Landi Inc. — Privacy Policy

Effective date: August 18, 2026 · Version: 2026-08-18-v1.1

1. Who We Are

Landi Inc. ("Landi Inc.", "we") is the controller of personal data described in this policy. It is a corporation incorporated in the State of Delaware, USA, with its principal place of business at 1209 North Orange Street, Wilmington, DE 19801. Privacy contact / Data Protection Officer: [email protected]. [EU/UK representative, if appointed: name and address.]

2. Scope

This policy covers personal data we process as a controller: data about visitors to our marketing site, prospects, account holders, and their authorized users. It does not cover End User Data that our customers collect through pages they build with Landi Inc. — for that, the customer is the controller and their own privacy notice applies; Landi Inc. processes it under the DPA.

3. Personal Data We Collect

• Account data: name, email, password (hashed), company, role.
• Billing data: billing name, address, tax ID, and payment-method tokens (card details are handled by our payment processor, not stored by us).
• Usage data: pages created, features used, log data, device/browser info, IP address, approximate location.
• Support and communications: messages you send us and related metadata.
• Cookies and similar technologies: see Section 10.

We do not intentionally collect special-category/sensitive data about account holders. Please do not send us such data unless necessary.

4. How and Why We Use Personal Data (and Legal Bases under GDPR)

Where we rely on legitimate interests, we balance them against your rights. You may object as described in Section 7.

5. Artificial Intelligence Processing

The Service uses AI, including third-party models, to generate landing pages and related content. We may process your prompts and inputs to produce Generated Output and to operate the Service. We do not use Customer Content or End User Data to train or fine-tune foundation models, and our AI providers are engaged under API terms that prohibit use of our inputs and outputs for model training. We do generate anonymized, aggregated statistics about the performance of Landi's own persona archetypes (for example, aggregate impression and click counts by archetype and industry). These statistics contain no visitor-level data, no Customer Content, and no information identifying any customer or end user, and are used to improve Landi's archetype library and recommendations. They are not used to train or fine-tune any AI model. We provide transparency about automated processing consistent with GDPR and the Israeli Protection of Privacy Law as amended.

6. Sharing and Sub-Processors

We share personal data with:

• Sub-processors that help us run the Service. Current sub-processor: Google LLC (Gemini) — AI model provider used to generate landing-page content. The current list is maintained in Annex 3 of the DPA.
• Professional advisors, auditors, and authorities where required by law.
• In a corporate transaction (merger, acquisition, financing), subject to confidentiality.

We do not sell personal data. See the US State section for the specific meaning of "sell"/"share" under US laws.

7. International Transfers

Landi Inc. is based in the United States, and our infrastructure providers may process data in the United States and other locations, so your personal data may be transferred to and processed in the US and elsewhere. Where we transfer personal data from the EEA or UK to the United States or another country without an adequacy decision, we rely on appropriate safeguards such as the Standard Contractual Clauses (with the UK Addendum where relevant), and/or on the EU–US Data Privacy Framework and its UK extension where Landi Inc. is certified. [Consider self-certifying under the Data Privacy Framework to simplify EEA/UK transfers.] Transfers involving Israeli residents' data are handled in accordance with applicable Israeli requirements. Details of the safeguards we use are available on request.

8. Data Retention

We retain personal data for as long as needed to provide the Service and for legitimate business and legal purposes (e.g., tax, accounting, dispute resolution), then delete or anonymize it. Consent records are retained as evidence of acceptance for the applicable limitation period.

9. Security

We implement technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. Personal data submitted through pages and forms is transmitted over encrypted (HTTPS) connections, and the Service is designed not to place personal data in page URLs or query strings. No system is perfectly secure; we cannot guarantee absolute security.

10. Cookies and Tracking

We use strictly necessary cookies to operate the Service, and first-party personalization cookies on published landing pages. We do not use analytics or marketing cookies. You can manage cookies via your browser settings. See our Cookie Policy at /legal/privacy?tab=cookies for details.

Customer-deployed tags. Landing pages built by our customers may contain the customer's own analytics, advertising, or remarketing tags (for example, Google Ads or Meta pixels). Those tags are controlled by the customer, not by Landi Inc.. The customer is responsible for obtaining any legally required consent — including EEA/UK cookie and ad-personalization consent — and for the related disclosures. This policy does not cover data collected by such customer-controlled tags.

11. Your Rights

11.1 GDPR (EEA/UK residents)

You have rights to access, rectify, erase, restrict, and port your data, to object to processing, and to withdraw consent. To exercise them, contact [email protected]. You may complain to your supervisory authority.

11.2 United States — California (CCPA/CPRA) and other state laws

If you are a California resident, you have rights to know, access, delete, and correct personal information, and to opt out of "sale" or "sharing" of personal information and of certain targeted advertising and profiling. We do not sell personal information for money; [state whether any "sharing" for cross-context behavioral advertising occurs and how to opt out]. We do not discriminate against you for exercising your rights. Residents of [Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws] have comparable rights. To exercise them, use [method / link / email]. You may appeal a denied request at [method].

11.3 Israel — Protection of Privacy Law (as amended by Amendment 13)

If you are in Israel, you have rights to be informed about the processing of your data, to access your data, and to request correction or deletion, subject to legal exceptions. We provide enhanced privacy notices as required, including the identity and contact details of the controller, the purposes and legal grounds of processing, recipients, the consequences of refusing to provide data, and the source of the data where relevant. To exercise your rights, contact [email protected]. You may contact the Israeli Privacy Protection Authority regarding our processing.

12. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to This Policy

We may update this policy. For material changes we will provide notice and, where required, obtain consent. The Version and Effective date will change.

14. Contact

Landi Inc., 1209 North Orange Street, Wilmington, DE 19801 · Privacy/DPO: [email protected]