

Account information (arborists): Name, email address, phone number, company name, city, state, professional credentials, license numbers, and payment information (processed by Stripe — we do not store card numbers).

Profile and website content (arborists): Company logo, bio, tagline, service areas, year started, directory links, social media links, and slug for public website generation.

Assessment and work order data: Tree species, location, condition observations, photos, GPS coordinates, risk ratings, recommendations, pricing, and associated client information.

Client information (entered by arborists): Client name, address, email, phone number, and property details. This data is entered by the subscribing arborist on behalf of their clients.

Lead form submissions: Name, address, email, phone number, and service interest submitted through arborist public websites. This data is provided voluntarily by visitors.

Photos and media: Assessment photos, service photos, voice memos, and company logos uploaded to the platform. Photos may contain EXIF metadata including GPS coordinates and timestamps.

AI conversation data: Messages exchanged with Field Intelligence, including questions and AI responses. These conversations are stored per-property to maintain context.

Usage data: We collect standard web analytics including pages visited, features used, and session duration. We do not use third-party tracking pixels or sell usage data.

2. How We Use Your Information

DataPurpose
Account infoAuthentication, billing, communication
Profile contentGenerate your public website and attestation documents
Assessments & work ordersCore service delivery, client portal display, attestation generation
Client informationPortal access, notifications, work order delivery
Lead submissionsRoute to subscribing arborist, create draft work orders
Photos & mediaAssessment documentation, client portal, attestation documents
AI conversationsProvide contextual Field Intelligence responses
Usage dataImprove the Service, identify issues

3. How We Share Your Information

We do not sell your data. We share information only in these circumstances:

  1. Client portal: Assessment data, photos, and work orders you publish are visible to your clients via ArbKeep share links.
  2. Public websites: Profile information you configure is displayed publicly on your *.arbassist.com subdomain.
  3. Service providers: We use Stripe (payments), Resend (email), and Cloudflare (hosting and storage) to operate the Service. These providers process data under their own privacy policies.
  4. AI processing: Field Intelligence conversations are processed by Anthropic's Claude API. Conversations are sent to Anthropic for processing and are subject to Anthropic's privacy policy.
  5. Legal requirements: We may disclose information if required by law, court order, or to protect our rights or safety.

4. Data Storage & Security

Your data is stored on Cloudflare's infrastructure (D1 database and R2 object storage). Data is encrypted in transit via TLS. We implement reasonable security measures including authentication tokens, arborist-scoped data access, and regular backups.

No guarantee against data loss. While we take reasonable precautions, we cannot guarantee against data loss, unauthorized access, or security breaches. You are encouraged to maintain your own records.

5. Data Retention

Active accounts: Data is retained for the duration of your subscription.

Cancelled accounts: Data is retained for 90 days after cancellation to allow for reactivation or export. After 90 days, data may be permanently deleted.

Lead form data: Lead submissions are retained as part of the subscribing arborist's account data.

AI conversations: Stored for the duration of your subscription to maintain per-property context.

6. Your Rights

You have the right to:

  1. Access your data by viewing it in Guardian or requesting an export
  2. Correct inaccurate data through your Settings or by contacting us
  3. Delete your account and data by contacting [email protected]
  4. Export your data in a standard format upon request
  5. Withdraw consent by cancelling your subscription

To exercise these rights, contact [email protected]. We will respond within 30 days.

7. Client Data (Arborist Responsibility)

Arborists using ArbAssist enter client data (names, addresses, contact information) on behalf of their clients. The subscribing arborist is the data controller for their client data. ArbAssist acts as a data processor.

Arborists are responsible for: obtaining appropriate consent from clients, responding to client data requests, and ensuring client data accuracy.

8. Cookies & Local Storage

We use a single authentication cookie (arbassist_token) to maintain your login session. This is a functional cookie required for the Service to operate. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

9. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy at any time. Material changes will be communicated via email. The "Effective" date at the top indicates the latest version.

11. Contact

Questions? Contact us at [email protected].


ArbAssist  |  Privacy Policy v2.0  |  April 9, 2026