Privacy Policy

1. Who this Policy covers

This Policy covers two groups of users:

• Contractors - businesses and individuals who create listings on iHydroseed (the contractor directory).
• Customers / Project Owners - visitors who use iHydroseed to search for contractors, submit project inquiries, or otherwise interact with the site.

Where a section applies to only one group, we say so explicitly.

2. Information we collect

From contractors (when you sign up for a listing):

• Basic listing information (required to be listed): company name, contact name, email address, phone number, mailing address, service area / coverage radius, service categories, client types, project sizes, public-visibility opt-ins (which fields you allow to appear publicly).
• Advanced profile information (optional): equipment specifications (manufacturer, model, tank size, agitation, photo), crew size, travel willingness, stormwater/SWPPP services, technical capabilities, erosion-control specialties, reclamation specialties, certifications (type, state/agency, certificate number, expiration, uploaded certificate file), company description, years in business, languages, lead-routing preference, insurance/licensing notes, company logo, project photos, emergency-availability flag.
• Automatically captured: submission timestamp, the IP address that submitted the form (we don't store IP long-term but may log it for abuse prevention), and the geocoded latitude/longitude we compute from your city/state for map display.

From customers / project owners (when you use the directory):

• Search criteria you enter: ZIP code, city, state, services needed, project type/size, urgency, client-type self-identification.
• Contact inquiries (if you reach out to a contractor through iHydroseed): your name, email, phone, project description, and any other information you choose to provide.
• Automatically captured: standard server-level logs (timestamp, URL accessed, referrer, browser user-agent). We do not currently use third-party analytics or advertising trackers on iHydroseed.com beyond what's required to render the page (see Section 7).

Cookies and similar technologies. iHydroseed.com uses one browser localStorage key (ihydroseed_pins_v1) to remember pins you've placed on the map across page reloads. This is local to your browser, not transmitted to our servers, and contains only the pins you created. We do not currently use tracking cookies, advertising cookies, or session cookies. If we add any in the future, we will update this Policy and surface a consent banner where required by law.

3. How we use information

We use the information we collect to:

• Build and display contractor directory listings. Only the fields you explicitly opt in to make public will appear in public search results.
• Route customer inquiries to matching contractors. When a project owner searches and contacts a contractor through iHydroseed, we forward the inquiry per the contractor's selected lead-routing preference (Direct, Routed, or Both).
• Send transactional and operational communications. Contractor confirmation emails after signup, profile-update confirmations, and operational notices about iHydroseed (e.g., regional launches, policy changes).
• Maintain the directory. Verify listing accuracy, prevent abuse / fraudulent listings, and respond to update or removal requests.
• Improve the service. Aggregate, anonymized analytics about search patterns and listing quality. We do not sell or share individual user data for advertising.

4. What is public vs. private

For contractor listings, the public default is:

• ✅ Public: business name, city, state, coverage area, service categories, equipment categories, certifications (type only - not certificate file or number unless you separately opt in).
• 🔒 Private by default (you must opt in to make public): email address, phone number, website URL, contact-form availability, certificate numbers + uploaded certificate files, insurance/licensing notes, logo, project photos.

You can change your public/private opt-in choices at any time by emailing us (see Section 6) or via the in-product profile editor when one is available. Customer inquiries are never made public. They are routed only to the matched contractor(s) and to iHydroseed operations for support.

5. Who we share information with

We share information with:

• The contractor you contact (if you are a customer submitting an inquiry).
• Service providers we use to operate iHydroseed:
  • Google (Google Sheets, Google Drive, Google Apps Script) - stores listings, contractor uploads, and runs our backend.
  • HubSpot - CRM where we track contractor relationships.
  • SendGrid (Twilio) - sends transactional emails on our behalf.
  • Netlify - hosts the iHydroseed website.
  • OpenStreetMap Nominatim - geocodes the city you enter into a latitude/longitude for map display. We send only the city/state/country text to Nominatim, not your name, email, or other personal info.
• Legal/compliance recipients if we are required by law, subpoena, court order, or governmental request to disclose; or if disclosure is necessary to protect our rights, the safety of users, or the public.

We do not sell or rent personal information to advertisers, data brokers, or other third parties. We do not use your information for cross-site behavioral advertising.

6. Your rights and choices

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can correct any inaccurate information in your listing or contact us to update it.
• Deletion: You can request that we delete your listing and associated personal information at any time. We will honor deletion requests promptly and always before any public-launch publication of your listing.
• Public visibility: You can change which fields are public via the visibility toggles on the signup form or by emailing us.
• Withdraw consent / unsubscribe: Transactional emails are required as part of being a listed contractor. We do not send marketing emails by default; if we add any in the future, every marketing email will include an unsubscribe link.

To exercise any right, email service@hydroseedsupply.com with the subject line "iHydroseed privacy request" and tell us what you'd like done. We typically respond within 7 days and will complete most requests within 30 days.

For California residents: this Policy is intended to comply with the California Consumer Privacy Act (CCPA) as amended by the CPRA. The "do not sell or share my personal information" right is satisfied because we do not sell or share personal information for advertising.

For EEA / UK residents: under GDPR and UK GDPR, you have additional rights including data portability and the right to lodge a complaint with your data protection authority. Our legal basis for processing contractor listings is contract performance (Article 6(1)(b)); for customer inquiries, our basis is legitimate interest (Article 6(1)(f)) in connecting projects with contractors.

7. Third-party content and services

The iHydroseed.com page loads several third-party assets to render and function. We do not control these third parties; their privacy practices are governed by their own policies:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) - typeface delivery.
• cdnjs / Cloudflare (cdnjs.cloudflare.com) - three.js (3D globe rendering) and Leaflet (flat-map rendering).
• OpenStreetMap Nominatim (nominatim.openstreetmap.org) - geocoding city/state to coordinates.
• Google Drive, Google Sheets, Google Apps Script, HubSpot, SendGrid, Netlify - see Section 5.

The page does not currently include advertising trackers, social-media pixels, or third-party analytics SDKs beyond what's listed above.

8. Data retention

• Active contractor listings: retained for as long as the contractor remains listed. After deletion, identifying information is removed within 30 days; aggregated, anonymized analytics may be retained indefinitely.
• Customer inquiries: retained for up to 24 months after the inquiry, to support follow-up and dispute resolution. Inquiries are deleted on request.
• Apps Script execution logs: retained per Google's default (typically 7 days for log entries).
• Email send records (SendGrid): retained per SendGrid's default retention.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect the information we hold. Specifically: HTTPS everywhere (TLS 1.2+), encrypted storage at rest via Google and HubSpot infrastructure, restricted Google Apps Script execution as a specific service account, and least-privilege API keys for SendGrid and HubSpot. No system is fully invulnerable; if a breach occurs that affects your personal information, we will notify you within the time required by applicable law.

10. Children

iHydroseed.com is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us at the address in Section 13 and we will delete it.

11. International data transfers

iHydroseed is operated from the United States. If you are accessing iHydroseed from outside the U.S., your information will be transferred to and processed in the U.S. (or wherever our service providers operate). By using iHydroseed you consent to this transfer.

12. Changes to this Policy

We may update this Policy from time to time. We will revise the "Effective date" at the top and, for material changes, give you advance notice via email (for contractors with listings) or via a banner on iHydroseed.com.

13. Contact

Questions about this Privacy Policy, or requests to exercise your rights, should be directed to:

Hydroseed Supply
Attn: iHydroseed Privacy
PO Box 935
Watertown, MN 55388
United States
Email: service@hydroseedsupply.com
Phone: 844-449-3767