Privacy Policy

Introduction

Landra is operated by Landra AI LLC, a California limited liability company doing business as “Landra” (“Landra,” “we,” “us,” “our”). We operate the website at getlandra.com and the application at app.getlandra.com. This Privacy Policy describes what personal data we collect, why we collect it, our legal bases for processing, and your choices regarding that data.

By using Landra, you agree to the collection and use of data as described here. If you do not agree, please do not use the service.

Data Controller

For the purposes of the EU/UK General Data Protection Regulation (“GDPR”) and similar laws, the data controller is:

• Entity: Landra AI LLC (d/b/a Landra), a California limited liability company
• Email: hello@getlandra.com
• Mailing address: 1401 21st St, Ste R, Sacramento, CA 95811

We have not appointed a data protection officer or an Article 27 EU representative; we will do so if and when required by applicable law. For any privacy question or request, email hello@getlandra.com.

What We Collect

We collect only what we need to run the service.

Account data

When you create an account, we collect your email address and a hashed password (or an OAuth token if you sign in with a third-party provider). We use this to authenticate you and associate your pages with your account.

Billing data

When you subscribe to a paid plan, Stripe collects your payment card details and billing address. We never see or store your full card number. We receive from Stripe: the last four digits of your card, your billing email, your subscription status, and invoice history.

Brand URLs and generated content

When you generate a page, you provide a brand or product URL. We fetch publicly available content from that URL to analyze the brand. We do not fetch URLs that resolve to private network addresses or that require authentication. You represent and warrant that you are authorized to direct Landra to fetch and analyze the URL you submit and that doing so does not violate the URL owner’s terms of service, robots-exclusion directives (robots.txt), paywall, or login wall. We do not independently verify that you are authorized to submit a given URL. Generated pages — including text, component data, and image references — are stored in your account so you can edit and publish them.

Usage data

We collect usage data to operate, secure, understand, and improve the Service: pages created, pages published, feature and interface interactions, content viewed, error logs, and standard server request logs (IP address, browser type, timestamps). The current list of analytics and error-monitoring processors is in the Data Processors table.

AI-generated images

Images generated for your pages are stored in our cloud storage (Supabase Storage) and served via CDN. These images are associated with your account and your pages.

Shopify store data (if connected)

If you connect a Shopify store, we store your Shopify store domain, an encrypted OAuth access token scoped to the permissions you grant, and mappings between your Landra pages and the pages we have published to your Shopify store. We do not access your customer records or your order records, and we never request the Shopify permissions that would allow it.

The app also holds permission to read your product catalogue (so you can pick a product to feature on a page) and to install a Landra analytics pixel on your storefront (so we can report how the pages you publish perform). Product data is read only when you use a feature that shows your products, and it is not stored beyond what you place on a page. The analytics pixel is not active today; if we enable it, Shopify removes customer names, email addresses, phone numbers and addresses from the events before they reach us, and we will update this policy to describe what we collect and for how long before that happens.

Customer review data (VOC)

When you submit a brand URL, our system may detect that the brand uses a customer-review platform (e.g., Judge.me, Okendo, Yotpo, Stamped, Loox, Reviews.io) and may harvest a sample of publicly-displayed reviews from that platform’s public widget endpoints. This data is used internally — and only internally — to inform the voice, tone, and topical emphasis of the generated page. We do not quote, paraphrase, or attribute statements to any individual reviewer in any Generated Content. Harvested reviews are retained in association with your generation history for up to 90 days and then deleted. By submitting a URL, you represent and warrant that you are the brand owner or are authorized by the brand owner to direct us to access its customer-review data for this purpose.

How We Use Your Data

We use your data for the following purposes:

• To provide the service. Account authentication, page generation, page storage, page publishing, image generation, Shopify publishing, and billing.
• To improve the service. Aggregated, de-identified usage patterns help us understand which features are valuable and where the product breaks. We do not use your Brand Data or Generated Content to train AI models.
• To support you and ensure quality. Authorized members of our team may access your account data and the pages you create — including unpublished drafts — to provide customer support, diagnose technical issues, review product quality, and improve the Service. This access is restricted by role-based access controls and is logged.
• To communicate with you. We send three categories of email:
  • Transactional emails — billing receipts, security alerts, trial-end notifications required by California Business and Professions Code §17602 (Auto-Renewal Law), password resets, and other service-essential messages. These are not marketing email and are not subject to opt-in or opt-out. You will receive them as long as you have an account.
  • Service announcements — material changes to the Service, the Terms, or this Privacy Policy. These are also transactional.
  • Marketing email — product-education emails, feature announcements, and similar content. How we obtain your permission depends on your location, which we approximate from your IP address: if you are in the EEA, the UK, Switzerland, or Canada, we send these only after you give explicit opt-in consent (an unticked checkbox at signup, or your account settings); elsewhere — for example in the United States — creating an account establishes the relationship under which we send them. Either way, every marketing email includes a one-click unsubscribe header (RFC 8058) and a visible unsubscribe link, and you may withdraw consent or opt out at any time from your account settings or by emailing hello@getlandra.com.
• To enforce our terms. Detecting abuse, preventing fraud, and enforcing our Terms of Service.
• To comply with law. Responding to lawful requests, enforcing court orders, and meeting tax, accounting, and audit requirements.

Legal Bases for Processing (GDPR)

Where GDPR applies, we rely on the following legal bases:

• Contract performance — to deliver the service you signed up for, including authenticating you, generating pages, and processing your subscription.
• Legitimate interests — to secure the service, prevent abuse, debug errors, and run product analytics on de-identified data. You have the right to object to processing based on legitimate interests.
• Legal obligation — to comply with tax, accounting, and other laws; to respond to valid legal requests.
• Consent — for marketing communications (where required by law) and any other processing you explicitly opt into. You can withdraw consent at any time.

For incidental processing of third-party reviewer personal data harvested from publicly-displayed customer-review widgets (see Customer review data (VOC)), we rely on legitimate interests (GDPR Art. 6(1)(f)). We have documented a balancing test concluding that the limited, internal-only use is proportionate to the brand owner’s interest in publishing voice-aligned marketing copy and does not override the reasonable expectations of reviewers whose content was already publicly displayed. Reviewers retain Art. 21 objection rights; contact hello@getlandra.com to exercise them.

Data Processors and Sub-Processors

We use third-party services to operate Landra. Each processor receives only the data necessary for its function. We do not sell or “share” (as defined under the CCPA/CPRA) personal information to any of these providers or to anyone else.

Notice of changes. We may add or replace sub-processors with notice given by updating this page and, where you have an active account, by email. The list below is current as of the effective date of this Policy; the most up-to-date list, along with a description of the data shared and the purpose, is always available on this page.

AI and Training

We do not use your data to train AI models. We access AI capabilities via commercial API agreements with Anthropic (Claude), Google (Gemini), and Replicate (Flux). Anthropic’s commercial API terms, Google’s Gemini API terms, and Replicate’s API terms all prohibit or disclaim training on customer submissions made through their APIs. We do not have any training-data agreement with any AI vendor.

Aggregated, de-identified signals. We may derive aggregated, de-identified signals from how you use the Service (for example, which features produce errors, which page types are generated most often) to operate, secure, and improve the Service. These signals cannot be used to identify you and are not sold or shared.

Non-uniqueness of AI output. Generative AI produces output that may be substantially similar to output produced for other users from similar inputs. We do not guarantee that any Generated Content is unique.

Upstream training-data documentation. Each AI provider publishes its own training-data documentation; links are in the Data Processors table above. Where California AB 2013 or similar training-data summary laws apply to providers of generative AI, those obligations are met by the upstream model providers (Anthropic, Google, Replicate), not by Landra.

Future AI sub-processors. Before adding or replacing an AI sub-processor, we will verify that the vendor’s API terms do not permit training on customer submissions, or, if they do, we will obtain a contractual opt-out before sending any user data.

Cookies, Tracking & Similar Technologies

Strictly necessary cookies. Supabase sets first-party session cookies to keep you logged in. Stripe sets first-party cookies on the checkout and customer-portal pages it serves. These cookies are required for the Service to function and are not used for advertising or cross-site tracking.

Analytics. We use product and web analytics to understand how the Service is used, measure performance, and improve and develop our products. These tools may capture usage and interaction events (pages and screens viewed, clicks, form submissions, and the content and interface elements you view or interact with), device and browser information, and approximate location derived from IP address. For signed-in users, analytics events are associated with your account (user ID and email address) so we can understand product usage per account and exclude our own team’s activity from product metrics.

We currently operate analytics without persistent cross-site identifiers and rely on our legitimate interest under GDPR Art. 6(1)(f). We may expand our analytics — including the use of cookies or similar technologies, persistent identifiers, or session and heatmap recording — and where we do, we will update the Data Processors table and obtain consent where required (see Advertising and conversion tracking below). If we add or replace an analytics provider, we will update the Data Processors table.

First-party analytics cookies. On our own marketing and application pages we set a small number of first-party cookies to measure how visitors arrive and which version of a page they see — for example, a first-touch cookie that records the referring site and any campaign (UTM) parameters from your first visit, and, when an on-site experiment is running, a cookie that keeps your assigned page variant stable. These are first-party only, are not shared across sites, and are not used for advertising. We make a best effort to suppress these cookies for visitors we detect in the EEA, the UK, or Switzerland.

Advertising and conversion tracking. We operate the Meta Pixel and Meta’s server-side Conversions API to measure the performance of our own advertising and improve it. These load only on Landra-owned marketing and application pages (getlandra.com and app.getlandra.com) and never on pages you create and publish with Landra. They record conversion events such as page views, sign-up, checkout started, trial started, and subscribed, and set the Meta cookie identifiers _fbp and _fbc. When you sign up or subscribe, we also send Meta your IP address and browser user agent, together with a one-way hashed (SHA-256) version of your email address, your Landra account identifier, and, where we hold them from your payment details, of your name, phone number, and billing city, state, postal code, and country, so it can match the conversion to an ad. Those fields are hashed, so Meta does not receive them in readable form. None of this is sent if you have declined advertising cookies or your browser sends a Global Privacy Control signal. We run the LinkedIn Insight Tag and LinkedIn’s server-side Conversions API in the same way for our LinkedIn advertising: the Insight Tag records conversion events and sets LinkedIn cookie identifiers (including li_fat_id when you arrive from a LinkedIn ad), and when you start a trial or subscribe we send LinkedIn that conversion, the plan’s price, the li_fat_id ad-click identifier, and a one-way hashed (SHA-256) version of your email so it can match the conversion. We also run the Google tag for our Google Ads campaigns: it records page views and two conversions — when a trial starts and when a subscription is purchased — and sets Google’s advertising cookies, including its ad-click identifier when you arrive from a Google ad. Google is not sent your email address or your name. For our Reddit advertising we run the Reddit Pixel and Reddit’s server-side Conversions API: the Pixel records page views and sets Reddit’s _rdt_uuid browser cookie, we store Reddit’s ad-click identifier (rdt_cid) when you arrive from a Reddit ad, and when you create an account, start a trial, or subscribe we send Reddit that conversion together with your browser user agent and one-way hashed (SHA-256) versions of your email address, your Landra account identifier, and your IP address, so it can match the conversion to an ad. Reddit does not receive your email or your IP address in readable form. See the Data Processors table for the full list of data shared.

Your choices. You can limit this tracking by using your browser’s cookie controls or tracking-protection features, an ad blocker, or your Meta ad preferences. Where applicable, we honor the Global Privacy Control as an opt-out signal. The operation of these tags may constitute “sharing” of personal information for cross-context behavioral advertising under the CCPA/CPRA. We do not sell your personal information.

Your consent and choices. For visitors in the EEA, the UK, and Switzerland we present a consent banner on your first visit: advertising and analytics cookies (including the Meta Pixel) are not set until you accept, and rejecting is as easy as accepting. You can change or withdraw your choice at any time through the “Your privacy choices” link in our footer. For visitors elsewhere, including the United States, these cookies may load by default, but you can opt out at any time through the same “Your privacy choices” link, and we honor the Global Privacy Control browser signal as an opt-out of sharing for advertising. For California and other US state-privacy-law residents, “Your privacy choices” is your “Do Not Sell or Share My Personal Information” control. You can also clear cookies using your browser’s controls, or email hello@getlandra.com and we will honor your request.

Cookie list. A current list of cookies, including their purpose and duration, is available on request to hello@getlandra.com.

Your Rights (All Users)

Regardless of where you live, you can:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data by contacting us.
• Export your pages as standalone HTML files at any time from the editor.
• Object to any processing you believe is unlawful.

To exercise any of these rights, email hello@getlandra.com. We will verify your identity using the email address on your account and respond within 30 days.

California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to:

• Know what personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to.
• Access and portability — receive a copy of your personal information in a portable format.
• Correct inaccurate personal information.
• Delete your personal information, subject to limited exceptions (for example, to complete a transaction, comply with law, or resolve a security incident).
• Opt out of the “sale” or “sharing” of personal information. We do not sell or “share” (as defined under the CPRA) personal information. There is nothing to opt out of.
• Limit use and disclosure of Sensitive Personal Information. We do not use sensitive personal information for any purpose beyond what is strictly necessary to provide the service.
• Non-discrimination. We will not deny service, charge different prices, or provide a different service level because you exercised a CPRA right.

We retain personal information only for the periods described in Data Retention. We do not knowingly collect or sell the personal information of consumers under 16. To make a CPRA request, email hello@getlandra.com with the subject line “CPRA Request.” You may designate an authorized agent to act on your behalf in accordance with CPRA §1798.140(j).

Other US State Residents (VA, CO, CT, UT, TX, OR, MT)

If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), or Montana (MCDPA), you have rights substantially similar to those described above, including:

• The right to confirm whether we process your personal data and to access that data.
• The right to correct inaccuracies and to delete personal data.
• The right to data portability.
• The right to opt out of targeted advertising, the sale of personal data, and profiling with significant effects — none of which we engage in.
• Where required (CO, CT, OR), we honor opt-out preference signals such as the Global Privacy Control.
• Where your state law provides, you may appeal any denial of a rights request by replying to our initial response.

To exercise these rights, email hello@getlandra.com with the subject line “State Privacy Rights Request” and identify your state of residence. We will respond within the period required by your state’s law (typically 45 days, extendable by 45 days when reasonably necessary).

European Economic Area / UK Residents (GDPR)

Under the GDPR and the UK GDPR, you have the right to:

• Access your personal data.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Portability — receive your data in a structured, machine-readable format.
• Restriction — limit how we process your data in certain circumstances.
• Object — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner’s Office at ico.org.uk.

Our legal bases for processing are described in Legal Bases. To make a GDPR request, email hello@getlandra.com with the subject line “GDPR Request.” We will respond within 30 days.

Business Users and Data Processing Agreement

If you use the Service on behalf of a business and the Service processes personal data of your customers or end users (for example, by ingesting a URL that contains customer testimonials or by publishing a page accessible to your customers), you may be a “controller” of that data and we may be a “processor” or “service provider” under applicable law. We offer a Data Processing Agreement (DPA) incorporating the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. Request a DPA by emailing hello@getlandra.com with the subject line “DPA Request.”

Data Retention

• Account data is retained as long as your account is active. If you delete your account, we delete your personal data and all associated pages within 30 days, except where retention is required by law (e.g., billing records).
• Generated pages and images are deleted when you delete the page or your account.
• Ads you give feedback on are kept for longer than the 48-hour ad library window. When you rate an ad, ask us to change one, or answer the question we show after a download, we keep a copy of that ad in private internal storage alongside what you told us. We use those copies only for our own research into what the ad generator gets wrong, they are never published or shared, and they are deleted when you delete your account. Ads nobody comments on are deleted on the normal 48-hour schedule.
• Brand URLs submitted as input are retained in an access log for up to 90 days and are otherwise only persisted as part of the associated page’s generation history.
• Shopify OAuth tokens and store mappings are deleted immediately upon app uninstall or store disconnection; associated mappings within 30 days.
• Server logs are retained for up to 90 days for debugging and security purposes, then automatically purged.
• Billing records are retained for 7 years to comply with tax and accounting requirements.
• Data needed to resolve an active legal claim or to comply with a legal obligation is retained for the duration of that obligation.

Security Incident Notification

If we become aware of a security incident that has resulted in the unauthorized access, disclosure, alteration, or destruction of your personal data, we will notify you without undue delay, and in any event within 72 hours of our confirmation of the incident, to the extent notification is required under applicable law. Where we act as a processor, we will notify the relevant controller on the same timeline so that the controller can meet its own notification obligations (e.g., under GDPR Articles 33 and 34). Notifications will include, to the extent known, the nature of the incident, the categories and approximate number of affected individuals and records, the likely consequences, and the measures we have taken or propose to take in response.

Children’s Privacy

You must be at least 18 years old to create a Landra account. The Service is not directed to anyone under 16 under any circumstances. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at hello@getlandra.com and we will delete it.

Reviewer data. Our voice-of-customer harvesting (see Customer review data (VOC)) may incidentally retrieve reviews authored by minors when a brand’s customer base includes minor consumers. We do not use this data to target advertising to minors and do not retain reviewer-level personal data beyond 90 days. If you are a parent or guardian and believe a child’s personal data has been collected through our review harvest, please contact hello@getlandra.com and we will delete it.

International Data Transfers

Landra is hosted in the United States. If you access the service from outside the United States, your data will be transferred to and processed in the United States. For EEA, UK, and Swiss users, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum) with our sub-processors, and on any additional safeguards required by applicable data-transfer law. Where a sub-processor is certified under the EU–US Data Privacy Framework, we may also rely on that framework. You may request a copy of the transfer safeguards we rely on by emailing hello@getlandra.com.

Security

We take reasonable measures to protect your data:

• All data is encrypted in transit (TLS) and at rest.
• Database access is restricted by row-level security policies — you can only access your own data.
• Payment card data is handled entirely by Stripe. We never see, store, or process full card numbers.
• Shopify OAuth tokens are encrypted with AES-256-GCM before storage.
• API keys and secrets are stored as environment variables, never in client-side code.
• We restrict employee and contractor access to production data to what is necessary for operations, customer support, technical troubleshooting, quality assurance, and improving the product. Such access is role-restricted and logged.
• We regularly review our code and infrastructure for security vulnerabilities.

No system is perfectly secure. If you discover a security vulnerability, please report it to hello@getlandra.com.

Third-Party Links

Pages you create with Landra may contain links to third-party websites (for example, a brand’s product page or checkout). We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing them with your data.

Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the effective date at the top of this page and, if you have an account, notify you by email. Your continued use of Landra after a change constitutes acceptance of the updated policy.

Contact

If you have questions about this policy, want to exercise your privacy rights, or have a concern about how we handle your data, contact us:

Operator: Landra AI LLC (d/b/a Landra)
Email: hello@getlandra.com
Mailing address: 1401 21st St, Ste R, Sacramento, CA 95811

We aim to respond to all inquiries within 5 business days.