Privacy Policy
This policy explains how PlantCase, operated by Xperion LLC ("we", "us"), handles your personal data when you use PlantCase through ChatGPT or on our website. It describes what the service does today. If that changes, we update this page and the date below.
Effective date: 14 October 2026
What we collect
What ChatGPT sends us. When you ask PlantCase to look at a plant, ChatGPT sends our service only what it needs for that request: your photos, the plant name, any notes, and the assessment its model produced. We do not receive your full conversation or anything else from your ChatGPT account.
Photos. We re-save each photo in a standard format and remove the hidden location and device data that phones embed in photos. We keep the cleaned copy, not the original. Please share plants, not people.
Your cases. The possible diagnoses and how sure the assessment is, what was visible, which kind of photo it was, how bad the problem looks, your notes, treatments you tell us you applied, and comparisons between your photos.
Plant and place. The plant or crop name, and a place name if you give one, such as "north field". We never ask for an address. If you give a town or area, we keep its coordinates rounded to about 10 kilometres.
Your account. Sign-in is run by Auth0. It gives us an account identifier that links your cases to you. On our website it also gives us your email address.
Billing. If you subscribe, Stripe collects your payment details. We receive whether your subscription is active, when it renews, and a Stripe customer ID. We never see or store your card number.
Technical data. Our logs record which function ran, how long it took, and errors, tied to a scrambled version of your identifier. They do not contain your photos, coordinates or notes. Our hosting provider may record your IP address. Our website uses one cookie to keep you signed in, and your browser remembers your light or dark choice. We use no advertising or tracking tools.
How we use it
- To run the service: save your cases, compare photos over time, ask for better photos, and give general management ideas.
- To tell you whether the same problem keeps appearing across your own cases.
- To keep the service safe and working, and to take payment and keep the records the law requires.
We do not sell your data, share it with advertisers, or use your photos or notes to train AI models.
Who else handles your data
- OpenAI (ChatGPT) handles your conversation, including the photos you attach, under its own terms. The assessment is produced by the model in your ChatGPT, not by our servers.
- Render hosts our servers, database and photos.
- Auth0 (Okta) runs sign-in.
- Stripe processes payments.
- Legal requests. We may disclose data if a valid legal order requires it.
Other users never see your cases. Each account's data is separated at the database level.
How long we keep it
We keep your cases and photos until you delete them. You can delete one case, or everything, by asking PlantCase in ChatGPT, or by emailing us. Deletion is permanent and removes the case, its photos, notes and records. We do not currently keep separate backups of cases or photos. If we start, deleted data will leave them within 35 days.
Deleting your cases does not cancel a subscription, so cancel that first. We also keep a simple count of how many new cases you create each month, with no case details, so plan limits still apply after you delete cases. We keep payment and subscription records for as long as the law requires. Technical logs are kept by our hosting provider for a limited period.
Your rights
You can ask us to see, correct, delete or export your data, or to restrict or object to its use. To delete, use the delete tools in ChatGPT or email us. For anything else, email us and we will respond within 30 days. We do not sell or share personal data for advertising.
Security
Connections are encrypted, photo links we fetch are checked and restricted, and uploads are verified as real images. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.
Children
PlantCase is not meant for children under 16.
Changes
If we change this policy in a way that matters, we will update the date and, where we can, tell you in the service.
Questions about this page: info@xperion.ai