Privacy Policy

This Privacy Policy describes how PlantTable ("we", "our", "us") collects, uses, stores, and shares information when you use the PlantTable website, mobile applications, and related services (the "Service"). By using the Service you agree to the practices described here.

1. Who we are

PlantTable is a garden-management application that helps gardeners track plants, plan seasons, and receive AI-assisted gardening guidance.

For privacy-related questions or requests, contact us at awarren@planttable.co.

2. Information we collect

Account information

When you create an account we collect your name, email address, and a password (stored only as a salted hash). If you sign in via a third-party provider, we receive the basic profile information that provider exposes.

Garden data you create

The Service is built around the records you create: gardens, beds, plants, varieties, planting dates, status updates, harvest notes, and photos you upload of your plants and garden. This is the substance of your account.

Location

To produce frost-date predictions, planting recommendations, and weather context, we collect the ZIP or postal code you provide. We do not collect precise GPS coordinates from your device.

AI chat conversations

When you use our AI gardening assistant, the messages you send (along with relevant context about your garden, location, and weather) are transmitted to a third-party AI processor — currently Anthropic — for the sole purpose of generating a response. We retain a copy of your conversations on our servers so you can review past chats.

Device and usage data

To deliver push notifications and synchronize data across your devices, we collect a device push token (for example, a Firebase Cloud Messaging token), an app-assigned device identifier, and synchronization metadata such as record version numbers and timestamps. We may also collect basic technical information such as your IP address, browser or app version, operating system, and request logs for security, debugging, and abuse-prevention purposes.

Cookies and similar technologies

Our website uses a small number of cookies necessary for authentication and session management. We do not use third-party advertising cookies or behavioral tracking cookies.

3. How we use your information

• To provide, maintain, and improve the Service.
• To generate planting recommendations, score plant suitability for your location, and surface relevant insights.
• To deliver AI-generated gardening guidance in response to your questions.
• To send transactional emails (account confirmations, password resets) and push notifications you have opted into (planting reminders, harvest alerts).
• To synchronize your data securely across the devices you use.
• To monitor the Service for errors, abuse, and performance issues.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use your garden data or chat conversations to train third-party AI models.

4. Service providers we share data with

We rely on a small number of vetted third-party processors to operate the Service. Each processor receives only the data needed to perform its function, and is contractually obligated to protect that data:

• Laravel Cloud — application hosting and database storage.
• Cloudflare R2 — storage of photos you upload.
• Anthropic — processing of AI chat messages and plant-research prompts.
• Open-Meteo — weather and frost-date data, queried using your ZIP/postal code.
• Google Firebase Cloud Messaging — delivery of push notifications.
• Pusher / Laravel Reverb — real-time data sync between your devices.
• Meilisearch (Railway) — search indexing for your garden records.
• Mailgun — delivery of transactional email.
• Laravel Nightwatch — error monitoring and performance telemetry.

We may also share information when legally required (subpoena, court order) or to protect the safety, rights, or property of PlantTable, our users, or the public.

5. Where your data is stored

PlantTable's primary infrastructure is hosted in the United States. Some of the third-party processors listed above may process or store data in other regions. By using the Service from outside the United States, you consent to the transfer of your information to the United States and the jurisdictions of those processors.

6. How long we keep your data

We retain your account data for as long as your account is active. If you delete your account, we delete your personal information and garden records within 30 days, except where we are required by law to retain specific records (for example, tax or compliance records). Aggregated, de-identified data that cannot be linked back to you may be retained indefinitely for analytics and product improvement.

7. Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and the personal information associated with it.
• Export a copy of your garden data in a machine-readable format.
• Withdraw consent for any processing that relies on your consent.

To exercise any of these rights, contact us at awarren@planttable.co. Residents of California, the European Economic Area, the United Kingdom, and other jurisdictions with applicable data-protection laws may have additional rights under local law; we will honor those rights as required.

8. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at the address above.

9. Security

We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS), hashed passwords, scoped API tokens, and access controls on our infrastructure. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you in accordance with applicable law.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. If the changes are material, we will provide more prominent notice (for example, via email or an in-app message). Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact us

Questions, requests, or complaints about this policy or our handling of your data can be sent to awarren@planttable.co.