Privacy Policy

Effective date: June 8, 2026

This privacy policy explains how Landly processes personal data for the Landly web application, mobile companion app, account services, relocation planning tools, document workflows, AI Guide, support, security, billing, and privacy requests.

Controller And Contact

Landly LTD, UIC 208838502, registered office at 25 Vitosha Blvd., fl. 2, 1000 Sofia, Bulgaria, is the controller for the service described in this policy. Additional provider-identification details are published in Landly's Legal Notice. You can contact Landly about privacy or data protection questions at privacy@landly.to.

Landly has not published a Data Protection Officer contact at this time. If Landly appoints a Data Protection Officer or is required to publish another designated privacy contact, those details will be added to this policy. Until then, privacy questions should be sent to the email address above.

Personal Data We Process

Waitlist and invite request data

Email address, moving-to city, consent confirmation, email confirmation status and timestamps, request status, duplicate request count, and any message metadata you choose to send when joining the waitlist or replying to Early Access lifecycle messages.

Account and authentication data

Email address, Supabase account ID, authentication/session records, password reset events, plan status, and account security metadata.

Profile and relocation planning data

Information you add to plan a move or stay, such as origin and destination, move timeline, household context, language level, employment context, budget ranges, preferences, interests, tasks, and progress.

Document and user content

Files, photos, document scans, filenames, MIME type, file size, checksum, storage metadata, user-confirmed document collection, filing status such as Needs review or filed, advisory suggestion metadata, and links between documents and Landly tasks or workflows.

Payment and billing data

Where paid Landly services are offered on the web, the checkout provider or Merchant of Record, including Paddle where enabled, processes payment details. Landly stores related customer, subscription, invoice or receipt, product, billing status, refund, and transaction metadata needed to provide and support the paid service. Landly does not store full card numbers.

AI Guide and support context

When you use Landly Guide, Landly processes your question, selected relocation context such as city or visa context, generated answer text, source references, quota counters, and safety/refusal metadata.

Privacy, consent, and account-request records

Consent choices, consent history, data export and deletion requests, request status, timestamps, and pseudonymized request metadata such as HMAC-hashed IP address or user-agent values used for auditability and security.

Community participation data

Community questions, task feedback, candidate tips, votes, reports, Playbook reuse submissions, Spotlight story data, cohort interest joins, consent records and timestamps, moderation state, reason codes, report metadata, and safe routing metadata. Public Community display is pseudonymous or editorial by default and does not include your email, exact address, employer, document names, nationality, or children's ages.

Technical, security, and usage metadata

API request metadata, device or browser information, approximate network metadata, error and security logs, rate-limit counters, and cache records needed to run, protect, and troubleshoot Landly.

Maps and location-related context

Landly stores the cities, countries, POIs, and map choices you interact with. Map tiles are loaded through MapTiler when map surfaces are used. Precise device location is processed only if a feature asks for it and you allow it.

Purposes And Legal Bases

Review waitlist requests, send access or waitlist updates, and manage the free invite-only Early Access cohort.

Consent, GDPR Art. 6(1)(a), and legitimate interests in operating a controlled Early Access cohort, Art. 6(1)(f).

Provide Landly accounts, workspaces, tasks, documents, maps, and saved planning flows.

Contract performance, GDPR Art. 6(1)(b).

Personalize relocation, stay, task, city, and AI Guide outputs based on your chosen context.

Contract performance, Art. 6(1)(b), and consent or legitimate interests where required, Art. 6(1)(a)/(f).

Process web payments, subscriptions, refunds, invoices, and billing support.

Contract performance and legal obligations, Art. 6(1)(b)/(c).

Operate Community contributions, moderation, safety reporting, and abuse prevention.

Consent for public contribution and reuse, GDPR Art. 6(1)(a); legitimate interests for moderation, safety, quality, and abuse prevention, Art. 6(1)(f); legal obligation where applicable, Art. 6(1)(c).

Protect Landly, prevent abuse, enforce rate limits, debug incidents, and keep audit trails.

Legitimate interests, Art. 6(1)(f). Landly pursues the concrete interests of protecting authenticated accounts, preventing automated abuse, maintaining service reliability, investigating security incidents, and demonstrating accountable handling of privacy requests.

Handle data access, export, correction, restriction, objection, and deletion requests.

Legal obligation and legitimate interests, Art. 6(1)(c)/(f).

Send transactional product, security, billing, or privacy notices.

Contract performance, legal obligation, and legitimate interests, Art. 6(1)(b)/(c)/(f).

Send marketing messages or process optional location/personalization consents.

Consent, Art. 6(1)(a), which you may withdraw at any time.

Required And Optional Information

Providing an email address, password or another supported authentication method, and the technical data needed to maintain a secure session is required to create and use an authenticated Landly account. Without this information, Landly cannot provide the authenticated service.

Relocation profile details, document uploads, AI Guide questions, map interactions, and optional consent-based settings are provided by choice. If you do not provide them, some Landly outputs may be less relevant or unavailable. Payment and billing information is required only when you choose to purchase a paid Landly service through a web checkout flow.

Community participation is off by default and required for end-user public contribution or reuse actions. Viewing curated or public Community snippets does not require Community participation consent, though analytics still follows the analytics consent choices described in this policy.

You can change optional website cookie choices in . Essential storage remains required for service operation and to remember your choice. More detail is available in the Cookie Policy. Marketing cookies are not currently used.

Document Vault collection filing is user-confirmed. Landly may suggest a document collection from limited context such as filename, file type, open task slots, or prior corrections, but this does not read document contents, perform OCR, or file a document without your confirmation.

Processors And Third-Party Services

Landly uses service providers to operate the product. They process personal data only for the relevant service purpose. Landly keeps a public list of core operational providers on the Subprocessors page and updates this policy when provider changes materially affect how personal data is processed.

Vercel

Frontend hosting, CDN, and web delivery for the Next.js application.

Render

Backend API hosting and Valkey cache infrastructure.

Supabase

PostgreSQL/PostGIS database, authentication, JWT/session handling, and Supabase Storage for document vault objects.

Paddle or web payment provider

Web payment processing, Merchant-of-Record or billing-provider handling where enabled, invoices or receipts, fraud-prevention signals, refunds, subscriptions, and payment support.

Resend

Transactional email delivery, where product, billing, security, or privacy notices are enabled.

Google Workspace / Gmail

Business email hosting, mailbox handling, and support/privacy correspondence where Landly receives or sends email through Google Workspace or Gmail.

MapTiler

Map tile delivery and map-related request processing when map surfaces are used.

PostHog Cloud EU

Consent-based web and product analytics for page views, waitlist funnel events, and product usage signals.

Anthropic

AI model processing for Landly Guide, support, planning, or safety workflows where Anthropic models are enabled.

OpenAI / ChatGPT

AI model processing for Landly Guide, support, planning, or safety workflows where OpenAI or ChatGPT-based services are enabled.

The current mobile companion app does not include advertising, tracking, crash-reporting, or analytics SDKs, and it does not run App Store billing, Google Play billing, in-app purchases, or mobile checkout.

International Transfers

Landly is an EU-oriented service. Some providers may process data outside the European Economic Area, depending on provider operations and support access. Where this happens, Landly relies on appropriate safeguards such as data-processing agreements, EU Standard Contractual Clauses, adequacy decisions, and EU-US Data Privacy Framework participation where available.

Retention

Landly keeps personal data only as long as needed for the purposes described in this policy, including account operation, contractual services, security, legal compliance, accounting, dispute handling, and privacy-request auditability.

Account, workspace, profile, task, and document records are kept while your account is active or while needed to provide the requested service.
Document Vault files, task links, filing status, collection, and suggestion metadata follow the Document Vault deletion lifecycle. Account deletion removes task links, tombstones document records, and purges backing storage objects through Landly's Vault service unless a lawful exception requires limited audit retention.
Account deletion requests are handled within a reasonable period and, where GDPR applies, within 30 days unless a lawful exception requires a different timeline.
Payment, invoice, tax, accounting, fraud-prevention, security, and audit records may be retained for longer where required by law or necessary to establish, exercise, or defend legal claims.
Community UGC content may be retained while your account is active. Account deletion removes or anonymizes public author links, deletes raw vote and report signals where applicable, and keeps bounded moderation queue or audit metadata only where needed for safety, accountability, legal compliance, or legal claims.
Export download links are temporary and expire after the stated availability window.

Your Rights

Where GDPR or similar privacy law applies, you may have the rights below. Some rights can be limited by lawful retention, security, fraud-prevention, accounting, or legal-claim requirements.

Access a copy of your personal data.
Correct inaccurate or incomplete personal data.
Request deletion of your account or specific data where legally available.
Restrict or object to certain processing.
Receive portable data where technically and legally available.
Withdraw consent for consent-based processing without affecting earlier lawful processing.
Complain to a competent supervisory authority.

To request account deletion, use the in-app deletion flow or the public Account Deletion resource. For other privacy requests, contact privacy@landly.to.

You may also complain to the EU data protection supervisory authority responsible for Landly LTD in Bulgaria, the Commission for Personal Data Protection (CPDP), or to another competent EU supervisory authority available to you.

Automated Decision-Making

Landly does not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Landly Guide and other AI-assisted outputs are informational and assistive: they do not determine visa eligibility, immigration outcomes, healthcare rights, tax obligations, or other legal entitlements.

Pre-publication Community moderation screening may automatically queue or hide content for safety review, but it does not produce legal or similarly significant effects. Reported content is handled through Landly support and review paths.

Document Vault collection suggestions are advisory organization aids. They do not determine your legal status, do not classify you for eligibility decisions, and do not file documents until you confirm or change the collection.

Security

Landly uses technical and organizational measures designed to protect personal data, including encrypted transport, access controls, service-role separation, signed document URLs, audit logs, HMAC-based pseudonymization for selected request metadata, input validation, rate limits, and provider-neutral storage boundaries.

Children

Landly is not directed to children and is intended for adults who are evaluating, planning, or managing relocation and stay workflows. Product and legal eligibility requirements, including account minimum-age rules, may vary by product, location, and applicable law.

Updates

Landly may update this policy when products, processors, payment channels, mobile capabilities, legal entity details, jurisdiction, language requirements, or other legal requirements change. If a change materially affects your rights or choices, Landly will use a reasonable notice method for affected users.