Privacy Policy

FloraVista ("we", "us") makes plant lists for garden beds from a photo and a few answers. This policy explains what we collect, why, who helps us process it, and the choices you have. Questions: contact@floravista.ai.

What we collect

• Your yard photo. The picture you upload or take. When it arrives we re-encode it, which removes the camera data stored inside it, including GPS location, and we store it privately to make and show your result.
• Your answers. ZIP code, bed size, sun hours, whether pets or deer use the yard, and the style you picked. From the ZIP code we work out your hardiness zone and state. We do not ask for your street address.
• Account details. If you sign in, your email address and a user id from our sign-in provider. If you use Google, we receive your email address from Google; we do not receive your Google password.
• Purchases. What you bought, when, the amount, and refund status. Card details go directly to Stripe, our payment processor; we never see or store your card number.
• Usage and limits. A random anonymous id kept in a cookie, a one-way keyed hash of your IP address (we do not store the raw address), your device type, where you came from (for example a search engine or a link), and the steps you take on the site, such as "uploaded a photo" or "opened the list". We record these steps in our own database.
• Messages you send us, including plant problem reports, refund reasons and waitlist sign-ups.

How we use it

• To choose plants for your bed, draw the picture of your new bed, and show you the result.
• To keep the free preview fair (for example one free result per visitor) and to prevent abuse.
• To take payment, unlock your list, and process refunds.
• To send a small number of emails about your purchase, including one follow-up about three weeks later asking whether you bought and planted the plants. Waitlist emails only go to people who asked for them.
• To understand which steps work and fix the ones that don't, using counts rather than individual profiles.

We never sell your photo or your personal information, and we do not use your photos to train AI models.

AI processing

• The picture. To draw your new bed, your photo and a description of the chosen plants are sent to an AI image service.
• The photo check. When it is turned on, a smaller copy of your photo is sent to an AI text service that answers one question: does this show a yard?
• Plant notes. The short "why this plant" notes may be written by an AI text service from the plant list and your answers (zone, sun, bed size, pets, deer, style). It never receives your email address.

These services are run by third parties (depending on our settings, OpenAI, Google or Anthropic) that process the data on our behalf under their business API terms. The plant list itself is chosen by our own rules and plant table, not by these services. Pictures are illustrations, not exact plans.

Who processes data for us

• Supabase: database, file storage and sign-in.
• Vercel: hosting.
• Stripe: payments and refunds.
• The AI providers named above: pictures, the photo check and short plant notes.
• Resend: transactional email, when email is turned on.
• Google Analytics: aggregate site statistics, when it is turned on.

We may also disclose information when the law requires it, or to protect our users or the service.

Cookies

We use a few cookies that the site needs: one keeps your anonymous id for up to a year so your free result and price stay the same, others keep you signed in or remember where to return after sign-in. The anonymous id is random; it does not contain your name or email. If analytics is turned on, Google Analytics sets its own cookies to count visits. You can block cookies in your browser, but the free preview and sign-in will not work without them.

How long we keep it

Results you paid for are kept for as long as your account exists so you can come back to your list. Free results and their photos are kept so you can come back to them too; we do not delete them automatically yet, so if you want one gone, email us and we will delete it. Purchase records are kept as long as tax and accounting rules require. Event records carry your anonymous id, not your name, and are used to count what works.

Your choices and rights

You can ask us to show you, correct, or delete your data, including your photos and account, by emailing contact@floravista.ai from the address on your account. Depending on where you live (for example California or the EU/UK) you may have additional rights, such as to object to processing or to data portability; we honor them for everyone. We will not treat you differently for exercising them.

Security

Uploads and clean pictures are stored privately and shared only through short-lived links. Access to our data is limited to the people who run FloraVista. No system is perfectly secure, so please don't upload photos that show people or anything you wouldn't want stored.

Children

FloraVista is not for children under 16, and we do not knowingly collect their information.

Changes

If we change this policy we will update the date above, and for significant changes tell signed-in users by email. See also our Terms of Service.