Who we are
Noot, Inc. ("Noot," "we," "us") operates the Noot storefront, customer account, ordering, rewards, referral, and support services covered by this policy. This policy explains how we handle personal information when you browse, contact us, or shop with us.
Questions or privacy requests: support@growwithnoot.com. You can also write to Noot, Inc., 30 N Gould St, Ste 2085, Sheridan, WY 82801, United States. This is a correspondence address, not a product-return address.
Information we collect
- Contact and account information: your name, email address, phone number, shipping and billing addresses, sign-in details, account settings, and communication preferences.
- Shopping and transaction information: carts, purchases, order history, Auto Delivery schedules, product selections, coupons, returns, refunds, and delivery or tracking information. Payment providers process payment credentials; we receive payment references and limited details such as payment status, card brand, and last digits, rather than storing full card numbers or security codes in your account.
- Rewards and referrals: point balances and activity, redemption selections, referral identifiers and qualifying activity, and social-post links you submit for review.
- Information you send us: support conversations, plant-care questions, images or attachments you choose to upload, reviews, feedback, and interests or contact details submitted through an offer form.
- Device and activity information: IP address, browser and device details, approximate location inferred from IP, session identifiers, referring pages and campaign links, pages viewed, cart or checkout activity, and security logs. Our messaging services may record delivery, open, and link-click activity.
We obtain information from you, from your use of our services, and from providers that help process payments, deliver orders, or operate our communications. When we migrate our store, we may import your existing Noot customer and order history from our previous commerce systems. Public social-post information is collected when you submit a link or otherwise ask us to review it.
How we use information
We use information to provide and secure your account; process payments and orders; manage Auto Delivery, coupons, rewards, and referrals; arrange fulfillment; answer questions; resolve problems; and keep business, tax, and fraud-prevention records.
We also use first-party activity information to understand how our store works, improve products and services, and support unfinished checkouts. Where permitted, we send relevant product news, offers, reminders, and customer communications according to your preferences. Marketing consent is not a condition of buying a product.
Where data-protection law requires a legal basis, we rely on performing our agreement with you for orders and account services; legal obligations for required records; legitimate interests for security, customer support, and proportionate service improvement; and consent where required for marketing or non-essential tracking. You may withdraw consent without affecting processing that was lawful before withdrawal.
Cookies & analytics
We use cookies, local storage, and similar browser technologies to maintain sign-in sessions, remember cart and checkout selections, attribute referrals or offers, control repeat popups, and understand first-party shopping activity. Some technologies are needed for the service you request; others support analytics or preferences.
Our storefront currently records first-party page, cart, and checkout events. At the effective date of this policy, the storefront does not dispatch those events to Google Analytics, Google Ads conversion tags, or Meta Pixel/Conversions API. A reference to these platforms in this policy does not mean their tracking is enabled.
Before enabling new advertising or remarketing integrations, we will update the relevant disclosures and provide consent or opt-out controls where required. Those tools can involve sharing identifiers and browsing or purchase events with an advertising platform for measurement, audience matching, and personalized ads. We will not treat acceptance of these terms or a purchase alone as consent where separate consent is required.
You can block or delete cookies and site storage in your browser. Doing so may sign you out or clear your cart. See Your choices & rights for other ways to contact us about tracking and advertising.
When we share information
- Service providers: hosting and security providers, payment processors (such as Stripe, Braintree, or PayPal, depending on your payment method), fulfillment providers and carriers, email delivery providers such as SendGrid, SMS providers such as Twilio when enabled, and customer-support providers. They receive information needed to perform their services. A payment or delivery provider may also process information for its own fraud, compliance, or service purposes under its own privacy notice.
- Services you choose: when you request AI-assisted plant-care or support responses, your question and any submitted images may be processed by the service providers powering that feature. Avoid including sensitive information that is not needed for your question. Linked services, including a connected plant-care app, may have separate terms and privacy notices.
- Referral participants: a referrer may see referral activity and earned rewards. We do not provide them with your payment credentials or shipping address.
- Legal, safety, and business needs: where necessary to comply with law or a valid legal request, protect people and services, address fraud, or evaluate or complete a business transfer with appropriate safeguards.
We do not sell customer lists for money. Some privacy laws define "sale" or "sharing" more broadly, including certain advertising disclosures. You can request an opt-out of any sale, sharing, or targeted advertising that applies to your information using the contact details below. We do not use sensitive personal information to build advertising audiences.
Email & SMS preferences
You can change marketing email preferences in your account profile, use the unsubscribe or preference link in a marketing email, or email support@growwithnoot.com. You do not need an account password to request an email opt-out. We may keep a limited suppression record so we continue to respect your choice.
Where the law allows, customers may receive marketing unless they opt out. Where prior consent is required, it must be obtained separately. Order receipts, security notices, and other necessary service messages can continue after a marketing opt-out.
SMS marketing requires a separate opt-in; purchasing or agreeing to this policy does not subscribe you to marketing texts. Follow the opt-out instructions in a message or change SMS preferences in your account. Carrier message and data rates may apply.
Retention & security
We keep information for as long as reasonably needed for the purposes described here, including account services, fulfillment, resolving disputes, and legal, accounting, or security obligations. Retention depends on the type of record, your relationship with us, and applicable requirements. Financial records may need to remain after an account is closed; short-lived sessions, draft carts, and raw technical logs have different retention needs.
We may delete, de-identify, or restrict information when it is no longer needed. Backups and legally retained records may follow separate retention cycles. Closing an account does not automatically erase every transaction or audit record.
We use technical and organizational safeguards, including access controls and protection for credentials and sensitive records. No website, transmission, or storage system can be guaranteed completely secure. Please keep your password and sign-in links private and contact us if you suspect unauthorized access.
Your choices & rights
Update contact information and communication preferences in your account. For an access, correction, export, deletion, restriction, objection, or advertising opt-out request, email support@growwithnoot.com with "Privacy request" in the subject. Tell us the account email and what you would like to do. Do not send a password or full payment details.
Depending on where you live and which laws apply, you may have rights to know about or access information, obtain a portable copy, correct or delete it, opt out of sale, sharing or targeted advertising, limit certain sensitive-information uses, object to processing, or withdraw consent. You may also be able to use an authorized agent or appeal a denied request. To appeal, reply to our decision or email us with "Privacy appeal." You may complain to your local data-protection authority.
We will verify requests proportionately, respond within applicable legal time limits, and explain any lawful limitations. We will not unlawfully discriminate against you for exercising a privacy right. We may need to retain records for legal obligations, security, or completing an order you requested.
Browser privacy signals, including Global Privacy Control, are not a substitute for email unsubscribe. This site does not currently offer a browser-based advertising consent manager. To make a tracking or advertising opt-out request directly, use the email above. Where a law requires us to honor a recognized opt-out signal, we must do so for the processing to which that law applies.
You can separately manage platform advertising preferences through Google My Ad Center and Meta Ad Preferences. These controls are operated by those platforms and do not change your Noot email preferences.
International use & children
Noot is based in the United States. We and our service providers may process information in the United States and other countries, whose privacy laws may differ from yours. Where required, we use appropriate transfer safeguards, such as approved contractual protections. Contact us for information about safeguards applicable to your data.
Our store is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. A parent or guardian who believes a child has provided information should contact us so we can investigate and take appropriate action.
Updates to this policy
We may update this policy as our services or legal requirements change. The effective date above identifies the current version. We will provide additional notice or request consent for material changes where required. Third-party websites linked from our services have their own privacy practices.