Privacy Policy

1. Who we are

Fieldwalker is an AI-powered permaculture and land-design application. In this policy, "we", "us", and "our" refer to Fieldwalker and its operators. "You" refers to anyone who creates an account or uses the service.

2. What data we collect

• Account information: Your email address and hashed password when you sign up.
• Images you upload: Aerial photographs, satellite images, or maps you add to your projects. These are stored on our servers and are private to your account.
• Annotations and project data: The zones, labels, contour lines, and other design elements you create inside the application.
• Location metadata: If you use the georeferencing feature, we store the geographic coordinates (latitude/longitude) you assign to your images.
• Usage logs: Standard server logs including IP addresses, request timestamps, and HTTP status codes, retained for up to 30 days for security and debugging purposes.

3. How we use your data

• To provide, maintain, and improve the Fieldwalker service.
• To authenticate your account and keep your data secure.
• To generate AI-powered feature detection, contour lines, and exports from your images.
• To contact you about service-related matters (we do not send marketing emails without your consent).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party services

Fieldwalker uses the following third-party services:

• Geoscience Australia WCS: Elevation (LiDAR) data is fetched from GA's public Web Coverage Service. No personal data is sent to GA.
• OpenStreetMap / Nominatim: Used for address search during georeferencing. Your search queries are sent to Nominatim's servers.
• AWS Terrain Tiles: Used as a global fallback for elevation data. No personal data is sent.

5. Data retention

Your account data and uploaded files are retained for as long as your account is active. You may delete individual images or projects at any time from within the application. To request deletion of your entire account, contact us at the address below.

6. Security

Passwords are hashed using bcrypt and never stored in plaintext. All data in transit is encrypted via HTTPS. We apply rate limiting and input validation to protect against common web attacks.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, please contact us. We will respond within 30 days.

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or a notice on the application. Continued use after changes constitutes acceptance.

9. Contact

For privacy-related questions or data requests, please contact us via the project repository or the email address listed on your account.