Privacy Policy

We collect information you provide when you create an account, verify your email, reset your password, register land, contact us, or subscribe to the newsletter. This can include your name, email address, account role, company name, and the content of your communications.

Land records may include a land name, country and city, map coordinates, area, soil and vegetation selections, description, carbon entries, sale settings, and up to three images or image data URLs that you submit. We also receive the information needed to operate your account and platform features, such as session and request data.

We use information to create and manage accounts, verify email addresses, provide password-reset links, operate dashboards, store and display land listings, record marketplace actions, calculate illustrative land estimates, respond to support requests, and send requested newsletter communications.

We use operational information to protect the service, enforce access controls, prevent abuse, and diagnose errors. We do not describe these uses as advertising or cross-site tracking.

Account information is associated with your user record and platform role. Email verification is required before account sign-in. Password-reset and verification tokens or codes are time-limited; stored verification values are hashed. Passwords are stored as a derived hash with a salt, not as the original password.

Land information and images are stored with the land record and may be shown in public marketplace listings when a landowner enables a listing. Do not submit information or images that you are not authorized to provide.

Newsletter subscription uses double opt-in. We store your email, subscription state, confirmation time, and delivery/unsubscribe records so we can send newsletter articles only to active confirmed subscribers and honor unsubscribe requests. You may unsubscribe using the link in a newsletter email.

Account verification, password reset, and newsletter messages are sent by email through Resend. Email providers process the recipient address and message data to deliver those messages.

The application stores account, land, session, news, and newsletter records in MongoDB. Resend is used to send account and newsletter email; Resend webhook events may be used to record delivery outcomes when configured. The site also loads mapping, map-tile, and satellite or mapping-related content as needed by platform features; those providers may receive technical connection data when your browser requests their resources.

The application code does not include an analytics or advertising service. Service-provider processing is subject to the providers’ own terms and privacy practices.

We retain account and land records while needed to provide the service and maintain platform records. Session records have a 30-day maximum lifetime. Newsletter records are retained to manage consent, prevent duplicate article delivery, and honor unsubscribes. Email verification codes expire after 10 minutes and password-reset links after 30 minutes; newsletter confirmation links expire after 48 hours.

To request access, correction, or deletion, contact us using the address below. Some records may need to be retained where required for platform operation, security, or applicable legal obligations. The application does not currently provide a self-service account deletion control.

We use application-level safeguards visible in the service, including salted PBKDF2-SHA256 password hashing, hashed verification and reset values, expiring sessions, role-based server-side access checks, and HttpOnly session cookies. Production session cookies are configured Secure and SameSite=Lax.

No internet service can be guaranteed completely secure. We do not claim a particular certification or independent security audit.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or information about the use of your personal data, and to withdraw newsletter consent. Contact us to make a request. We may need to verify your identity before responding.

For privacy questions or requests, email soilcreditazerbaijan@gmail.com.