Privacy Policy

Effective date: 19 February 2026

Land Generation Pty Ltd (ACN 667 894 966), trading as Nature Layer (“we”, “us”, “our”), is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use the Nature Layer platform (“Platform”).

We comply with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth).

1. Information We Collect

Account information

When you create an account we collect your name and email address. If you sign in with Google we receive your name, email, and profile photo from Google.

Property data

When you add a property we store its name, address, drawn or uploaded boundary geometry, associated cadastral parcels, and any notes you add.

Assessment results

Outputs generated by Quick Scan, Desktop Assessment, and Ground Truthing are stored against your property, including carbon yield estimates, rainfall data, soil classifications, and methodology summaries.

Usage data

We collect basic usage analytics — pages visited, features used, and session duration — to improve the Platform. We do not use third-party advertising trackers.

2. How We Use Your Information

Delivering assessments: Your property data is used to generate carbon farming assessments and display results within the Platform.
Enabling collaboration: If you invite another user to a business workspace, we share the relevant property and assessment data with that user as authorised by you.
Platform improvement: Aggregated, de-identified usage data helps us understand how the Platform is used and where to prioritise improvements.
Communications: We may send you service-related emails (e.g. account verification, assessment completion notifications). We will not send marketing emails without your consent.

3. Data Storage & Security

Your data is stored on Google Cloud Platform infrastructure located in the australia-southeast1 (Sydney) region. We use:

Cloud SQL PostgreSQL with PostGIS for structured data.
Google Cloud Storage for uploaded files.
Firebase Authentication for secure account management.

All data is encrypted in transit (TLS) and at rest (AES-256). Access to production systems is restricted to authorised personnel with multi-factor authentication.

4. Third-Party Services

We use the following third-party services to operate the Platform:

Firebase Authentication (Google) — account sign-in and session management.
Google Cloud Platform — database hosting, file storage, and compute.
Cloudflare — DNS and DDoS protection.

These providers are bound by their own privacy policies and process data on our behalf.

5. Data Sharing

We do not sell your personal information. We only share your data in the following circumstances:

With your consent: When you explicitly invite collaborators to your business workspace, we share the relevant property and assessment data with those users.
Legal obligations: If required by law, regulation, or valid legal process, we may disclose information to the extent necessary to comply.
Service providers: Our infrastructure providers (listed above) process data on our behalf under strict contractual obligations.

6. Cookies

We use essential cookies only. Specifically, a Firebase __session cookie is used to maintain your authenticated session. We do not use advertising, analytics, or social media cookies.

7. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

Access the personal information we hold about you.
Correct any inaccurate or out-of-date information.
Request deletion of your personal information and account.
Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

To exercise any of these rights, contact us at hello@naturelayer.com.au. We will respond within 30 days.

8. Data Retention & Deletion

We retain your data for as long as your account is active. If you request account deletion:

Your personal data (name, email) is deleted within 30 days.
Property boundaries and assessment results are permanently removed.
De-identified, aggregated analytics data may be retained for Platform improvement.

We may also retain data where required by law (e.g. financial records for tax purposes).

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. The effective date at the top of this page indicates the latest revision.

10. Contact

For privacy inquiries or to exercise your rights, contact:

Nature Layer Privacy Officer
Email: hello@naturelayer.com.au