Privacy policy

This policy explains how personal data is processed when you use gardencopilot.com ("GardenCopilot", the "website"). It is written to be readable. If anything is unclear, email us.

1. Who is responsible

The controller is Akrinum OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia ("we", "us"). Contact for all privacy matters: support@akrinum.com.

2. Summary

• You can read the whole website without giving us any personal data.
• Google Analytics only runs if you click "Allow analytics". Otherwise no analytics cookies are set.
• If you sign up for email updates, we store your email address, your optional interests and a record of your consent. You confirm by double opt-in and can unsubscribe at any time.
• We do not sell personal data and do not use it for advertising.

3. Email updates (the "grow notes" list)

What we collect: your email address; the interests you optionally tick; the date, time and version of the consent text you agreed to; and a coarse indication of how you found us (for example a campaign tag such as "youtube/shorts" or the referring website's domain). When you click the confirmation link in the email, Brevo processes that confirmation and keeps its own record of it.

Why: to send you the updates you asked for and to prove that you consented.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every email or by emailing us. Withdrawal does not affect earlier processing.

Processor: Brevo (Sendinblue SAS, France) stores the list and sends the emails on our behalf under a data processing agreement.

Retention: until you unsubscribe. After that we keep your email address on a suppression list only so that we don't email you again, and keep the consent record for as long as we may need to demonstrate it.

Spam protection: the signup form uses a hidden field and a timing check, and the server limits repeated attempts. To do this it keeps a short-lived, in-memory count of recent attempts per IP address (for up to 10 minutes); it isn't written to a database or to logs.

4. Earlier waitlist signups

Before November 2026, the website's waitlist form was handled by Formspree (Formspree, Inc., USA), which stores the email addresses submitted through it. We will not add these addresses to the new email list unless the person confirms through double opt-in. If you signed up earlier and want your entry deleted, email us.

5. Cookies, analytics and local storage

Your choice is stored locally. When you choose "Allow analytics" or "No thanks", the choice is saved in your browser's local storage (key gc-consent-v1) so we don't ask again. You can change it anytime with "Cookie settings" in the footer.

Google Analytics 4 (only with consent). If you allow analytics, we load Google Analytics, provided by Google Ireland Limited. It sets cookies named _ga and _ga_<ID> (stored for up to 2 years) to distinguish visits, and records pages viewed, events (for example a successful signup or use of the calculator), approximate location, device and browser information. Advertising storage, ad user data and ad personalisation are set to “denied” in our configuration. Legal basis: your consent (Art. 6(1)(a) GDPR and the applicable ePrivacy rules on cookies). If you withdraw consent (“No thanks” under Cookie settings), Analytics is switched off for this site immediately, it no longer loads on later visits, and its cookies on this domain are deleted.

Visit source (in memory only). To understand which videos or links bring visitors, the page notes the campaign tags in its address (e.g. utm_source) and the referring site's domain. This is held only in the open page's memory — it is not written to cookies or browser storage — and disappears when you reload or close the page. It is only sent to Google Analytics if you consented, or to Brevo as part of your signup if you subscribe.

6. Hosting and server logs

The website is hosted by Netlify, Inc. (USA). When you visit, Netlify processes technical data such as your IP address, the page requested, time and browser type to deliver the website and protect it from abuse. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

7. When you email us

We use your email and message to reply. Legal basis: legitimate interest in answering enquiries (Art. 6(1)(f)), or steps prior to a contract where relevant. We keep correspondence as long as needed for the enquiry and any follow-up.

8. External links

The website links to YouTube and other sites but does not embed them. Once you follow a link, that site's privacy policy applies.

9. International transfers

Some providers (Netlify, Google, Formspree) may process data outside the EU/EEA, in particular in the USA. Where this happens we rely on appropriate safeguards, such as the EU–US Data Privacy Framework for certified recipients or the European Commission's Standard Contractual Clauses.

10. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Email support@akrinum.com. You can also complain to a supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) — or the authority where you live.

11. Children

The website is not aimed at children. Please don't sign up for email updates if you are under 16.

12. Automated decisions

We do not make decisions with legal or similarly significant effects based solely on automated processing.

13. Changes

We will update this policy when our processing changes and change the date at the top. Significant changes affecting subscribers will be communicated by email.