Privacy Policy

Last updated November 6, 2026

This Privacy Policy describes how DeepEarth, Inc. ("DeepEarth," "we," "us," or "our") collects, uses, shares and protects personal information in connection with the DeepEarth Simulator, including the website at deepearth.ai and related services (together, the "Service"). It also describes the choices and rights available to you. By using the Service, you acknowledge the practices described in this Privacy Policy.

1. Our Commitments

We hold ourselves to the following principles, which govern everything else in this Privacy Policy:

• Confidentiality of your work. The sites, designs, analyses, uploads and results associated with your account ("Customer Content") are confidential. We do not sell Customer Content, publish it, or disclose it to other customers.
• No machine learning training without consent. We do not use Customer Content to train machine learning models that serve anyone other than you without your express written consent.
• Control over your personal information. You may access, correct, export and delete your personal information as described in Section 9.
• No advertising technologies in your work. Analytics and advertising technologies run only on our public pages. They never run on signed-in pages of the Service or on pages that display Customer Content, and we never use Customer Content for advertising.
• Data minimization. We collect only the personal information we need for the purposes described here, and keep it only as long as those purposes require.

2. Information We Collect

2.1 Information you provide

• Account information: your name, organization, email address and password (stored only as a secure one-way hash), and, if you choose to add them, a profile picture and your occupation.
• Sign-in with Google: if you sign in with Google, we receive your name and email address from Google. We do not receive your Google password or other Google account data.
• Customer Content: the sites you define (an address, a boundary you draw, or a file you upload), project names, saved views, plant shortlists, nursery ratings, and the results we produce for you, including point clouds, 3D models, simulation results, plant palettes, images and exports.
• Communications: feedback, survey responses (always optional), and messages you send us.
• Waitlist: if you joined our waitlist (now closed), your email address.
• Advertising forms: if you complete a form inside an advertisement on LinkedIn, Facebook or Instagram, that platform passes us the details you entered in the form, such as your name, email address, company and job title, and the advertisement you responded to. We use them to answer your request and to offer you an account.

2.2 Information collected automatically

• Usage information: the pages you open, the page or website that referred you, your browser type, and actions such as signing in, placing an order or renaming a project.
• Campaign information: the campaign codes in a link you followed to reach us, which identify the advertisement, email or post you clicked, and the version of a page you were shown when we test alternative versions. We keep these with your waitlist entry or account.
• Analytics and advertising technologies on our public pages: described in Section 7.2.
• Security information: sign-in attempts and the IP address from which they were made, to protect accounts.
• Server logs: our web servers record standard request information, including IP address, for operation and security. These logs are retained for 14 days.
• Waitlist sign-ups: the time of sign-up and the IP address and browser type of the request.

2.3 Information from payment processing

If you make a purchase, our payment processor provides us with references to your customer record, payment and subscription status. We do not receive or store your full payment card details.

3. How We Use Information

We use personal information to:

• provide the Service, including building and delivering what you order and making it available only to you;
• create and manage your account, process payments, and administer subscriptions and credit;
• send service communications, such as confirming your email address, resetting your password, and notifying you that an order is confirmed, delayed, ready or could not be completed;
• respond to your requests and provide support;
• maintain the security, reliability and performance of the Service and prevent fraud and abuse;
• understand how the Service is used so that we can improve it;
• advertise the Service, measure which advertisements and outreach lead to sign-ups and purchases, and test versions of our public pages, as described in Section 7.2; and
• comply with legal obligations.

We never use Customer Content, or information collected on signed-in pages of the Service, for advertising. If we send communications other than service communications, such as product news, each will include a way to opt out.

4. Machine Learning and Customer Content

Producing your results involves machine learning. The 3D model of your site is trained on imagery of that site, for you, as part of what you ordered. Portions of imagery of your site may be classified (for example, to distinguish a roof from a tree) by a hosted model operated by a service provider whose terms prohibit it from using that data for training and limit how long it may keep it.

We do not use Customer Content to train any model that serves other customers unless you give us your express written consent. We do use operational measurements from orders, such as processing time and whether a quality check passed, to improve the reliability of the Service. These measurements do not contain or reveal your designs.

5. Public and Licensed Data

Your results are built in part from data about the location of your site: public data (such as USGS LiDAR, aerial photography and soil surveys) and aerial imagery we license from third parties. These data are components of your results. The results delivered to you, including your project page and its files, are Customer Content and are kept confidential as described in Section 1. The public and licensed data themselves are not Customer Content. We may retain them and use them in operating the Service.

6. How We Share Information

We do not sell personal information for money, and we do not disclose it to third parties for their own direct marketing. The advertising technologies on our public pages, described in Section 7.2, may be considered a "sale" or "sharing" of personal information, or "targeted advertising," under the privacy laws of California and some other US states. Section 9.1 explains how to opt out. We disclose personal information only as follows:

• Our parent company. Ecological Intelligence, Inc. collects payments on our behalf and receives your name, email address and purchase details for that purpose, under the commitments in this Privacy Policy.
• Service providers. We use the following providers, each of which receives only the information needed to perform its function:
  • Stripe (payment processing): your name, email address and purchase details. Payment card details are provided directly to Stripe.
  • Google (sign-in, if you choose it; address search and maps in your browser; address lookup; 3D map tiles; cloud computing and storage).
  • Resend (email delivery).
  • Cloudflare (storage and delivery of files for sites made public).
  • Aerial imagery providers: the area to be photographed and an order reference.
  • DeepInfra and Anthropic (artificial intelligence services), under terms that prohibit them from using the data to train their models and allow them to keep it only briefly, for purposes such as security and abuse monitoring.
• Analytics and advertising partners. Google (Google Analytics and Google Ads), LinkedIn (the LinkedIn Insight Tag and Conversions API) and Meta (Facebook and Instagram advertising and the Conversions API) receive the information described in Section 7.2 when you visit our public pages, and the conversion reports described in Section 7.3 when you sign up or place a first order after clicking one of their advertisements. We do not give these partners your email address or account information, in plain or hashed form.
• Public data services. When we retrieve public data for your site from services such as USGS, NOAA, the USDA soil survey, OpenStreetMap and the US Census Bureau geocoder, those services receive the location of your site. Plant photographs are loaded from iNaturalist.
• Our personnel. A limited operations team may access accounts and Customer Content solely to deliver orders, resolve problems and provide support.
• Legal requirements. We may disclose information if required by law, or where we believe in good faith that disclosure is necessary to protect the rights, property or safety of our users, the public or DeepEarth.
• Business transfers. If DeepEarth is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction, subject to the commitments in this Privacy Policy.
• With your consent. We will make a project public only with its owner's written permission, and otherwise share information only as you direct.

7. Cookies and Similar Technologies

7.1 Signed-in pages of the Service

On signed-in pages, and on any page that displays Customer Content, we use only the cookies and browser storage that the Service needs to function. A sign-in cookie keeps you signed in for up to 14 days; signing out ends your session on every device. Your browser also stores a draft of a site you are defining and certain display preferences. No analytics or advertising technologies run on these pages.

7.2 Public pages

Our public pages are the deepearth.ai home page and pages made for particular audiences and campaigns, such as those under deepearth.ai/for/. On these pages, we and the partners named in Section 6 may use cookies, pixels and similar technologies to:

• understand how visitors reach and use our public pages;
• measure whether our advertisements lead to sign-ups or purchases; and
• show advertisements for the Service to people who have visited our public pages.

These technologies may collect your IP address, browser and device information, the pages you view, the actions you take on them, and the website or advertisement that referred you. A partner may combine this information with information it already holds, for example to recognize that you saw one of our advertisements on its platform. Each partner's use of this information is governed by its own privacy policy.

If you visit from the European Economic Area, the United Kingdom or Switzerland, these technologies load only after you consent, and you may withdraw consent at any time through the "Your Privacy Choices" link.

You may also block or delete cookies in your browser settings, and adjust advertising preferences in your Google, LinkedIn, Facebook and Instagram account settings.

7.3 Conversion reports from our servers

When you reach a public page by clicking one of our advertisements, the advertising platform adds a click identifier to the link, and we keep it with your waitlist entry or account as campaign information (Section 2.2). If you then sign up or place your first order, our servers may report that event to the platform whose advertisement you clicked, with the click identifier and the time of the event, so that the platform can count which advertisements lead to sign-ups and purchases. A report contains no name, email address, phone number or Customer Content, in plain or hashed form. We do not send a report for a sign-up whose browser sent a Global Privacy Control signal or had opted out through the "Your Privacy Choices" link, or for an account holder who has opted out by email (Section 9.1).

8. Data Retention

We retain personal information only for as long as needed for the purposes described in this Privacy Policy, including to provide the Service, comply with legal obligations (such as tax and accounting records), resolve disputes and enforce our agreements. Server logs are retained for 14 days. Campaign information is kept with the waitlist entry or account it belongs to and is deleted with it. When you delete your account, we delete or de-identify your personal information and Customer Content, except where retention is required by law.

9. Your Rights and Choices

Regardless of where you live, you may ask us to:

• access the personal information we hold about you;
• correct inaccurate personal information (you may also update your profile directly);
• receive a copy of your personal information and your Customer Content in a common, machine-readable format;
• delete your account, personal information and Customer Content;
• restrict or object to a particular use of your personal information; and
• withdraw any consent you have given, without affecting the lawfulness of prior processing.

To make a request, email lance@deepearth.ai from the address associated with your account. We may need to verify your identity before acting on a request. We will respond within 30 days and will not charge you or treat you differently for exercising these rights. Residents of certain jurisdictions may also have the right to lodge a complaint with a data protection authority.

9.1 Opting out of advertising technologies

You may opt out of the sale or sharing of your personal information and of targeted advertising, whether or not you live in a state whose law requires it:

• "Your Privacy Choices" link. Every public page described in Section 7.2 carries this link, and it is always available at deepearth.ai/privacy-choices. Opting out there stops the analytics and advertising technologies described in Section 7.2 from loading in that browser, and no conversion report (Section 7.3) is sent for a sign-up made from it.
• Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out for that browser: those technologies do not load, and no conversion report is sent for a sign-up made from it.
• By email. Write to the address below and we will apply your opt-out to your waitlist entry or account, including any conversion report not yet sent.

Because an opt-out made through the link or a browser signal is stored in that browser, it applies to that browser and device. We will not treat you differently for opting out.

10. Data Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, one-way hashing of passwords, short-lived private links for project files, and restricted access to our systems. No method of transmission or storage is completely secure. If a security incident affects your personal information, we will notify you without undue delay as required by law.

11. International Data Transfers

The Service is operated in the United States, and personal information is stored and processed there. If you access the Service from outside the United States, your information will be transferred to, stored and processed in the United States, where it will be protected as described in this Privacy Policy.

12. Children's Privacy

The Service is intended for professionals and is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date. For material changes, we will notify account holders by email and ask them to accept the updated Privacy Policy before they continue to use the Service.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

DeepEarth, Inc.
8240 SW Cattleya Dr.
Stuart, FL 34997
Email: lance@deepearth.ai