Privacy Policy

Effective date: 2 September 2026 (version 2.2)

Nature Layer is run by Land Generation Pty Ltd (ACN 667 894 966). In this policy, “we”, “us”, and “our” mean that company, and “the Platform” means the Nature Layer website and app. This policy explains what personal information we collect, why, who sees it, and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

The short version

You can look at the map and run a free Initial Desktop Assessment without creating an account. We ask for your email when you want your report sent to you, and for a phone number only if you ask us to call you.
We use your property boundary and public data to build your assessment. That is the whole reason we collect it.
We do not put you on marketing lists. If your result is strong, someone on our team may reach out for a chat. Say no and that is the end of it. We never sell your information.
Your assessment results are yours. We only pass them on to people you ask us to, the providers who help us run the Platform, or if the law makes us.
You can ask us what we hold about you, ask us to fix it, or ask us to delete it: email hello@naturelayer.com.au.

The rest of this page is the detail behind those promises.

1. What we collect

Your contact details

When you ask us to email you a report, we collect your email address and how you describe yourself (for example, landholder or advisor). You do not need an account for this. If you later create an account, we collect your email address, and if you sign in with Google we receive your name, email, and profile photo from Google.

If you ask us to talk to you about a property, we collect the details you give us on that form: the email address to reply to, and, if you choose to add them, a phone number and a short note about your situation. The phone number and the note are optional. You can ask us to call instead of email, and we will.

Property data

When you add a property we store its name, location, the boundary you draw or upload, the cadastral parcels it covers, and any notes you add.

Assessment results

The outputs of any assessment you run (such as carbon yield estimates, rainfall figures, and soil classifications) are stored against your property so you can come back to them.

Payment details

If you order a paid assessment, your payment is processed by Stripe. We never see or store your card number. We keep a record of your order.

Guest sessions

If you use the Platform without an account, we set a cookie with a random identifier so your property and results stay with you between visits. It does not identify you personally until you give us your email address.

Technical and usage data

Like most websites, we collect technical information such as your IP address, browser type, pages visited, and how the Platform is performing. We use this to keep the Platform secure (for example, rate limiting and bot detection) and to understand which features are useful. We use Google Analytics for usage statistics and Sentry for error reporting. We do not use advertising trackers and we do not sell data to advertisers.

Information about other people

You can send a report to someone else, invite a collaborator, or (if you are an advisor) run an assessment for a client. If you give us another person’s email address, you must have their permission. We use their address only for the purpose you gave it to us.

2. How we use your information

Running your assessments: your property data is used to generate assessments and reports. This is the main reason we collect anything.
Sending you your reports and service emails: report delivery, sign-in links, and messages about an assessment you have ordered.
Talking to you when you ask us to: if you ask us to get in touch about a property, we use the contact details you gave us on that form to do exactly that, and to talk through finding a partner for that project. We do not use them for anything else.
One-off contact about a strong result, and marketing: see section 3 below.
Collaboration you set up: if you invite someone to a workspace or share a property, we share that property and its results with them, because you asked us to.
Keeping the Platform safe: security monitoring, preventing misuse, and fixing errors.
Improving the Platform: we use aggregated, de-identified usage data to decide what to build next. This data cannot identify you.

Our assessments are produced by automated systems, including modelling and AI, applied to your property boundary and public datasets. They are estimates to inform your decisions, and our Terms & Conditions explain their limits.

3. Marketing and one-off contact

This section is about contact you did not ask for. When you ask us to get in touch, we simply get in touch, and section 2 covers it.

We do not add you to marketing email lists unless you ask us to.

If your free Initial Desktop Assessment comes back strong, someone on our team may reach out for a chat about what a paid Detailed Desktop Assessment could show on that property. That is a personal note from a real person about your result, not a campaign.

Tell us no, by replying or any other way, and we will not raise it again.
Every such email will say who it is from and how to say no.
If we ever want to send broader marketing emails, we will only send them to people who tick a box asking for them. That box will never be pre-ticked, and every such email will include a working stop link.
Opting out never affects the emails we need to send you, like your report.
If you ask us where we got your details, we will tell you.

4. Who we share your information with

We do not sell your personal information. We share it only in these situations:

People you choose: collaborators you invite, workspaces you join, and anyone you ask us to send a report to.
Sponsors of funded assessments, with your consent: some programs fund free Detailed Desktop Assessments. If you claim one, we share your name, email, property name, property size, and region with the sponsor. We tell you this at the point you claim, you must agree before we share anything, and your assessment results are never shared with the sponsor.
Service providers who work for us: listed in section 5. They process data on our behalf and cannot use it for their own purposes.
Where the law requires it: if we must disclose information under a law, regulation, or valid legal process, we disclose only what is necessary.

5. The services we rely on

We use these providers to run the Platform:

Google Cloud Platform: hosting, database, and file storage. Your data is primarily stored in the australia-southeast1 (Sydney) region.
Firebase Authentication (Google): sign-in and session management.
Stripe: payment processing.
Google Workspace (Gmail): sending you emails, such as your report.
Google Analytics: usage statistics.
Google reCAPTCHA: protecting the Platform, including free assessments and our chat assistant, from automated abuse. Its use is subject to Google’s privacy policy and terms.
Sentry: error monitoring.
Attio: managing our relationships with the people we work with (a CRM).
Cloudflare: domain name services (DNS).

Your core data lives in Australia. Some providers, including Stripe, Sentry, Cloudflare, Attio, and Google’s authentication and analytics services, may process or store data overseas, mainly in the United States. Some of them run global infrastructure, so we cannot practically list every location their systems might touch. We choose providers with strong security practices and share only what each one needs to do its job.

6. How we protect your data

Data on our own systems is encrypted in transit (TLS) and at rest (AES-256). Access to production systems is restricted to authorised people. If a data breach happens that is likely to cause you serious harm, we will notify you. We will also notify the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

7. Cookies

We keep cookies to a minimum:

Essential: a session cookie that keeps you signed in, or keeps your guest session (and its properties) with you between visits. The Platform cannot work without it.
Analytics: Google Analytics cookies that help us understand how the Platform is used. You can block these in your browser settings or with Google’s opt-out tools, and the Platform will still work.

We do not use advertising or social media cookies.

8. How long we keep your data

We keep your properties and results for as long as you use the Platform, so they are there when you come back, even years later. If you ask us to delete your data:

Your personal details are deleted within 30 days.
Your property boundaries and assessment results are permanently removed.
We may keep records the law requires us to keep (for example, order and tax records), and de-identified statistics that cannot identify you.

9. Your rights and choices

You can, at any time:

Ask for a copy of the personal information we hold about you.
Ask us to correct anything that is wrong or out of date.
Ask us to delete your personal information, properties, and account.
Opt out of marketing, instantly, using the link in any marketing email or by contacting us.

Email hello@naturelayer.com.au. We aim to respond within 7 days, and always within 30.

If you think we have mishandled your information, tell us first and we will do our best to put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

10. Changes to this policy

If we change this policy in a way that matters, we will let you know by email or a notice in the Platform. The effective date and version at the top of this page show the latest revision.

11. Contact

Privacy Officer, Nature Layer
Land Generation Pty Ltd (ACN 667 894 966)
Email: hello@naturelayer.com.au