1. Introduction
VARIIUS™, a subsidiary of TCO Ventures, LLC ("we," "us," or "our") operates Pereniful™ ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service.
2. Information We Collect
Account Information
- Name and email address (provided during registration)
- Authentication credentials (password hash or OAuth provider ID)
- Billing information (processed by Stripe — we do not store credit card numbers)
Gardening Data
- Plant profiles, care schedules, and growth logs you create
- Photos you upload (stored securely in our database)
- Garden spaces, watering schedules, and planner items
- Gardener profile preferences (experience level, interests, goals)
Location Data
- ZIP code (used to determine your USDA hardiness zone and local weather)
- We do not collect precise GPS location
Usage Data
- Pages visited and features used within the Service
- AI assistant (COMPIIS™) conversation history
- Device type and browser information
3. How We Use Your Information
- Provide and maintain the Service
- Personalize your gardening experience (AI recommendations, weather alerts, zone-based tips)
- Process subscription payments via Stripe
- Send account-related emails (verification, password reset, billing notifications)
- Improve the Service based on usage patterns
- Respond to support inquiries
We do not sell your personal information to third parties. We do not use your data for targeted advertising.
4. Third-Party Services
We use the following third-party services to operate Pereniful™:
- Stripe — Payment processing. Subject to Stripe's Privacy Policy.
- Google OAuth — Authentication (if you sign in with Google). Subject to Google's Privacy Policy.
- Google Analytics (GA4) — Anonymized usage analytics to improve the Service. Subject to Google's Privacy Policy. Can be declined via cookie consent.
- Google Gemini AI — Powers COMPIIS™ AI assistant. Your gardening questions are processed by Google's AI services.
- PlantNet — Plant identification from photos.
- OpenWeatherMap — Weather data based on your ZIP code location.
- Resend — Email delivery for account notifications.
- Railway — Cloud infrastructure hosting.
5. Data Storage and Security
Your data is stored on secure servers hosted by Railway (cloud infrastructure). We implement industry-standard security measures including:
- Encrypted data transmission (HTTPS/TLS)
- Encryption at rest (AES-256 provided by our database hosting infrastructure)
- Hashed passwords (bcrypt)
- Row-level security in our database (tenant isolation)
- JWT-based authentication with short-lived tokens
While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your account data for as long as your account is active. If you request account deletion:
- 30-day grace period — Your account is immediately deactivated and inaccessible, but your data is retained for 30 days in case you change your mind.
- Recovery — During this 30-day window, you can contact support to restore your account and all associated data.
- Permanent deletion — After 30 days, all personal data is permanently and irreversibly deleted.
- Audit record — We retain a minimal, non-identifying record (hashed email, account dates, subscription status) for fraud prevention and analytics. This cannot be used to identify you.
Inactive trial accounts: If your free trial expires and you do not subscribe within 30 days, your account and all associated data will be automatically and permanently deleted. You will receive email reminders before this occurs.
Billing records may be retained as required by tax law.
7. Your Rights
You have the right to:
- Access — Request a copy of the personal data we hold about you
- Correct — Update inaccurate information in your account
- Delete — Delete your account and all associated data directly from Settings → Account → "Delete My Account"
- Export — Request an export of your plant and garden data
- Opt-out — Disable email notifications in Settings
To exercise these rights, contact us at pereniful-support@variius.com.
8. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us immediately and we will delete it.
9. Cookies and Tracking
We use the following cookies and tracking technologies:
- Essential cookies — Authentication and session management (required for the Service to function)
- Google Analytics (GA4) — Collects anonymized usage data (pages visited, session duration, device type) to help us improve the Service. You can opt out via the cookie consent banner or browser settings.
- Google Tag Manager — Manages analytics tags. Does not collect personal data itself.
When you first visit Pereniful™, a cookie consent banner allows you to accept or decline non-essential cookies. If you decline, Google Analytics is disabled and no tracking cookies are set.
We do not use advertising pixels, retargeting cookies, or share analytics data with advertisers.
10. California Privacy Rights (CCPA/CalOPPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA):
- Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete — You may request deletion of your personal information. Use Settings → Account → "Delete My Account" for immediate self-service deletion.
- Right to Opt-Out of Sale — We do not sell your personal information to third parties. No opt-out is needed because no sale occurs.
- Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights.
Do Not Sell My Personal Information: Pereniful™ does not sell, rent, or trade your personal information to any third party for monetary or other valuable consideration.
Shine the Light (California Civil Code § 1798.83): California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for direct marketing.
To exercise your California privacy rights, contact us at pereniful-support@variius.com or use the self-service tools in your account Settings.
11. DMCA and Copyright
We respect intellectual property rights. If you believe content uploaded to Pereniful™ infringes your copyright, please send a DMCA takedown notice to:
DMCA Agent:
VARIIUS™, a subsidiary of TCO Ventures, LLC
Email: pereniful-support@variius.com
Subject line: "DMCA Takedown Notice"
Your notice must include: (1) identification of the copyrighted work, (2) identification of the infringing material and its location on the Service, (3) your contact information, (4) a statement of good faith belief that the use is unauthorized, (5) a statement under penalty of perjury that the information is accurate and you are authorized to act on behalf of the copyright owner, and (6) your physical or electronic signature.
We will respond to valid DMCA notices by removing or disabling access to the allegedly infringing content within a reasonable time.
12. International Data Processing
Pereniful™ is a US-based service. Your data is stored on servers in the United States and may be processed by third-party services in other jurisdictions:
- Google Gemini AI — Processes COMPIIS™ conversations (gardening questions and context, not personal identifiers)
- Stripe — Processes payment data (PCI-compliant, headquartered in the US)
- PlantNet — Processes plant photos for identification (EU-based)
By using the Service, you consent to the transfer and processing of your data in the United States and by third-party services as described above. We ensure all third-party processors maintain appropriate security standards.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.
14. Contact
If you have questions about this Privacy Policy or how we handle your data, contact us at:
VARIIUS™, a subsidiary of TCO Ventures, LLC
Phoenix, Arizona
Email: pereniful-support@variius.com
Phone: (480) 788-0084