Privacy Policy

Effective May 20, 2026

1. Who we are

This Privacy Policy explains how Landscaip (“Landscaip,” “we,” “our”) collects, uses, and shares information when you use our website and the Landscaip AI landscape design service (the “Service”). By using the Service you agree to the practices described in this Policy and our Terms of Service.

2. Information we collect

We collect the following categories of information:

  • Account information. Your name, email address, and password hash when you create an account. If you sign in with Google we receive your name, email, profile image URL, and a Google account identifier.
  • User Content. Photos, project names, ZIP codes / hardiness zones, custom prompts, in-painting masks, and other inputs you submit to the Service.
  • Generation data. Style presets, settings (time of day, season, weather), selected library items, AI model choices, and the resulting renderings and videos.
  • Billing information. When you purchase credits, our payment processor (Stripe) collects your payment details. We receive billing email, last 4 digits, country, ZIP code, and a Stripe customer / charge identifier. We do not store full card numbers.
  • Usage and device data. IP address, browser user-agent, timestamps, pages viewed, feature usage, error logs, and basic device characteristics. Hosting and serverless logs are retained for a limited period to debug and secure the Service.
  • Cookies. Strictly-necessary cookies used to keep you signed in and to maintain checkout sessions.

3. How we use information

We use the information we collect to:

  • Provide and operate the Service (host photos, generate renderings, manage credits, deliver downloads).
  • Process payments and prevent fraudulent charges.
  • Authenticate users and secure accounts.
  • Send transactional emails (signup confirmation, receipts, account notices).
  • Respond to support requests and provide customer service.
  • Diagnose bugs, monitor performance, and improve reliability.
  • Comply with legal obligations, enforce our Terms, and protect users.

We do not sell your personal information. We do not use your User Content or Output to train AI models for ourselves or third parties.

4. Sub-processors and sharing

We share data with the following service providers as needed to run the Service:

  • Stripe, Inc. — Payment processing. Privacy Policy.
  • Supabase, Inc. — Database, authentication, and private object storage (uploads, renderings, videos). Privacy Policy.
  • Google LLC — AI image and video generation via the Gemini and Veo APIs. Your prompts and uploaded photos are transmitted to Google to produce renderings. Privacy Policy. When signing in with Google, Google also acts as an identity provider.
  • Vercel Inc. — Hosting and serverless function runtime. Privacy Policy.
  • Twilio Inc. — SMS text messaging to customers who have opted in (reminders, quotes, invoices). Privacy Policy.
  • Resend — Transactional email delivery. Privacy Policy.

We do not sell your personal information, and we never share your mobile phone number or SMS opt-in consent with third parties or affiliates for their own marketing. Text-message consent you give to a landscaper is used only to send you service messages from that business — it is not shared for any other purpose.

We may also disclose information when required by law, to enforce our Terms, to protect the rights, safety, and property of Landscaip or others, or in connection with a corporate transaction such as a merger or acquisition (in which case the acquirer will be bound by this Policy unless you are notified and given a chance to opt out).

5. AI processing

When you generate a rendering or video, the source photo, your prompt, style preset, and settings are sent to a third-party AI provider (currently Google) for processing. The Output is returned to us, stored in your account, and made available for you to download. Per Google’s API terms in effect, data submitted via paid Gemini API endpoints is not used to train Google’s general-purpose models. Provider terms may change over time; we will update this Policy if a new sub-processor is added.

6. Data retention

We retain your account, projects, uploads, and renderings for as long as your account is active. You may delete individual images, generations, or your entire account at any time, after which the corresponding files are removed from our active systems within a reasonable period. Routine backups may retain residual copies for up to thirty (30) days before being overwritten. Logs and billing records are retained as required for tax, accounting, and security purposes (typically up to seven years).

7. Your rights

Depending on where you live you may have certain rights over your personal information, including the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your information (subject to legal retention obligations).
  • Export a copy of your information in a portable format.
  • Object to or restrict certain processing, including opting out of marketing emails (we currently only send transactional emails).

California residents have additional rights under the CCPA / CPRA, including the right to know, the right to delete, and the right to non-discrimination for exercising those rights. EEA and UK residents have rights under the GDPR / UK GDPR, including the right to lodge a complaint with a supervisory authority. To exercise any of these rights, email support@landscaip.co from the email address on your account.

8. Children

The Service is not directed to children under 13 (or 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it.

9. International transfers

Landscaip is operated from the United States. Sub-processors may also be based outside your country. When personal information is transferred across borders we rely on appropriate safeguards including standard contractual clauses where applicable.

10. Security

We use industry-standard practices to protect your data, including encryption in transit (TLS), private object storage with row-level access control, hashed passwords (via Supabase Auth), and least-privilege service credentials. No method of transmission or storage is 100% secure; in the event of a security incident affecting your data we will notify you in accordance with applicable law.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes we will update the Effective date and, where reasonable, notify you by email or in-product notice. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact us

Questions about this Policy or how we handle your data? Email support@landscaip.co or visit our contact page.