What we collect
When you sign in with Google, GeneGarden receives your verified email address, display name, profile image, and Google account identifier. We also store the seed records, photos, planting activity, groups, and sharing choices you add.
How we use it
We use this information to authenticate you, operate your collection, preserve its history, and apply the privacy and sharing settings you choose. We do not sell your personal information.
Usage analytics
We use Google Analytics to understand aggregate product adoption and improve GeneGarden. It records page views and limited product events such as sign-up, sign-in, intake creation, seed accession creation, and photo upload counts. We do not send your email address, display name, seed names, accession codes, photo contents, notes, search terms, or other collection details to Google Analytics.
Signed-in activity is associated with a pseudonymous identifier derived by GeneGarden; it is not your database ID or Google account identifier. Advertising storage, advertising personalization, and Google signals are disabled. Analytics page locations exclude URL query parameters, and report titles use internal route names instead of record titles.
GeneGarden also keeps a first-party, privacy-limited event history for website, API, and MCP activity. For MCP requests, this includes the tool name, success or error outcome, access scope, duration, and a random trace identifier. It does not include prompts, tool arguments or results, record identifiers, seed or seller names, notes, filenames, or photo contents.
If server-side product analytics export is enabled, GeneGarden may send those same limited events and pseudonymous identifiers to PostHog. Operational request logs use internal route names rather than URLs or request contents.
Visibility and sharing
New inventory is private by default. A record becomes visible to another person only when you share it with that user or a group, or deliberately make it public.
Storage and security
Application data and uploaded images are stored on access-controlled infrastructure. OAuth credentials are kept in protected secret stores and are not included in source code or container images.
If you connect a ChatGPT assistant, GeneGarden stores only hashed authorization credentials and the connection metadata needed to provide and revoke access. ChatGPT receives a time-limited token for your GeneGarden account; it does not receive your Google password.
Retention and deletion
Your information is retained while your account is active. To request account or data deletion, email bogliconsulting@gmail.com.
Contact
Questions about privacy can be sent to bogliconsulting@gmail.com.