Privacy Policy

1. Information We Collect

SmartPluvia collects only the minimum information necessary to provide the Service. When you create an account, we collect your email address, display name, and password hash. If you sign in via Google OAuth, we receive your name, email address, and profile picture URL from Google — we do not receive or store your Google password.

When you use the Service, we store your irrigation project data (sprinkler placements, zone configurations, pipe routing) on our servers. Project data is associated with your account and is not shared with other users unless you explicitly share or publish it.

If you subscribe to a paid tier, payment processing is handled entirely by our payment providers (Paddle or WayForPay). We do not collect, store, or have access to your credit card numbers or bank account details. We receive only transaction confirmations and subscription status from these providers.

2. How We Use Your Information

We use your information to: provide and maintain the Service; authenticate your identity and manage your account; store and sync your irrigation project data; process subscription payments through third-party providers; send essential service communications (account verification, password resets, subscription updates); and improve the Service based on aggregated, anonymized usage patterns.

We do not use your personal data for advertising, profiling, or automated decision-making. We do not sell, rent, or trade your personal information to third parties.

3. Data Storage and Security

Your data is stored on servers hosted by Railway, with data centers in the United States. All data transmission between your browser and our servers is encrypted using TLS (HTTPS). Passwords are hashed using bcrypt and are never stored in plain text.

Authentication uses JSON Web Tokens (JWT) stored in your browser's localStorage — not in HTTP cookies. This means your authentication token is never automatically sent with requests to third-party domains, reducing the risk of cross-site request forgery.

We implement security headers including Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), X-Content-Type-Options, X-Frame-Options, and Referrer-Policy to protect against common web vulnerabilities.

4. Cookies and Browser Storage

SmartPluvia does not set any HTTP cookies. All client-side data is stored in your browser's localStorage and is never sent to our servers automatically. For full details on what we store in your browser, please see our Cookie Policy.

5. Third-Party Services

Plausible Analytics: We use Plausible Analytics for website analytics. Plausible is a privacy-focused, cookie-free, GDPR-compliant analytics service. It does not use cookies, does not collect personal data, does not track users across websites, and does not use tracking pixels or fingerprinting. No consent banner is required. All analytics data is aggregated and anonymous.

Paddle: International payment processing is handled by Paddle.com, which acts as Merchant of Record. Paddle processes payments in accordance with its own privacy policy. We receive only transaction status and subscription information from Paddle.

WayForPay: Payments within Ukraine are processed through WayForPay in accordance with its privacy policy. We receive only transaction confirmations and subscription status.

Google OAuth: If you choose to sign in with Google, the authentication flow is handled by Google. We receive your name, email, and profile picture. Google does not set cookies on our domain through this process. You can revoke SmartPluvia's access in your Google account settings at any time.

6. Data Sharing

We do not share your personal data with third parties except in the following cases: with payment processors (Paddle, WayForPay) to process your subscription payments; when required by law, regulation, or legal process; to protect the rights, property, or safety of SmartPluvia, our users, or the public; and with your explicit consent.

If you publish a template on the SmartPluvia Marketplace, your display name and the template content will be visible to other users. Project data shared via public links is accessible to anyone with the link.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with similar data protection laws, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you. Right to Rectification: You may request correction of inaccurate personal data. Right to Erasure: You may request deletion of your personal data ("right to be forgotten"). Right to Data Portability: You may request your project data in a standard, machine-readable format (JSON export). Right to Restriction: You may request that we restrict processing of your personal data. Right to Object: You may object to processing of your personal data for specific purposes.

To exercise any of these rights, please contact us at support@smartpluvia.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Data Retention

We retain your account data and project data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms of Service).

Aggregated, anonymized analytics data (which cannot identify you) may be retained indefinitely for service improvement purposes.

9. Children's Privacy

SmartPluvia is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information promptly. If you believe a child under 16 has provided us with personal data, please contact us at support@smartpluvia.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will notify registered users via email at least 14 days before the changes take effect.

11. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at support@smartpluvia.com.