Controlled-beta privacy notice · v0.1 · effective 2026-07-27

Privacy

This notice describes the current controlled beta. It will be reviewed with counsel before broad self-service launch.

Information we collect

We collect contact and organization details, access-request context, account records, parcel identifiers and boundaries, documents a partner is authorized to provide, stewardship and monitoring records, security logs, and payment-state identifiers if a separately approved payment flow is activated. Public forms should not be used for deeds, identity documents, or other sensitive records.

Why we use it

We use data to evaluate beta fit, operate authentication and support, perform agreed parcel analysis, preserve evidence provenance, generate partner deliverables, secure the service, investigate incidents, and meet contractual or legal duties. We do not sell personal information.

Processors and transfers

The present service uses DigitalOcean for hosting, Caddy for encrypted web transport, and Supabase for authentication and database services. Configured engagements may also use mapping, Earth-observation, object-storage, email, AI, or payment providers. The engagement data schedule identifies material providers before sensitive data is transferred. Stripe customer checkout remains disabled unless separately activated.

Retention and deletion

We retain beta records only as long as needed for the engagement, security, audit, backup, contractual, and legal purposes. The design-partner agreement and data schedule set project-specific retention and deletion expectations. Backup deletion can lag operational deletion. We will document exceptions.

Security and limits

We use role-based access, row-level database controls, server-only credentials, encrypted transport, structured logs, release verification, and backups appropriate to the beta. No internet service is risk-free, and we do not claim a security certification or absolute protection.

Access, correction, export, and deletion

Email justin@viridisconservation.com to request access, correction, export, or deletion. We may need to verify identity and authority, and may retain limited records when required for security, audit, contract, or law.