Privacy Policy
Last updated 20 October 2026
Ouleo (Lithuania, European Union) is the controller of personal data processed through Ouleo. We collect as little as the Service needs, never sell personal data and do not use advertising trackers. Contact: support@ouleo.com.
What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address, name (optional), sign-in provider id | Your account and sign-in; service emails | Contract |
| Garden location, rounded to about 1 km, its country and time zone | Weather, frost dates, sunrise and sunset, seasons, sowing windows, holidays | Contract |
| Garden data: plan, plants, tasks, journal, notes, work schedule, photos | The Service itself | Contract |
| Plan, subscription status, invoices (from Paddle) | Billing and plan limits | Contract; legal obligation (accounting) |
| AI advisor questions and answers, monthly count | Answering, plan quotas | Contract |
| Technical logs (IP address, browser, errors) kept by our host | Security, abuse prevention, fixing bugs | Legitimate interest |
| Aggregated visit statistics, without cookies or personal identifiers | Understanding which pages help | Legitimate interest |
We never ask for or store your exact address. Payment card details are handled by Paddle and never reach us. Your work schedule (for example, shift patterns) is used only to plan tasks around your free time.
Cookies and browser storage
We use only what is strictly necessary: a sign-in session cookie and browser storage for your settings and for working offline. No advertising or cross-site tracking cookies, so there is no cookie banner.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Hosting of the website and app | USA / global edge |
| Neon Inc. | Database (accounts, gardens, tasks, journal) | EU or US region |
| Cloudflare Inc. | Photo storage (R2) | EU or US |
| Paddle.com Market Ltd | Payments, invoices and tax as Merchant of Record | UK / EU |
| Resend Inc. | Sign-in links and account emails | USA |
| Open-Meteo (Patrick Zippenfenig) | Weather forecasts and climate data — receives only the rounded garden coordinates | EU |
| Anthropic PBC | AI advisor answers — receives your question and a summary of your garden when you use the advisor | USA |
| Plausible Analytics (Plausible Insights OÜ) | Cookieless, aggregated visit statistics | EU |
Each provider is bound by a data processing agreement. Transfers outside the EU/EEA rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep it
- Account and garden data: while your account exists. When you delete the account, it is erased within 30 days, and from backups within 35 days more.
- Invoices and payment records: as long as tax and accounting law requires (up to 10 years), kept by Paddle and us.
- Technical logs: up to 30 days.
Your rights
You can see, correct, export (JSON / CSV) and delete your data from your account at any time. You may also ask us for a copy, ask us to restrict or stop processing, or object to processing based on legitimate interest — write to support@ouleo.com; we answer within 30 days. You can complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or the supervisory authority where you live. In Australia, you may also contact the Office of the Australian Information Commissioner (oaic.gov.au); we handle personal information consistently with the Australian Privacy Principles.
Security
Data is encrypted in transit and at rest. Each garden is visible only to its members, enforced in the database itself (row-level security). Staff access is limited to what support requires.
Children
Ouleo is not intended for children under 16, and we do not knowingly collect their data.
Changes
We will announce material changes to this policy by email or in the app before they take effect.