Skip to content
Vlera Garden
Sign inStart your garden

Legal

Privacy policy

This policy explains what data VleraGarden handles, why we use it, and the choices available to you.

PixelCode LLC operates VleraGarden and is responsible for the account and garden information processed to provide the service. This policy covers our website and apps. Contact support@pixelcodellc.com for privacy questions and data-rights requests. Paddle handles checkout information under its own privacy policy.

We process account and sign-in details, garden records, notes, photographs you upload, location used for weather and gardening features, subscription and AI-usage records, support messages, and technical service data. When notifications are enabled, device registration and notification preferences are also processed. Tester signup stores your email, selected platform and consent record.

We use account and garden information to provide the service you request, synchronize records and answer support requests. Optional AI sharing, location access, notifications and website analytics depend on the choices described below. We also process information needed for service security, fraud prevention, billing and legal obligations.

Before each request, we ask for your consent to share data with OpenAI through our server. The garden assistant sends your question, recent conversation and relevant garden records, which can include notes, plants, care tasks and location. AI plant and seed-packet drafting sends selected photos, available inventory details (including notes) and catalogue matches to OpenAI. Cancelling does not send the request. Selected plant photos are sent through our server to OpenAI for identification or a visual health assessment. Results may be uncertain. Review suggestions before acting; a photo cannot confirm edibility or a definitive diagnosis. We request that AI responses are not stored as response history at OpenAI, but provider security, abuse-monitoring and other applicable retention can still apply. We keep app-side conversations, saved drafts or assessments and usage records needed for the features you use. Declining a request sends no AI payload; it does not erase earlier requests.

Vercel hosts the website and processes technical request data needed to serve it. Supabase provides backend hosting, authentication, database and file storage. OpenAI processes AI requests. OneSignal processes device registrations and delivery information for enabled Android push notifications. Paddle processes purchases and shares billing references and subscription status needed to provide access; payment-card details are entered with Paddle, not in VleraGarden. Cloudflare Turnstile protects tester-signup forms. Google Analytics processes website-usage information only after analytics consent. Garden content is shared with others through collaboration, public links or publication that you choose, or when legally required.

Account and garden records are retained to provide your account until you remove them or request deletion, subject to the deletion process. Verified deletion requests are handled through support; they are not an immediate automated erasure. Billing, security or legal records may need longer retention. Provider backups and logs follow their applicable schedules. We use reasonable safeguards, but do not promise that every provider copy disappears immediately.

Contact support@pixelcodellc.com to request access, correction, deletion or supported exports, or to object to or restrict processing where applicable. We may verify ownership without asking for passwords or full payment details. You may withdraw optional consent for future processing and complain to your competent data-protection authority. Deleting an account or uninstalling the app does not itself cancel subscription billing; use the billing-management process as well.

Some service providers may process data outside your country. Where required, we use appropriate legal safeguards for those transfers.

We may update this policy as the product or legal requirements change. We will update the date above and provide additional notice for material changes when required.

The website loads Google Analytics only after you select Accept analytics. Rejecting analytics does not block the site. Use Cookie settings in the footer to change your choice; withdrawing consent stops future analytics on this browser and removes accessible Google Analytics cookies. We remember your choice locally for up to 180 days. The app also uses local storage for sessions, preferences and offline garden records. Browser or device controls can clear this storage. Android push notifications use a separate opt-in and device permission, and can be turned off in settings.

Where applicable, we process information necessary to perform our agreement with you, such as account access and garden synchronization; with your consent for optional AI sharing, analytics and notifications; to meet legal obligations for billing and recordkeeping; and for legitimate interests in securing the service and preventing fraud, balanced against your rights. You may ask about the grounds for a particular use or withdraw consent for future optional processing.

Weather and location features send selected coordinates or place searches to Open-Meteo. Finding a place name from coordinates uses Photon, hosted by komoot. The location map loads tiles from OpenStreetMap for the displayed area. Requests made directly from your browser or device also disclose network information such as your IP address to those providers. Device location permission is separate from website analytics consent; you can enter a location manually instead of using device location.

VleraGarden is not offered to children under 13. Users aged 13–15 require authorization from a parent or legal guardian. Parents should contact support@pixelcodellc.com before their child creates an account or uses optional processing that requires consent, and may contact us to request access, correction or deletion of their child’s data. If you believe a child is using the service without the required authorization, please contact us.

We store your submitted garden details and AI plan, a browser-session identifier, request status and cost to provide the free plan, enforce the trial limit and restore it for 30 days. With analytics consent, we also store planner steps reached and completed, approximate step duration, saves, print requests and retry-interest clicks, linked to a hashed session identifier. Campaign measurement uses only the source and campaign label, not your email or garden notes. These events help us understand where people leave the planner. If you separately request a paid-retry announcement, we store your email, consent and signup date to send that announcement once if paid retries become available. This does not start a payment or subscription or sign you up for other marketing. Unfulfilled email requests expire after 180 days and are excluded from our contact list; expired records are removed during routine retention maintenance. Withdraw your request by emailing support@pixelcodellc.com.