Privacy Policy

1. Information we collect

Account information

When you request access or create an account, we collect your first and last name and email address. Authentication and passwords are managed by Amazon Cognito; we never see or store your password in plaintext.

Content you provide

The Service lets you upload drone orthomosaic imagery (GeoTIFF files) and related data. This imagery may contain precise geographic location information and other metadata embedded in the source raster. We also store the map tiles we generate from it, the machine-learning detections produced from it, and any validation labels or notes you add.

Usage and technical data

Like most web services, our infrastructure (Amazon CloudFront and API Gateway) automatically logs technical information such as IP address, browser and device type, requested URLs, and timestamps. We use this for security, debugging, and operating the Service.

2. How we use information

• Provide the Service — authenticate you, store and serve your imagery and detections, and render maps.
• Operate and secure — monitor for abuse, troubleshoot, and maintain reliability.
• Communicate — send account verification, security, and service notices. We do not send marketing email unless you opt in.
• Improve detection — validated detections and, where applicable, uploaded imagery may be used to evaluate and improve our invasive-species detection models. See "Your uploaded content" below for the controls that apply.
• Comply with law — meet legal obligations and enforce our Terms.

3. Your uploaded content

You retain ownership of imagery and data you upload. By uploading, you grant us a license to host, process, and display that content so we can provide the Service, as described in our Terms of Service.

We may use uploaded imagery and the human validation labels associated with detections to evaluate and improve our detection models. Model artifacts derived from this work do not reproduce your raw imagery. If you do not want your content used for model improvement, contact us at privacy@naturenet.ai and we will honor reasonable requests consistent with operating your account.

4. Legal bases for processing

Where applicable law (such as the GDPR) requires it, we process personal data on the bases of performance of a contract (providing the Service you signed up for), our legitimate interests (securing and improving the Service), consent (where you have given it), and compliance with legal obligations.

5. How we share information

We do not sell your personal information. We share information only:

• with the service providers listed below, who process data on our behalf under contract;
• when required by law, legal process, or to protect the rights, safety, and security of our users and the Service;
• in connection with a merger, acquisition, or asset sale, subject to this policy.

6. Service providers

We rely on the following providers to operate the Service:

• Amazon Web Services (AWS) — hosting, storage (S3), database (DynamoDB), authentication (Cognito), and content delivery (CloudFront). Data is stored in the AWS US East (N. Virginia) region.
• Mapbox — base-map rendering on the map workspace.
• Google Fonts — web font delivery on our public pages.

7. Data retention

We retain account information for as long as your account is active, and uploaded content until you or an administrator deletes it. Operational logs are retained for a limited period for security and debugging. When you ask us to delete your account, we delete or de-identify associated personal data within a reasonable period, except where retention is required by law.

8. Security

We protect data with encryption in transit (HTTPS/TLS), access controls, managed authentication through Cognito, and least-privilege permissions on backend resources. No system is perfectly secure, but we work to protect your information and to respond promptly to issues. To report a vulnerability, email security@naturenet.ai.

9. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact privacy@naturenet.ai. You can also request deletion of your account at any time. We will not discriminate against you for exercising these rights.

10. Cookies & local storage

The DataHub application uses browser local storage to keep you signed in (storing session tokens issued by Cognito) and to remember interface preferences such as map layer settings. These are strictly necessary for the app to function. We do not use third-party advertising or cross-site tracking cookies.

11. Children's privacy

The Service is intended for organizations and professionals and is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

12. International transfers

The Service is operated from and stores data in the United States. If you access it from outside the United States, you understand your information will be processed in the United States, where data-protection laws may differ from those in your country.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continued use of the Service after a change means you accept the updated policy.

14. Contact us

Questions about this policy or your data? Contact us at privacy@naturenet.ai.

NatureNet.ai LLC
Governing jurisdiction: State of Idaho, USA