Privacy Policy

1. Who is responsible

The controller of your personal data is the operator of this website (“PlantPalAI”, “we”). You can contact us about privacy through our contact page or by email to support@plantpal-ai.com.

2. What we collect

We collect only what we need to run the Service:

• Sign-up details: your first name, email address and the confirmations you tick on the sign-up form.
• Messages: your name, email address, topic and message when you use the contact form or email us.
• Service content: photos of plants, notes about your plants and the questions you ask when you use the Service.
• Advertising link details: if you arrive through an ad, the parameters in the link (for example campaign tags and click identifiers such as gclid) are kept in your browser for your visit and sent with the sign-up form so we know which campaign brought you.
• Technical data: your IP address, browser type, the pages you request and the time of the request, recorded in our hosting provider’s server logs.
• Payment data: when paid subscriptions are processed, our payment provider handles your card details; we receive only a confirmation and limited details such as the last digits of the card.

We do not ask for special categories of data such as health or religious information. Please do not include them in what you send us.

3. Why we use it and our legal bases

We use your data:

• to provide the Service you signed up for and to manage your subscription, billing and cancellation (contract);
• to answer your messages and requests (contract or legitimate interest);
• to keep the website secure and working and to prevent fraud (legitimate interest);
• to measure which advertising campaigns bring sign-ups (legitimate interest; where the law requires consent for cookies or similar technologies, we will ask first);
• to meet legal obligations, for example tax and accounting rules (legal obligation).

We do not sell your personal data and do not use it for automated decisions with legal or similarly significant effects.

4. Who we share it with

We share personal data only with providers that help us run the Service, under agreements that require them to protect it, and only as far as needed:

• Netlify: hosts the website and receives contact and sign-up form submissions.
• Cloudflare: provides our domain name system and forwards email sent to our support address.
• Our customer support tool: stores support messages and form notifications so we can answer them.
• Google Fonts: delivers the fonts used on the website; your browser connects to Google to load them, which shares your IP address with Google.
• Payment provider: processes payments at checkout when paid subscriptions are processed.
• Authorities: where the law requires us to share data.

5. International transfers

Some of these providers may process data outside the UK and the European Economic Area. Where that happens, we rely on adequacy decisions or standard contractual clauses to protect your data.

6. How long we keep it

We keep personal data only as long as we need it: sign-up and support records for as long as your subscription lasts and up to 24 months afterwards to handle questions and claims; billing records for as long as accounting law requires; Service content until you delete it or your access ends. Server logs are kept by our hosting provider for a short period.

7. Security

The website is served over an encrypted connection (HTTPS), and access to personal data is limited to people who need it. No system is completely secure; if a breach affects your data, we will inform you and the authorities where the law requires.

8. Your rights

Depending on where you live (for example under the UK or EU GDPR or California law), you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to another provider, and you can withdraw consent at any time. We will not treat you differently for using these rights. To make a request, contact us through our contact page or by email to support@plantpal-ai.com. We may need to confirm your identity and will answer within the time the law requires.

9. Cookies and similar storage

The website does not currently set advertising or analytics cookies. It keeps the parameters of the link you arrived through in your browser’s session storage for the length of your visit. Before we add any analytics or advertising cookies, we will add a consent tool so you can choose. Details are in our Cookie Policy.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us personal data, contact us and we will delete it.

11. Automated processing

The Service uses automated systems, including AI, to produce the results you ask for. These systems do not make decisions about you that have legal or similarly significant effects.

12. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will tell you before it applies.

13. Contact and complaints

Questions or requests about your data: contact us through our contact page or by email to support@plantpal-ai.com. You also have the right to complain to a data protection authority, for example the authority where you live or work.