Privacy Policy

One Place Plants (“OPP”, “we”, “us”) operates a marketplace connecting buyers with local plant nurseries. This policy explains what information we collect, why, and how you can control it. It applies to everyone who uses our site, whether you're browsing plants, buying from a nursery, or running a nursery's storefront.

Information we collect

• Account information: name, email address, and password (or OAuth identity if you sign in with Google) when you create an account.
• Vendor information: nurseries additionally provide business name, location, plant inventory, and payout details (handled directly by Stripe — see below).
• Order information: items purchased, fulfillment method (pickup, delivery, or shipping), and delivery address where applicable.
• Support conversations: messages you send through our chat widget, including your name and email so a nursery or our support team can reply.
• Usage data: pages viewed and general interaction data, collected in an aggregated, privacy-preserving way (see Analytics below).
• Location data you provide: your ZIP code or a location you select on the map, used to match you with your USDA growing zone. We do not access precise device geolocation.

How we use it

• Operate the marketplace — matching plants to your climate zone, processing orders, and connecting buyers with nurseries.
• Send transactional email — order confirmations, freshness alerts, account notifications, and support replies.
• Prevent fraud and abuse, and enforce our Terms of Service.
• Improve the product based on aggregated usage patterns.

We do not sell your personal information.

Payments

All payments are processed by Stripe. We never see or store your full card number. Vendor payouts run through Stripe Connect, which requires vendors to provide identity and banking information directly to Stripe under Stripe's own privacy policy.

Third parties we work with

• Supabase — hosts our database and handles authentication.
• Stripe — payment processing and vendor payouts.
• Resend — delivers transactional email.
• Chatwoot — powers our support chat widget.
• Vercel — hosting, and privacy-friendly, cookie-free product analytics.

Each of these providers only receives the information necessary to perform their function and is contractually restricted from using it for other purposes.

Cookies

We use a minimal, essential session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

Your rights

You can access, correct, or delete your account information at any time from your account settings, or by contacting us at privacy@oneplaceplants.com. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA, including the right to request a copy of your data or object to certain processing.

Children's privacy

One Place Plants is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

We'll update the date at the top of this page when this policy changes, and post material changes here before they take effect.

Contact

Questions about this policy? Email privacy@oneplaceplants.com or reach us through the chat widget.