1. Who We Are
The controller of your personal data is Bigpixel Maciej Nowakowski, NIP 659 153 01 34(“we,” “us,” or “our”), operating plantivoai.com and the PlantivoAI garden design platform. This Privacy Policy explains how we collect, use, and protect personal data when you use the Service (including join-interest requests, accounts, uploads, design preferences, AI visualizations, history, sharing, and credit-pack checkout).
2. Data We Collect
We may collect the following categories of data:
- Account data — name, email address, and authentication credentials managed through our identity provider (Amazon Cognito)
- Join-interest / access data — email address and related signup metadata when you request access or create an account
- Garden content — photos you upload, optional edit masks, design preferences you select, free-text design descriptions, generated visualizations, plant suggestions, and related project metadata
- Sharing data — share tokens and public share links you enable for designs
- Usage & credit data — features used, generation requests, credit balance and deductions, and session information
- Payment data — billing-related identifiers and purchase records for credit packs. Card details are processed by Stripe; we do not store full payment card numbers
- Technical data — IP address, browser type, device information, and diagnostic logs
- Communications — messages you send via support or in-app feedback
3. How We Use Your Data
We use personal data to:
- Provide, maintain, and improve the Service
- Authenticate users and secure accounts
- Process garden photos and preferences, run AI design generation, store projects, and deliver history and share links
- Enforce credit balances and fulfill credit-pack purchases via Stripe
- Manage join-interest requests and access invitations
- Monitor performance, prevent abuse, and troubleshoot issues
- Send service-related notices and respond to support or feedback
- Comply with legal obligations
We process your data on the legal bases of contract performance, legitimate interests (such as security and product improvement), and consent where required (for example optional marketing, if offered).
4. AI Processing
When you generate a design, your uploaded garden photos, optional masks, selected preferences, and related descriptions may be processed by automated systems, including third-party AI providers (currently OpenAI), to produce visualizations and planting suggestions. Processing is performed to deliver the requested functionality. We configure these systems to use your content to provide the Service; we do not sell your private uploads for unrelated advertising profiles, and we do not use your private uploads to train public third-party models without your explicit consent.
5. Data Sharing
We do not sell your personal data. We may share data with:
- Infrastructure providers — cloud hosting, object storage, databases, and authentication (including Amazon Web Services) that process data on our behalf
- AI providers — such as OpenAI, to generate design outputs you request
- Payment processors — Stripe, to complete credit-pack checkout and related payment operations
- Professional advisers — where required for legal, accounting, or compliance purposes
- Authorities — when required by law or to protect rights and safety
When you enable sharing for a design, anyone with the share link may view the shared visualization and related public share content. All processors are bound by contractual obligations to protect your data and use it only as instructed.
6. International Transfers
Your data may be processed in the European Economic Area and, where necessary, in other countries with appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognized under GDPR.
7. Retention
We retain account, content, usage, credit, and purchase data for as long as your account is active or as needed to provide the Service. Join-interest emails may be retained until we invite you or you ask us to delete them. After account deletion, we delete or anonymize personal data within a reasonable period, except where retention is required by law or for legitimate security or accounting purposes (including payment records).
8. Security
We implement technical and organizational measures to protect your data, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; please use a strong, unique password for your account.
9. Your Rights
If you are in the EEA or UK, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based, and lodge a complaint with your local data protection authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych).
To exercise your rights, contact privacy@plantivoai.com. We will respond within the timeframes required by applicable law.
10. Cookies & Local Storage
We use essential cookies and local storage to maintain sessions, remember preferences, and keep the Service secure. We do not use non-essential tracking cookies without your consent.
11. Children
The Service is not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will delete it promptly.
12. Changes
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
13. Contact
Controller / administrator: Bigpixel Maciej Nowakowski, NIP 659 153 01 34.
Privacy inquiries: privacy@plantivoai.com.