Privacy Policy

Green Mind: Zone 9 is operated by ConcordiaPax LLC. This policy explains what we collect, why we collect it, who it reaches, and what you can require us to do about it. It is written to be read, not to be survived.

The short version: we collect what the app needs to plan your garden and reach you about it. We do not sell your personal data, and we do not share it for advertising.

Information you give us:

Information collected automatically:

We do not use your personal data to build advertising profiles, and we do not run third-party ad or analytics trackers on this site.

We do not sell your personal data. We do not share it for cross-context behavioral advertising. We do not trade, rent, or license it to data brokers.

We do use a small number of vendors to run the service, and your data passes through them because it has to. They process data under their applicable terms to provide and secure the assigned service. Counsel and operator verification of those terms remains a launch gate:

If you submit a service request and we bring in an outside provider to do the work, the contact details and request summary you entered go to that provider so they can reach you. We will tell you that at the point you submit the request, before you send it — you will not find out afterward. These are independent local service providers, not ConcordiaPax employees, agents, or partners.

We may also disclose information if the law requires it, or to protect someone’s safety or our legal rights.

When you ask the garden assistant, Cloudflare Workers AI receives your question, recent conversation, and the selected bed’s crop positions, spacing, optional variety and height, and environment settings. We do not include your account ID, address, or journal notes in this context. Assistant conversations are held in the current app view rather than stored as chat history by Green Mind. We retain daily request counts for usage limits; these are included in account export and removed when your account is deleted. Provider terms apply to provider processing.

When you submit a photo for diagnosis, it is stored in our private Supabase storage bucket, attached to your account. Our configured AI provider receives the photo, or a short-lived link to it, for GreenMind’s purpose of producing the diagnosis you requested. Production may use Cloudflare Workers AI with Meta’s Llama 3.2 Vision model; every result still passes GreenMind’s organic-safety validator before it is saved. The provider’s and model licensor’s applicable terms also apply to their processing.

Photos can carry more than the plant. If your camera records location in image metadata, that metadata travels with the file. If you would rather not include it, turn off location tagging in your camera app before photographing.

Launch training uses only reviewed, repository-authored knowledge. Private journals, scan photos and diagnoses, service requests and contact data, and engagement events are excluded and never used for model training.

Historical consent flags do not grant permission to publish or train. The launch scan flow does not ask for community-sharing consent, and scan photos remain private account data. A future photo-publication or customer-content training program would require a separate approved workflow and new permission.

Operational usage activity remains in the service database for product operation; it is not copied into a training or evaluation dataset. Repository-authored training records keep their source and review metadata.

GreenMind is launching as a free beta and does not currently collect payment for a GreenMind subscription. We store a limited access-grant record when the operator gives complimentary extended access to a beta tester or eligible Substack subscriber.

The record contains the GreenMind account identifier, grant source, and grant, expiration, or revocation timestamps. Substack manages its own subscription and payment data. GreenMind does not receive full card details from Substack.

If you are a Texas resident, the Texas Data Privacy and Security Act gives you the right to:

Residents of other states with comprehensive privacy laws, including California, have comparable rights, and we honor the same requests regardless of where you live.

To make a request, email [email protected]. We will respond within 45 days, and may extend once by another 45 days if the request is complex — we will tell you if that happens. We will not charge you or degrade your service for exercising a right.

If we deny your request, you may appeal by replying to our decision. We will respond to an appeal within 60 days, and if we deny the appeal we will give you a way to file a complaint with the Texas Attorney General.

If we discover a breach of security that exposes your sensitive personal information, we are legally required to notify you, and we will. Texas law requires that notice without unreasonable delay and, absent a law-enforcement hold, no later than 60 days after we determine the breach occurred.

If a breach affects at least 250 Texas residents, we are also required to notify the Texas Attorney General. Where other states’ laws apply to affected residents, we will follow those as well.

Our notice will tell you what happened, what categories of information were involved, and what you can do about it.

You can export a portable copy of your account data and delete your account from Settings. Deletion removes complimentary access grants, private scan photos, and account-owned garden data. If paid billing is introduced later, deletion will first handle any active provider subscription. Limited service-lead and email-delivery records may remain only after contact fields and customer-authored content are scrubbed. The deletion receipt retains only controlled, non-personal status data.

Exact backup-retention and deletion timing remain operator decisions subject to post-launch counsel review; the in-app workflow does not set them. Email [email protected] for correction or individual-record requests that the current interface does not provide.

Green Mind is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, email [email protected] and we will delete it.

Your data is isolated to your account at the database level, transmitted over encrypted connections, and encrypted at rest by our providers. No system is perfectly secure, and we will not claim otherwise — which is why the breach-notification commitment above matters.

If we change this policy in a way that materially affects how we handle your personal data, we will update the effective date above and notify account holders by email before the change takes effect.

Questions, requests, or complaints: [email protected]

ConcordiaPax LLC, 190 South Gulf Freeway, Ste B2 #214, League City, TX 77573