Privacy Policy

SourcePlants is a marketplace for the plant trade. Growers publish what they have available, and buyers in the green industry search it and get in touch. It is run by Terrace Technologies, Inc. (“we”, “us”), which is responsible for the personal information described here.

This policy covers the SourcePlants website and mobile app, and the emails we send and receive for them. It explains what we collect, why, who can see it, which companies process it for us, how long we keep it, and what you can do about it. The Terms of Service set out the rules for using SourcePlants.

• We collect what it takes to run a trade marketplace: your account, your business, the plants growers list, and what buyers and farms send each other.
• A grower’s public page shows its town, listings and photos. Its phone, email and street address are private, shown only to signed-in buyers on a plan that includes contacting growers, and only a limited number a day.
• Availability lists growers upload are read by an AI service working for us, which does not use them to train its models.
• We do not sell your information, share it for advertising, or show ads.
• You can see and change your details, turn emails off, and delete your account yourself at any time.

Your account. Your first and last name, email address and password when you sign up. Your password is stored in a form we can’t read. We send a link to confirm your email address and record whether you have; contacting growers and joining a team need a confirmed address. We also keep your time zone and the choices you make in the app: light or dark theme, search radius, whether we email you, growers you prefer or hide, and the kinds of plants you told us you buy. If you add them, we keep your phone number and job title.

Your business. When you set up a farm, nursery, broker or buying company, we keep its name, type, its web address on SourcePlants, and, if you add them, its website, logo, cover photo and description. Growers give a full business address; buyers give at least a ZIP code. We keep who is on your team, each person’s role, and the invitations you create, which carry the invited email address.

Private contact details. A farm’s phone number, email address and street address are kept apart from its public page. Each time they are shown to someone outside the farm, we record who saw them and when, which is how we hold each person to 30 growers a day and each company to 60.

Listings. The plants a grower publishes: names, sizes, quantities, prices if the grower shows them, photos, and when each was last confirmed. For the farm only, we also keep the line each listing came from in the grower’s own list, the file’s name, and who reviewed it.

Messages and requests for quote. What buyers and farms write to each other, in the app or by replying to our notification emails, including plants a buyer asks about. A request for quote carries the buyer’s name, company, sign-in email address, phone number if it is on their profile, and the delivery ZIP code they give. We keep when each side last read a conversation and whether it was marked handled.

Notifications on your phone. If you turn on notifications in the mobile app, we keep the address your phone’s notification service gives the app, whether the phone is an iPhone or an Android, and who is signed in on it, so that new messages and requests reach you there. A notification shows who wrote and the start of what they wrote. Signing out of the app or turning notifications off removes it.

Reports. If you report a conversation or a farm, we keep your report, your sign-in email address so we can follow up, and a copy of the conversation’s most recent messages.

Billing. Payments are handled by our payment processor; we never see or store card numbers. We keep your organization’s plan, whether it pays monthly or yearly, the dates of trials, renewals and cancellations, and, for plans priced by team size, how many people are on the team. To give each person one free grower trial, we record which farms’ trials each person helped start.

Information collected automatically. Our website counts visits and which pages are used, and checks that visitors are people rather than automated scripts; both receive basic information about your browser and device. Our servers keep logs of requests and errors. The mobile app does not count visits.

From other people. A teammate who invites you gives us your email address. A buyer who sends your farm a request gives us what they write in it. Staff may note that a farm is a customer of Terrace’s farm software, so that its plan is included.

Growers can upload the availability lists they already send out (spreadsheets, PDFs, Word files and photos). We store the original file, images of its pages, and a small preview, so the grower can see their file beside what we read from it.

To turn a list into listings, an AI service reads the plants, sizes, quantities and prices from it, and matches plant names to our catalogue. It works only for us, and does not use your lists to train its models.

A list rarely contains personal information beyond the farm’s own contact details. We keep what was read from each page, separately for each organization, so that next week’s list in the same layout is read without asking the AI again. We keep the corrections growers make when they review a list, to measure and improve how accurately lists are read.

• To run SourcePlants: show listings, search them, measure how far growers are, and carry messages and requests between buyers and farms.
• To read growers’ availability lists into listings, as described above, and to publish a farm’s weekly list automatically when it has asked us to.
• To send the emails described below.
• To run plans and billing: trials, renewals, charges for team members past what a plan includes, and one free trial per farm and per person.
• To keep SourcePlants safe and for the trade: confirming email addresses, daily limits on contact details, messages and requests so that nobody can harvest the directory or flood an inbox, and reviewing reports.
• To understand how the product is used, fix what is broken, and protect it from abuse and attacks.
• To meet legal obligations, such as keeping billing records and answering lawful requests.

We do not sell personal information, use it for targeted advertising, show advertising, or give anyone your information for their own marketing.

• Anyone, signed in or not: a grower’s public page and its published listings, including its name, town, state, ZIP code, logo, photos, description and website, and its approximate distance from them.
• Signed-in people whose plan includes contacting growers: a grower’s phone, email and street address, within the daily limits above.
• The other side of a conversation: your messages, your name and your company. A farm sees the requests a buyer sends it, with the buyer’s name, company, email, phone (if on their profile) and delivery ZIP code. Everyone on a farm’s team sees the farm’s conversations.
• Your team: members of your organization see its listings, uploaded lists, settings, conversations, and each other’s names and email addresses. Owners and admins see its plan and billing.
• Our staff: when needed to give support, investigate a report, look after billing, or keep the service secure.
• Others, only when we must: to comply with the law or a valid legal request, to protect someone’s safety or our rights, or as part of a merger, financing or sale of our business, in which case this policy continues to apply to your information.

Like most online services, we use other companies to host SourcePlants and store its information, take payments, send and receive email, deliver notifications to phones, read availability lists, look up farm locations, count visits, and protect the site from abuse. They may use your information only to do that work for us, under contracts that require them to keep it safe. Our payment processor also keeps its own records of payments, as the law requires.

To show buyers how far away a farm is, we look up the farm’s street address on a map and keep only a point rounded to about half a mile. The street address itself stays private. If the address can’t be matched, we use the centre of the farm’s ZIP code instead. A buying company that gave only a ZIP code is placed at its centre.

If you choose Use my location, your browser or phone asks your permission and gives us your position once, to sort results by distance. It is used for that search and is not saved to your account. The mobile app asks for location only when you tap that button, and only while the app is in use. The ZIP code you search from is remembered on your device.

We send the emails you would expect from the service: confirming your address and resetting your password; new messages and requests for quote; what happened to a list a farm uploaded or emailed in; trial reminders, payment problems and other billing notices; and our answers when you write to us or report something. We do not send marketing email.

Message emails wait a few minutes and stop once one has been sent, until you read the conversation. You can turn them off for yourself on Your account, and a farm can turn them off for its team in its settings. Billing and account emails cannot be turned off while you have an account, because they are about the service itself.

When you email a list to your farm’s address or reply to a notification, we check that the email really came from the address it says before we post a reply or accept a list. We keep the list or the text of your reply, without the quoted history, and delete the email itself once it has been read.

The website keeps a few things in your browser’s storage so it works the way you left it: whether you are signed in, your light or dark theme, the ZIP code you search from, which of your organizations is open, how you laid out your documents, and, until you sign in, your request list, a draft request, and growers you prefer or hide. The mobile app keeps the same kinds of things on your phone.

We also use cookies to tell one visit from another and to tell people from automated scripts. We do not use advertising cookies or tracking pixels. You can clear or block cookies in your browser; signing in needs storage to work.

• Your account and your organization’s information for as long as the account or organization exists.
• Uploaded lists until a member deletes the document or the organization is deleted. Plants already published from a deleted document stay published until the grower removes them.
• What was read from lists, kept so the same page is not read twice, until the organization is deleted.
• Emails sent to us are deleted once read.
• Messages and requests stay for both sides. If you delete your account, they stay for the other person, with your name replaced by “Deleted user” and your email and phone removed.
• Records of who saw which grower’s contact details, and other records behind daily limits, for as long as the limit needs them.
• Your phone’s notification address until you sign out of the app on that phone, turn notifications off, remove the app, or delete your account.
• Reports are kept so we can act on repeated problems.
• Billing records for as long as tax and accounting law requires, by us and our payment processor. A record that a person has had a free grower trial is kept so the trial stays once per person.
• Server logs for a limited time, normally about 30 days.

• See and correct your profile on Your account, and your business details in your dashboard.
• Turn message and request emails off on Your account (for you) or in your organization’s settings (for the farm).
• Turn the mobile app’s notifications on or off under Account in the app, or in your phone’s settings.
• Choose whether buyers see your prices and quantities, in your farm’s settings.
• Close a conversation to new messages, or report it, from the conversation’s menu. Report a farm from its page.
• Delete your account at any time (below).
• Ask us for a copy of your information, to correct something you cannot change yourself, or to delete it, by writing to founders@terracetech.co. We may need to confirm it is you, and we answer within 30 days.

Residents of California and other states with privacy laws have rights over their personal information: to know what we collect and how we use and disclose it, to get a copy, to correct it, to delete it, and not to be treated differently for using these rights. To use them, write to founders@terracetech.co or use the tools on Your account. Someone you authorize can ask for you; we will check with you before acting on it. If we turn a request down, you can ask us to reconsider by replying to our answer, and we will tell you the outcome and how to complain to your state’s attorney general.

In the last 12 months we have collected these kinds of personal information, from the sources described above:

• Identifiers: name, email address, phone number, account and device identifiers.
• Commercial information: your plan, its billing history, and the requests for quote you send or receive.
• Professional information: your business, your role on its team, and your job title.
• Internet activity: how you use the website and app, and server logs.
• Geolocation: a farm’s location rounded to about half a mile, ZIP codes, and, if you choose Use my location, your position for that one search.
• Your communications: messages, emails you send us, and reports.

We use them for the purposes in How we use it, and disclose them only to the people and companies in Who sees what and Companies that help us run it. We do not sell or share personal information, so there is nothing to opt out of, and a browser’s privacy signal changes nothing we do. The only sensitive information we touch is your precise position when you choose Use my location, which we use for that search alone. We do not knowingly collect information from anyone under 16.

Signed in, go to Your account and choose Delete account; in the mobile app it is under your account settings. This deletes your profile, request list, saved lists, your phones’ notification addresses and your sign-in. Any farm or company where you are the only member is deleted with you: its listings, uploaded lists, photos, settings and billing records with us. Teams that have other members keep going without you.

If you are the only owner of a team with other members, make someone else an owner first. If your organization has a paid plan that is still active, cancel it in Plan & billing first: we cannot cancel it for you after your account is gone. Some records stay where the law or others need them: billing records, reports, a record that you have had a free grower trial, and your messages, as described above.

Can’t sign in? See deleting your account on the Support page.

Information travels encrypted and is stored encrypted. Access rules decide who may read each record: private contact details, billing records, trial records and reports cannot be read by other users at all, and growers’ contact details reach other people only after we check their plan and daily limit. Staff access is limited to what their work needs. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

SourcePlants is for businesses in the United States, and we store your information in the United States. Some of the companies that help us, such as the AI service that reads lists, may process information in other countries, under safeguards that protect it.

SourcePlants is a tool for businesses and is not meant for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

When we change this policy we update the date at the top. If a change matters, such as a new kind of information or a new company receiving it, we will tell you by email or in the app before it takes effect.

Questions or requests about privacy: founders@terracetech.co. By post: Terrace Technologies, Inc., 285 W Wieuca Rd NE, Ste 69403, Atlanta, GA 30342.