Privacy Policy

Who is the controller

The data controller is the seller below. They decide why and how personal data is processed for LandCheck.

What we store

• Order and delivery data: your email address; parcel coordinates, address text, selected map point and cadastral reference(s); property type; report language and purpose; any optional purpose note, listing URL or uploaded-document references you submit; and your checkout confirmations.
• Job and report data: report status and errors, quality results, generated PDFs, maps, source packages and AI notes, private-link and email-delivery events, and the receipt record.
• Payment metadata received from Stripe: payment status, amount, currency, Checkout Session and PaymentIntent references, Stripe event references and the LandCheck job ID. LandCheck does not receive or store the full card number or CVC.
• If you allow optional measurement, the order can store Google Analytics/Ads attribution identifiers (such as a GA client ID, gclid, gbraid or wbraid) so a paid order can be attributed to its visit.
• Site-journey logs: a random visit ID, page path with private report tokens removed, a shortened IP network, device class, leading browser language, referrer host, campaign parameters, searches, selected parcel and checkout/delivery events. After checkout, order events may connect the job and delivery email to that visit.
• Security and server logs used for abuse prevention, troubleshooting and service reliability.

Why we process it and our legal bases

• To perform the contract: identify the parcel, create and quality-check the report, take payment, provide the private page and receipt, send service emails and handle support.
• To meet legal obligations, including payment, tax and accounting record-keeping where applicable.
• For legitimate interests in fraud and abuse prevention, security, debugging, delivery monitoring and service reliability.
• Before you choose, the site tells Google that a visit happened through an anonymous signal, without a cookie or anything that identifies your device or lets Google recognise you on a later visit. Accepting optional cookies turns on identifiable analytics and advertising measurement. You can refuse or change that choice without losing checkout access.
• We record the Terms, Privacy and immediate-delivery confirmations given at checkout as evidence of the contract, not as a separate blanket consent to process the order.

Services the data passes through

• Stripe processes checkout, payment and fraud-prevention data. Stripe receives the delivery email and LandCheck order references as part of Checkout.
• Buyer email is sent through Amazon Simple Email Service (SES) when configured, with Postmark and then the operator's configured SMTP relay as fallbacks. The provider used receives the recipient address, message content, private report link and any inline delivery image.
• The production hosting and infrastructure provider stores and serves the order metadata, report files, private delivery page and logs described above.
• We may process analyst notes and translations through OpenAI, xAI (Grok) and Google Gemini, according to availability and the provider chain we configure; Gemini is also our translation fallback. We send parcel location/reference, report findings and an optional purpose note, but not the buyer email or payment details, in those AI prompts.
• Map and public-data requests can pass through Mapbox, Esri, CARTO, OpenStreetMap/OSRM and the public GIS services cited in the report. A tile or data request reveals the requested map area and ordinary connection data such as the requesting IP; these services are not given the checkout email or card metadata by LandCheck.
• If optional measurement is allowed, Google receives online identifiers and website/purchase event data, including the LandCheck transaction ID, value, currency and report-language option. LandCheck does not sell personal data.

International processing

Some payment, mail, AI, map and measurement providers may process data outside the EEA. The exact locations and transfer safeguards depend on the operator's current provider accounts and contracts; contact us for the current details.

Where a provider processes data outside the EEA, we rely on that provider's own transfer safeguards — the EU-US Data Privacy Framework or the European Commission's standard contractual clauses, depending on the provider. We do not publish a per-provider list here; ask us and we will tell you which safeguard applies to a named provider.

How long we keep it

We keep a report, its files and its order metadata for 90 days, then delete them, including the buyer email; you can also delete them earlier from the private report page.

Site-journey files and general application and server logs have no fixed automatic deletion period; we delete or rotate them periodically. Stripe, mail, AI, map and Google services apply their own retention rules, and deleting our copy does not delete theirs.

Cookies and browser storage

LandCheck stores necessary language and cookie choices in your browser. The Google tag loads before you choose, but with storage denied it writes no cookie or device identifier and sends only an anonymous signal that a visit happened. Accepting optional cookies enables identifiable analytics and advertising measurement. The browser also stores a per-order purchase marker after an allowed conversion is sent, to prevent a reload from sending it again. Stripe Checkout uses its own necessary payment and fraud-prevention technology.

Automated and AI-assisted processing

The report is produced automatically from public data and AI-assisted interpretation in the purchased language(s). The AI prompt contains parcel and report facts but never your email address or payment details. AI output is informational and does not make a decision with legal effects about you. Do not put personal data about yourself or another person in the optional purpose note or uploaded material unless it is necessary for the report.

We select providers whose terms state that data sent through their API is not used to train their models, and we check that setting on our own provider accounts. We cannot audit a provider's internal practice beyond the terms it publishes.

Your rights

You can ask for access, rectification, erasure, portability, restriction or object to processing, and can withdraw an optional consent at any time. Use the "See or delete my data" link on the private report page or contact us with enough information to identify the order.

You may complain to a data-protection authority. In Poland this is UODO; in Greece it is the Hellenic Data Protection Authority (HDPA).

Contact

Email us at support@kandyb-studio.eu.