Last updated: April 19th, 2026

1. Who We Are

Aedlo is operated by OÜ Vuntsid ja Kõrvad (regnr. 16025947), based in Estonia.

For any privacy-related questions, contact:
info@aedlo.ee

---

2. What Data We Collect

2.1 When you use Aedlo without an account

• Garden designs are stored locally on your device
• We do not collect or store this data

---

2.2 When you create an account

We collect:

• Email address
• Password (securely hashed)
• Garden design data (stored as JSON)

---

2.3 Automatically collected data (analytics)

We may collect:

• IP address (anonymized where possible)
• Device/browser information
• Usage data (pages visited, actions taken)

This data is used to:

• Understand how Aedlo is used
• Improve the product

---

2.4 Cookies

Aedlo uses cookies for:

• Analytics
• Essential site functionality

You are presented with a cookie consent banner where required.

You can:

• Accept or reject non-essential cookies
• Change preferences at any time

---

3. Legal Basis for Processing (GDPR)

We process your data under:

• Contract — to provide your account and save your designs
• Legitimate interest — to improve the service and ensure security
• Consent — for analytics cookies (via cookie banner)

---

4. How We Use Your Data

We use your data to:

• Provide and maintain the service
• Store and retrieve your garden designs
• Enable login and account management
• Improve performance and usability
• Ensure security and prevent abuse

---

5. Data Storage & Security

Your data is stored on servers hosted by Zone.

We implement reasonable technical measures including:

• Secure password hashing
• Access controls
• Server-level protections

However, no system is 100% secure.

---

6. Data Sharing

We do not sell your data.

We may share data with trusted third-party service providers where necessary to operate Aedlo:

• Hosting provider (Zone) — to store and serve application data
• Email delivery provider — to send transactional emails such as password reset and account verification messages This provider processes recipient email addresses and related delivery metadata on our behalf.
  Where required, transfers outside the EEA are safeguarded using Standard Contractual Clauses or equivalent lawful mechanisms.
• Analytics providers (if enabled via cookies)

All third parties are required to process data in accordance with applicable data protection laws.

---

7. Data Retention

• Account data is retained as long as your account is active
• You may request deletion at any time
• Analytics data is retained according to provider settings

---

8. Your Rights (GDPR)

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Request data portability

To exercise your rights, contact:
info@aedlo.ee

You also have the right to lodge a complaint with your local data protection authority.

---

9. International Users

Aedlo is primarily intended for users in Estonia and the European Union.

If you access the service from outside the EU, your data may be processed within the EU.

---

10. Future Features

In the future, Aedlo may introduce:

• File uploads (e.g. images, base plans)
• Sharing features
• Paid subscriptions

This Privacy Policy will be updated accordingly.

---

11. Changes to This Policy

We may update this Privacy Policy.

Users will be notified of significant changes where appropriate.