Privacy Policy

This Privacy Policy explains how Grovr LLC, a Delaware limited liability company and a wholly-owned subsidiary of Dominion Labs Inc. (“Grovr,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information in connection with grovr.co, the Grovr applications, and our related products and services (together, the “Services”).

It applies to Residents who report and follow maintenance, Property Teams (the property managers and owners who run maintenance), and Grovr Pros (the independent contractors who perform it). Where a Property Team gives us information about its residents or units, we act as a service provider / processor to that Property Team for that information, and this Policy describes our own practices. Dominion Labs Inc. operates separate services under its own privacy policy; this Policy governs the Grovr Services only.

By using the Services you acknowledge that you have read this Policy. If you do not agree with it, do not use the Services.

At or before the point of collection, this section summarizes the categories of personal information we collect, why, and how long we keep it. We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined under California and other state laws.

“Sensitive personal information” (government-ID, biometric data, and precise geolocation) is used only for the verification and attendance purposes above and never to infer characteristics about you. See Sensitive and Biometric Information.

Information you provide

• Account information — name, email, phone number, and the role your account holds.
• Property and unit information — the address, building, and unit a request relates to, and access instructions you choose to give.
• Service requests — what you report, category and urgency, availability, and notes.
• Photos — images you attach, and images a pro takes to document completed work.
• Pro onboarding information — business details, trade licences, proof of insurance, and information required to run a background check.
• Payment information — for Property Teams, billing contact and card or bank details. Card details are collected and stored by our payment processor, not by Grovr.
• Communications — messages you send us, including support requests and chats with our “Gro” assistant.

Information we collect automatically

• Device and log data — IP address, browser and operating system, pages viewed, and timestamps.
• Usage data — how you interact with the Services, such as which requests you open and which actions you take.
• Cookies and similar technologies — see Cookies and Tracking Technologies.

Location information (Pros)

We capture a Grovr Pro’s device location only at the single moment they mark themselves arrived at a job, to confirm the visit took place at the property. We do not track a pro continuously, do not record location off the clock, and do not build a movement history. Residents and Property Teams are never shown a pro’s location. If you do not want your location captured, you cannot be verified on site and should not accept jobs.

Information from third parties

• Property Teams may give us resident contact details and unit information so a request can be routed and a pro let in.
• Sign-in providers — if you use “Continue with Google” or “Sign in with Apple,” we receive basic profile information, such as your name and verified email.
• Background-check and licence-verification providers return results about pro applicants.
• Payment processors return transaction results and limited card metadata (such as the last four digits and card brand).

To verify Grovr Pros before they can accept work, we collect and process identity documents (an image of a government-issued photo ID or passport and the details read from it) and biometric information — a short live face scan and the facial-geometry template (“faceprint”) derived from it.

We collect these only after you are informed and give consent at the time of verification, and we use them solely to confirm the document is authentic, that the live scan is a real person (a “liveness” check), and that the face on the ID matches you. This is performed for us by our identity-verification provider under contract. We do not sell, lease, trade, or otherwise profit from your biometric identifiers, we do not use them for any other purpose, and we do not disclose them except to that provider or as required by law.

We protect this data using the reasonable standard of care in our industry and retain and destroy it on the schedule in Data Retention. This notice supports residents of Illinois under the Biometric Information Privacy Act (BIPA) and residents of other states with biometric-privacy laws. Government identifiers, biometric data, and precise geolocation are “sensitive personal information” under California and similar laws, and we limit their use to the purposes described here.

We use personal information to: operate the Services (take a request, match it to a pro, schedule the visit, record what was done); show each party what they need (see What Each Party Can See); verify that a pro is licensed, insured, identity-verified, and arrived on site; process payments and produce invoices; send transactional messages; provide support and investigate disputes; maintain safety, prevent fraud and abuse, and enforce our Terms; keep records we are required to keep and establish or defend legal claims; and understand and improve how the Services are used.

We do not use your personal information to serve you third-party advertising, and we do not use the contents of your service requests or photos to train advertising models.

Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, our legal bases are performance of a contract (operating the Services and completing a job), legitimate interests (security, fraud prevention, service improvement, confirming a pro attended), legal obligation (records we must keep), and consent where we ask for it (including biometric verification).

We use automated logic to match a request to a suitable pro (by trade, coverage area, and availability) and to pause a pro’s availability when offers go repeatedly unanswered. These are operational tools; they do not produce legal or similarly significant effects about you, and a person is involved in disputes and account actions. You can contact us at [email protected] to question a decision.

Our “Gro” support assistant is powered by an AI service provider. When you chat with Gro, your messages are processed to answer your question and, if you ask for a person, to open a support ticket. Your chat content is not used to serve advertising, and our provider does not use it to train models for its other customers.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. Grovr works only if certain information moves between the people in a job. We disclose personal information to the following categories of recipients:

• Between the parties to a job — a resident’s report, photos, unit and access details go to the assigned pro and the Property Team; the pro’s name and company go to the resident and the Property Team.
• To service providers / processors under contract, who may use the information only to perform their function for us.
• To our parent, Dominion Labs Inc., and its affiliates, for corporate administration, subject to this Policy.
• For legal reasons — to comply with law or valid legal process, enforce our Terms, or protect the rights, property, or safety of Grovr, our users, or the public.
• In a corporate transaction — a merger, financing, acquisition, or sale of assets, subject to customary protections.
• With your direction or consent.

Service providers we rely on

Each processes only the information it needs for its role, under contract, and may not use it for its own purposes:

• Stripe — identity verification. Privacy Policy.
• Square — payment processor. Privacy Policy.
• Google — sign-in. Privacy Policy.
• Apple — sign-in. Privacy Policy.
• Cloudflare — hosting and AI. Privacy Policy.
• Background & licence checks — pro screening.
• Contractor payouts (provider TBD) — payouts and tax forms.

We keep this list current and will update it as our providers change.

Grovr is deliberate about what each role is shown, and we enforce those limits when the data is assembled — not by hiding fields in the page.

• Residents see the work: what was reported, what was done, the pro’s name and company, and the photos. Residents are never shown billing or payment information, because residents are never billed through Grovr.
• Grovr Pros see the job and what they need to do it. Before a pro accepts, the exact unit and access details are withheld; they are released once the job is theirs.
• Property Teams see the requests and work for the properties they manage, and the invoices raised to them.

We use cookies and similar technologies to keep you signed in, remember preferences, keep the Services secure, and understand usage. We do not use advertising cookies and do not permit third-party ad tracking on the Services. You can control cookies through your browser; blocking some will stop parts of the Services from working.

Because we do not sell or share personal information or serve targeted ads, a browser Global Privacy Control or “Do Not Track” signal does not change what we collect; we honour it as an opt-out of sale/share to the extent one is legally required.

We keep personal information only as long as needed for the purposes in this Policy, then delete or de-identify it, unless a longer period is required by law or needed to establish or defend a legal claim.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and role-based limits on what each account can retrieve. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a security breach affecting your personal information occurs, we will notify affected users and the appropriate authorities as required by, and within the timeframes set by, applicable law.

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to opt out of certain processing, to limit the use of sensitive information, and to appeal a refusal.

How to exercise your rights

• Submit a request by emailing [email protected].
• Verification — we will take reasonable steps to verify your identity before acting, using information already associated with your account.
• Authorized agents may submit a request with your written permission and proof of authority.
• Timing — we respond within the period required by your law (generally 45 days, extendable once where permitted).
• Appeals — if we decline, you may appeal by replying to our decision; we will respond within the period your law allows.
• No discrimination — we will not deny you service, charge you a different price, or provide a different level of service for exercising a right.

If your account was created for you by a Property Team, that team may also hold information about you independently; you may need to contact them for records they control. You can turn off non-essential notifications in your account; transactional messages about a live job cannot be turned off while the job is in progress.

When a Property Team uploads resident and unit information so work can be requested and performed, Grovr acts as a service provider (California) / processor (GDPR) and handles that information only on the Property Team’s documented instructions and for the purposes of providing the Services. We do not sell it, do not use it for our own purposes, and return or delete it on request, subject to legal retention.

Property Teams that require a signed Data Processing Addendum (including EU Standard Contractual Clauses where relevant) may request one at [email protected], and it will supplement this Policy for that relationship.

The Services are not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact [email protected] and we will delete it.

Grovr is operated from the United States and information is processed there. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from your country’s. Where required, we use appropriate safeguards for those transfers, including the European Commission’s Standard Contractual Clauses and the UK Addendum.

We may update this Policy. If we make material changes we will update the “Last updated” date above and, where appropriate, give additional notice. Continuing to use the Services after a change takes effect constitutes acceptance of the revised Policy.

Privacy questions and rights requests: [email protected]
General support: [email protected]

Grovr LLC, a Delaware limited liability company and a wholly-owned subsidiary of Dominion Labs Inc. If you are in the EEA or UK and cannot resolve a concern with us, you may contact your local supervisory authority.