WattleGrow Privacy Policy (placeholder — v1)

This is placeholder text shipped by the builder so `/legal/privacy` has real content to render and test against. It is not legal advice and must not be treated as WattleGrow's actual privacy policy — Mark supplies the real text (see `docs/RELEASE-NOTES/r1-foundation.md`, "Decisions needed"). Unlike the Terms of Service, this page is not versioned in the database (no `PrivacyVersion` model — Build Plan §1.2: "Privacy policy text is Mark's; the versioned acceptance mechanism is built" refers to the Terms mechanism, which acceptance on `/legal/accept` covers for both documents together); a change to this text ships as an ordinary content update to this file, without its own re-acceptance flow.

What we collect

Account details (name, email, mobile if provided), nursery profile and stock data your nursery publishes, and the technical data needed to keep the site secure (sign-in timestamps, audit trail entries).

Encryption at rest

Personally identifying fields — email, mobile, and nursery contact details — are encrypted at the application layer before they reach the database, and are only ever decrypted to serve an authorised request.

What we don't do

WattleGrow does not sell personal data, and does not use nursery or plant data to train AI or machine learning models without permission (see the Terms of Service's "No AI training use" clause, which this policy incorporates).

Your data

You can request an export or deletion of your nursery's data — see your nursery settings page.

Contact

Placeholder — a contact address for privacy questions is supplied along with the real privacy policy text.