Privacy Policy

1. Introduction

Landoxo ("we", "us", "our") operates the website landoxo.store (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and a hashed version of your password. We never store passwords in plain text.

2.2 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, project creation and generation events, timestamps, and general usage patterns.

2.3 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not store your credit card numbers or sensitive financial information. We receive only your Stripe customer ID, subscription status, and billing period information.

2.4 Project Data

When you use the builder, we store your project data including brand configurations, selected sections, generated schemas, and image URLs you provide. This data is stored to enable saving, loading, and exporting your projects.

2.5 AI Provider Data

Landoxo routes generation requests to third-party AI providers (Groq and Google Gemini) using API keys that you provide. We do not store your AI API keys on our servers beyond your browser session. Your brand information and product details are sent to these AI providers during the generation process.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your account registration and manage your subscription
• Save and deliver your projects and generated content
• Enforce plan limits and usage tracking
• Send transactional emails (welcome, password reset, billing notifications)
• Monitor and analyze usage trends to improve the Service
• Detect and prevent fraud, abuse, or security incidents

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information with:

• Stripe: For payment processing and subscription management
• AI Providers (Groq, Google Gemini): Your brand brief and product data is sent during store generation using API keys you provide
• Hosting Provider: Our infrastructure provider that hosts the Service
• Law Enforcement: If required by law or to protect our rights and safety

5. Data Retention

We retain your account information and project data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days. Deleted projects are soft-deleted and permanently removed within 90 days.

6. Data Security

We implement appropriate measures to protect your information, including:

• Passwords hashed using PBKDF2 with SHA-512 and unique salts
• Authentication tokens signed with JWT via secure HTTP-only cookies
• All data transmitted over HTTPS/TLS
• Rate limiting on authentication and API endpoints

7. Your Rights

You may have the right to access, correct, delete, or export your personal data. Contact us at support@landoxo.store to exercise these rights.

8. Cookies

We use a single essential authentication cookie (landoxo_token) to maintain your login session. This cookie is HTTP-only, secure in production, and expires after 7 days. We do not use tracking or advertising cookies.

9. Children's Privacy

The Service is not intended for individuals under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last updated" date.

11. Contact Us

Email: support@landoxo.store
Website: landoxo.store