1. Who this policy covers
This policy applies to the myploton.earth website, account service, parcel questionnaire, automated analysis and report pages. For these activities, myploton.earth is the data controller. Privacy questions and rights requests can be sent to support@myploton.earth.
2. Information we collect
Anonymous draft information
Before registration, your questionnaire answers, plot name and drawn boundary may be stored in your browser on your device. They are submitted to our service only when you choose to create and submit a report. Clearing browser storage may remove an unsubmitted draft.
Account information
We process your email address, display name, authentication provider, provider account identifier, email-verification state and account timestamps. If you sign in with Google, the Google data we receive is limited to the basic identity information authorised for sign-in, such as your identifier, name and verified email address.
Parcel and report information
When you submit a report, we store the plot name, questionnaire answers and ranked goals, the polygon coordinates you supplied, calculated area and perimeter, centroid, municipality or parish context, evidence-source records, analysis artifacts, findings, scores, confidence, report status and an audit history.
Historical private-test documents
Property-document uploads are not part of the automated digital report product. If you uploaded a document during an earlier private test, we retain only the records and private files needed to let you access or delete it under this policy. Those files are not inputs to a newly purchased automated report.
Service and support information
Our infrastructure may process IP address, browser and device information, essential session cookies, request timestamps, security events and technical error records. If you contact us, we process the message and contact details needed to respond.
Payment and credit information
When Stripe payments are enabled, we store the selected credit pack, amount, currency, purchase status, Stripe Checkout, payment, customer and invoice identifiers, signed-event records, credit-ledger entries, report unlocks, immediate-supply acknowledgement and refund or dispute incident status. Stripe collects and processes payment details on its hosted checkout; myploton.earth does not receive or store complete card numbers or card security codes.
3. How we use Google user data
Google sign-in is used only to authenticate you, create or recover your myploton.earth account, link an authorised beta identity when you explicitly request it, and protect access to your private reports. We do not request access to Gmail, Google Drive, contacts, calendars or other Google content. We do not sell Google user data or use it for advertising.
4. Why we process information
- Provide the service: create your account, preserve your submitted plot, run parcel-specific research, produce reports and show only reports owned by your account.
- Perform requested steps: generate a preview, process connected datasets and automatically deliver a report when you unlock it.
- Keep the service safe: prevent misuse, investigate failures, maintain an audit trail and protect account access.
- Comply with law: respond to valid legal requests and meet accounting, consumer and data-protection obligations when applicable.
- Communicate: send essential account, security, report-status and support messages. Optional marketing requires a separate choice.
Depending on the activity, our legal basis is performing a contract or taking requested pre-contract steps, our legitimate interests in operating and securing the service, compliance with legal obligations, or consent where the law requires it.
5. Automated machine analysis
myploton.earth automatically combines your submitted polygon and goals with public or licensed land datasets. It produces findings, confidence levels and suitability scores without per-report manual analysis. These outputs may be incomplete. They do not make a legal decision about you, determine ownership, grant permission or replace your own purchasing decision.
Historical private-test documents were quarantined and sent to the Verisys Antivirus API at its Germany endpoint for malware scanning. Files reported clean could be processed with Azure Document Intelligence in the West Europe region. New property-document uploads are disabled, and historical files remain access-controlled for owner download or deletion.
7. International processing
Some service providers may process information outside your country or outside the European Economic Area. Where data-protection law requires safeguards for such transfers, we use the safeguards made available by the relevant provider and required by applicable law.
8. How long information is kept
Account details and submitted reports remain stored until you delete them or ask us to delete them, subject to the limited exceptions below.
You can permanently delete an individual historical private-test document or an entire report from that report page. A document deletion immediately revokes download and processing access, removes its derived records and deletes the original and private extraction artifact from object storage. A failed storage deletion is retained only as a minimal retry job and automatically retried. You can delete a customer account and all of its reports from Privacy & deletion. Account access is revoked immediately; active document, report and account deletion is completed immediately when possible and automatically retried so that active deletion completes within 24 hours.
After account deletion, a minimized authentication identifier is retained for 90 days for account-security and abuse-prevention purposes. Invoices, payment and dispute records, immediate-supply consent evidence and credit-ledger entries are pseudonymized and retained for 10 years where needed for Portuguese accounting, tax, consumer and legal obligations. They are not available through the deleted account.
Our encrypted-backup expiry target is 30 days. Public charging remains blocked until that hosted backup setting and a restore-and-expiry test are verified. Unsubmitted browser drafts remain on your device until you submit them, replace them or clear browser storage. Short-lived session data expires automatically.
Before identifiable report data is deleted, a buyer outcome and score may be added to a non-identifying aggregate counter. The aggregate contains no user, report, property, location, free-text or date identifier and cannot be used to reconstruct a report. Contact support@myploton.earth for an access, correction or deletion request that cannot be completed through the account controls.
10. Your privacy rights
Depending on the law that applies to you, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent without affecting earlier lawful processing. You may also complain to your local data-protection authority. For matters connected with Portugal, information is available from the Comissão Nacional de Proteção de Dados (CNPD).
Send a request to support@myploton.earth. We may need to verify that you control the relevant account before acting.
11. Security
We use account-level access controls, server-side ownership checks, encrypted network connections, restricted administrative access and audit records. No online service can promise absolute security, so please use a strong password and protect access to your Google or email account.
12. Children
The service is intended for adults evaluating land and is not directed to children. Do not create an account if you are under 18.
13. Changes and contact
We may update this policy as the beta gains payments, document uploads, new data sources or other capabilities. Material changes will be dated and, where appropriate, communicated in the service. Questions can be sent to support@myploton.earth.