Privacy Policy

Last updated: May 27, 2026

This policy explains what betterlanders.com (“betterlanders.com”, “we”, “us”, “our”), the legal entity operating this service, collects, why, who we share it with, and the choices you have. We try to keep this readable. If anything is unclear, email hello@betterlanders.com.

1. Data we collect

From you, the account holder:

  • Account — email, password hash (via Supabase Auth), workspace name.
  • Content — briefs, prompts, generated HTML, edits, revisions, uploaded images.
  • Billing — handled by Paddle (Merchant of Record). We receive subscription status and the last 4 of your card; we don’t see full card data.
  • Usage — generation count, edit count, request logs, error reports.
  • Account activity — last sign-in time, coarse country (2-letter code derived via Cloudflare; your IP address is not stored on your profile), browser/OS/device type, and language preference. We keep only the most recent value (not a history) and use it for security, fraud prevention, and product analytics under our legitimate interest. We do not fingerprint your device or track you across other sites. You can object (GDPR Art. 21) and opt out at any time from your account settings, after which we stop collecting it.

From visitors to landers you publish:

  • Analytics (via our own beam.js beacon) — hashed visitor id, referrer, device type, country (derived from IP, IP itself is not stored).
  • Leads — whatever your published form collects (e.g. email, name) — visible to you in the leads dashboard.

2. Why we use it

  • To operate the service (generate landers, host them, deliver analytics).
  • To bill you and prevent abuse.
  • To debug and improve. Aggregated, non-identifying metrics may inform product changes.
  • To communicate operational notices (downtime, security, billing). We do not send marketing email without opt-in.

3. Sub-processors

We use the following services to run betterlanders:

  • Supabase — auth, database, object storage
  • Upstash — Redis for rate limiting and pub/sub
  • Vercel — frontend hosting
  • Fly.io — backend hosting
  • Anthropic, Groq, OpenRouter — LLM inference
  • Paddle — payments (Merchant of Record)
  • Pexels, Unsplash — stock image search
  • Sentry (optional) — error monitoring

Each handles data only as needed to provide their part of the service. Briefs and prompts you submit are sent to LLM providers to generate output; we don’t train models on your content.

4. Where data is stored

Primary data is stored in regions chosen for proximity to most users (typically US-East). LLM providers may process your prompts in their own data-centre regions. By using the service you consent to your data being processed in those locations.

5. Cookies and similar

We use a small number of strictly necessary cookies / local-storage items:

  • Session — keeps you signed in (managed by Supabase Auth).
  • Preferences — theme choice, last-used view (cards vs table).
  • Analytics on your landers — our beam.js beacon sets a hashed visitor id (no cross-site tracking).

We do not use third-party advertising trackers. You can clear cookies any time via your browser.

6. Your rights

Depending on your jurisdiction (e.g. GDPR/UK GDPR/CCPA), you may have the right to:

  • Access a copy of your data.
  • Correct or delete your data.
  • Port your data (export landers as ZIP from the editor).
  • Object to certain processing.

To exercise these rights email hello@betterlanders.com. We’ll respond within 30 days.

7. Retention

  • Account & content — kept while your account is active. Deleted within 30 days of account closure.
  • Leads collected on your published landers — kept while the lander exists, or until you delete them.
  • Usage logs — 30 days.
  • Analytics events — retained while your account is active.
  • Billing records — retained as required by tax/accounting law (typically 7 years).

8. Security

We use TLS in transit, encryption at rest (provided by Supabase/Fly), per-user row-level security in the database, and least-privilege service accounts. No system is perfectly secure; if we discover a breach affecting your data, we’ll notify affected users without undue delay.

9. Children

betterlanders is not directed at children under 13 (16 in the EEA/UK). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we’ll delete it.

10. Changes

We’ll post changes here with an updated “last updated” date. Material changes will be announced in-app or by email at least 14 days before taking effect.

11. Contact

Questions or concerns? hello@betterlanders.com.