Privacy Policy

1. Who this policy covers

This Policy applies to PermacultureData.com, its public pages, accounts, dashboards, databases, and related services. Permaculture Data LLC, based in Texas, United States, is responsible for the personal information described here.

2. Information we collect

• Account information: your email address, profile details, account preferences, and subscription status. Our authentication provider handles credentials; we do not receive your password in readable form.
• Billing information: Stripe processes payment details. We receive limited records such as customer and transaction identifiers, payment status, plan, and renewal date—not your full card number.
• Service content: searches, saved preferences, design information you choose to store, and messages you send to support.
• Contributed photographs: image files, their technical metadata, the library item and view they depict, your account identifier, moderation decisions, and publication status. Pending submissions are restricted to you and authorized reviewers; approved defaults are publicly available.
• Technical information: IP address, browser and device type, timestamps, pages and features used, cookie identifiers, error logs, and security events.

3. How and why we use it

We use personal information to create and authenticate accounts, provide paid access, process renewals, answer support requests, remember settings, improve features, monitor reliability, prevent abuse, protect the Service, and meet legal and accounting obligations. We may send essential account, payment, security, and policy notices. Marketing messages, if offered, will include a way to unsubscribe.

Where a legal basis is required, we rely on performance of our contract, our legitimate interests in operating and securing the Service, compliance with law, and consent for optional communications or technologies where required.

4. When information is shared

We share information only as needed with vendors that help operate the Service, under contractual and confidentiality obligations. Primary providers include Supabase for database and authentication services, Stripe for payments, and Vercel for hosting and delivery, and Google for optional website analytics, and Meta for optional advertising measurement when you consent.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, prevent fraud or harm, protect rights and security, or complete a merger, financing, or sale of the business. We may share aggregated or deidentified information that does not reasonably identify an individual.

5. Cookies, analytics, and advertising choices

We use essential cookies and similar storage to keep you signed in, remember settings, maintain security, complete checkout, and remember your cookie choice. Blocking essential cookies may prevent account features from working.

With your permission, we use optional website analytics to understand visits, page use, account creation, checkout, subscriptions, and creation of Designs. Our analytics provider may process cookie identifiers, truncated or approximate location derived from an IP address, browser and device information, page paths, and event timestamps. With analytics consent, we also remember an ad label and landing-page version for up to 30 days to measure which of our ads lead to subscriptions. These labels may be attached to your Stripe checkout and subscription records. For Google Analytics, we do not enable personalized advertising features, send search terms or payment-session URLs, or intentionally send names, email addresses, Design titles, photographs, or other user-provided content.

Google Analytics does not load unless you consent. The banner offers “Yes, allow” for analytics and Meta advertising tracking, or “No thanks” to decline both. Declining does not limit the Service. You may change or withdraw your choice at any time using the cookie settings below. When you withdraw analytics consent, we stop analytics collection and remove the Analytics cookies available to us in your browser.

On our ad landing pages, an optional “Allow analytics and ad tracking” checkbox replaces the popup and sits above the separate Terms agreement. It starts unchecked unless you have already allowed both types of tracking. Checking it saves permission immediately; unchecking it withdraws permission. Leaving it unchecked does not prevent account creation.

With your advertising permission, the Meta Pixel reports page views on selected public pages, including our ad landing pages, and reports successful account creation, checkout initiation, and confirmed subscription purchases. Previous analytics consent does not grant permission for Meta tracking. Accepting our Terms or this Privacy Policy does not grant optional tracking permission either.

The Pixel shares public page URLs, browser or ad-click identifiers, website visits, conversion event identifiers, and purchase amount and currency with Meta to measure and improve our Facebook and Instagram ads. Meta may also receive technical information such as IP address and browser details and use the information to match activity to its users and personalize advertising, as described in its Privacy Policy. Conversion reporting uses an isolated page without the account or checkout page URL or referrer. We do not send names, email addresses, passwords, or raw Stripe session IDs in these events. We do not enable automatic advanced matching or use Conversions API. Withdrawing advertising permission stops further Pixel reporting and removes the Meta cookies available to us in your browser. Withdrawal does not undo information already sent.

Your analytics and advertising preferences are stored separately for up to one year in this browser. The banner now accepts or declines both together. With advertising permission, a five-minute marker carries a successful signup across its redirect. Opaque conversion receipts are stored in this browser with a one-year expiry to avoid recounting events on refresh; withdrawing permission removes them.

6. Retention and security

We keep personal information only as long as reasonably needed for the purposes above, including providing your account, resolving disputes, preventing fraud, and meeting tax, accounting, and legal requirements. Backup copies may persist for a limited period after deletion. Rejected image submissions may be retained for a limited moderation and abuse-prevention period. Approved library photographs may remain part of the shared library after an account closes, subject to applicable law and valid takedown requests.

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. No online service can guarantee perfect security, so please use a strong, unique password and enable two-factor authentication when available.

8. Children and international use

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided it, contact us so we can investigate and delete it as appropriate.

The Service is operated from the United States. Information may be processed in the United States or other places where our providers operate. Where required, we use recognized safeguards for international transfers.

9. Policy changes

We may update this Policy as the Service and applicable law change. We will revise the effective date and provide reasonable notice if a change materially affects how we use personal information.