Privacy Policy

Two very different roles. First, we act as a business (controller) for the marketing Site, its lead form, and our own dealings with prospects and customers. Second, when a customer uses the Platform, we act only as a service provider (processor) that handles data on that customer's behalf and under its instructions. This Policy covers our controller role in full. Our processor role is summarized in the section "How we handle Platform data" and governed in detail by the Master Services Agreement and Data Processing Addendum that each customer accepts. If you are a customer of a business that uses Glide By Blade, that business (not NorthReeve) controls your data; please direct privacy requests to that business.

1. Personal information we collect

We collect the information you choose to give us, a small amount of technical information created automatically when any website is used, and, in our processor role, the information customers put into the Platform.

Information you provide through the Site

When you submit our contact or walkthrough form, we collect the fields you enter, which may include:

• Company name
• Your name
• Email address
• Phone number
• The software you use today and approximately what you pay for it per month
• Your approximate office and technician headcount
• Any group or referral code
• Whether you want the website and domain add-on
• What you are hoping to improve (your free-text message)

Information collected automatically

When you submit the form, our form server records the date and time of the submission and the IP address the request came from, so we can process the lead and guard against abuse. Our web server and hosting provider keep standard server logs (for example, requested URLs, IP address, and browser user-agent) for security and reliability. The Site uses Google Analytics, which sets cookies and collects usage data such as pages viewed, approximate location derived from IP address, device and browser type, and referring URLs, to help us understand Site traffic. See "Cookies and analytics" and "Your privacy choices" below.

Information collected in our processor role (Platform data)

When a customer uses the Platform, we process data the customer and its users enter or generate, which may include the customer's own end-customer contact details, service addresses and property information, scheduling and route data, job notes and photos, crew GPS and live location while on duty, invoices, statements, and payment tokens, call and text message content and metadata, email content, chat messages, lawn measurements derived from aerial or satellite imagery, and records migrated from a prior system such as RealGreen. We process this data only to provide the Platform, as described below.

2. How we use personal information

As a controller, we use the information above to:

• Respond to your inquiry and schedule your walkthrough
• Prepare a quote and, if you proceed, set up and administer your account
• Attribute any group or referral code you enter to the referring representative
• Send you service and account communications, and, where permitted, marketing about our products (you can opt out at any time)
• Operate, secure, troubleshoot, and improve the Site and our business
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Meet legal, tax, accounting, and record-keeping obligations, and enforce our agreements

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California and other state laws. We do not use sensitive personal information for the purpose of inferring characteristics about you.

3. How we share personal information

We share information only as needed to run our business and only with providers who are bound to protect it and to use it solely to perform services for us. The categories of recipients are:

If NorthReeve is ever involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy. We do not disclose personal information to third parties for their own independent marketing.

4. How we handle Platform data (our processor role)

Glide By Blade is white-label software. Any data that a customer and its users create inside the Platform belongs to the customer. For that data, NorthReeve acts as a service provider or processor on the customer's behalf, and we handle it only to provide and support the Platform and according to the customer's agreement and instructions, not for our own marketing and not to build our own profiles. We do not retain, use, or disclose Platform personal information for any purpose other than the specific business purposes set out in the customer's agreement, and we do not sell it or combine it with data from other sources except as permitted by law to provide the service. Because the Platform is white-label, the people a customer serves see the customer's brand, not ours. The full terms of this relationship, including sub-processors, security measures, breach notification, and assistance with data-subject requests, are in the Data Processing Addendum.

5. Cookies and analytics

The Site uses Google Analytics, which sets first-party analytics cookies and similar technologies to measure traffic and usage. We do not use the Site for third-party advertising and do not permit Google to use the data to build cross-site advertising profiles for us. You can control cookies through your browser settings, opt out of Google Analytics using Google's browser add-on, and, where offered, use a Global Privacy Control (GPC) signal, which we honor as a valid opt-out request as described below. Because we do not sell or share personal information for cross-context behavioral advertising, a GPC signal has no additional targeted-advertising effect, but we still treat it as an opt-out of any future sale or sharing.

6. Retention

We keep lead and account information for as long as we reasonably need it to respond to you, to serve you if you become a customer, and to meet legal, tax, and accounting obligations, after which we delete or de-identify it. Server logs and analytics data are kept for a limited period for security, reliability, and measurement. Platform data is retained for the term of the customer's agreement and then returned or deleted as described in the Master Services Agreement and Data Processing Addendum.

7. Your privacy rights (US state residents)

A growing number of US states have comprehensive consumer privacy laws. Depending on your state of residence, you may have some or all of the following rights with respect to the personal information we hold as a controller:

• Right to know / access the personal information we have collected about you and how we use and share it
• Right to correct inaccurate personal information
• Right to delete personal information we hold about you
• Right to data portability, to receive a copy in a portable format
• Right to opt out of the sale of personal information, of "sharing" for cross-context behavioral advertising, and of certain profiling used in decisions that produce legal or similarly significant effects
• Right to limit the use of sensitive personal information
• Right to non-discrimination for exercising your rights, and, in some states, a right to appeal a decision on your request

These rights are available, subject to each law's specifics and exceptions, to residents of states including California (CCPA as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Nebraska, Indiana, Tennessee, Minnesota, Maryland, Rhode Island, Kentucky, and Florida, and residents of other states as their laws take effect. Where we act only as a service provider or processor for a customer's Platform data, we will refer your request to that customer and assist them in responding.

Do Not Sell or Share, and Global Privacy Control

We do not sell your personal information and do not share it for cross-context behavioral advertising. If this ever changes, we will provide a clear "Do Not Sell or Share My Personal Information" mechanism. We recognize the Global Privacy Control (GPC) browser signal as a valid opt-out of sale and sharing.

Sensitive information and profiling

We do not collect Social Security numbers, financial account login credentials, precise geolocation of visitors, or other sensitive categories through the Site, and we do not use personal information for automated profiling that produces legal or similarly significant effects about you. Any GPS or live-location data in the Platform relates to a customer's own on-duty crews and is processed for that customer under its control.

How to exercise your rights

To exercise any right, email forms@northreeve.com or sales@northreeve.com with your request and the state you reside in. We will verify your request, usually by confirming information we already hold, and respond within the time your state's law requires (generally 45 days, extendable where permitted). You may use an authorized agent where the law allows; we may require proof of the agent's authority. We will not discriminate against you for exercising your rights. If you are a Platform end user, please contact the business you do business with, since that business controls its own data.

8. Security

Traffic to the Site and the Platform is encrypted in transit with HTTPS and TLS. Platform data is protected with access controls, role-based access, and nightly encrypted backups. Access to lead and account information is restricted to people who need it to do their jobs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable and appropriate measures to protect personal information.

9. Children

The Site and the Platform are business tools intended for use by companies and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

10. International visitors

We operate in the United States, and our providers may process information in the United States. If you contact us from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where the GDPR or similar laws apply to our controller activities, we rely on your consent, on our legitimate interest in responding to your request and running our business, and, once you become a customer, on performance of our contract with you; where we rely on consent, you can withdraw it at any time.

11. Changes to this policy

We may update this Policy from time to time. When we do, we will change the "Last updated" date above, and material changes will be reflected on this page. Continued use of the Site after an update means you accept the revised Policy.

12. Contact

Questions or requests about this Policy or your information: forms@northreeve.com or sales@northreeve.com. NorthReeve is based in the Commonwealth of Massachusetts, USA.