Privacy Policy
Last updated:
Landdesk (“we”, “us”) provides software that helps oil and gas landmen build title runsheets from scanned courthouse documents. This policy explains what data we collect, how we use it, and how we protect it.
1. Information we collect
- Account information. Email address, full name, and password hash (via Supabase Auth).
- Documents you upload. Scanned courthouse PDFs, images, and the OCR text + extracted field values we derive from them. Documents are stored in Supabase Storage scoped to your user ID; extracted fields are stored in our Postgres database.
- Billing information.Processed entirely by Stripe. We store only the customer ID, subscription ID, and current period end — never card numbers.
- Product usage. Pageviews and document- extraction counts, anonymized with a rotating session ID. We use these to monitor the service and enforce plan limits.
2. How we use your data
- To operate the runsheet, curative, and export features.
- To enforce plan limits and process billing.
- To send transactional email (lease-expiration alerts, weekly digest, payment notices). You control these in Settings → Notifications.
- To debug and improve the extraction pipeline.
3. How we share your data
We share narrowly-scoped data with:
- Google Cloud Vision— to OCR uploaded images/PDFs. Document bytes are transmitted and processed under Google’s Cloud Vision terms.
- Anthropic (Claude)— OCR text is sent to extract structured fields. Anthropic does not train on API inputs by default.
- Stripe— payment data only; no document data.
- Resend— email delivery; only the email address + the message body.
We do not sell user data to third parties.
4. Data retention
Uploaded documents, extracted instruments, and project data remain until you delete them. You can export everything to JSON or delete your account entirely from Settings → Data & Privacy. Deleting your account is irreversible and removes every document, instrument, curative item, lease obligation, and Supabase Auth record we hold for you.
5. Security
- Documents are stored in a private Supabase bucket.
- Database connections use TLS.
- Every page load validates the session via Supabase Auth; no document can be read without ownership verification.
- Our Stripe integration uses signed webhooks with replay protection and idempotency.
6. Your rights
You can export your data, correct inaccuracies, or delete your account at any time from Settings. Write to privacy@landdesk.io if you need help or have a question.
7. Changes
We’ll note material updates to this policy on this page. Significant changes will also be announced in-app.