← All legal documents

Privacy Policy

What we collect when you visit Landly or order a page, why we need it, who else handles it, and how to get it deleted.

Last updated: September 23, 2026 Version: 2026-09-23

The short version

  • We collect what you type into the order brief, the images you upload, and what you send us by email.
  • We use it to build your page, deliver it and get paid. We don’t sell it, and we don’t use it for advertising.
  • Our website analytics use no cookies and don’t identify you.
  • Images you upload are stored by an image host and deleted automatically after 180 days.
  • You can ask to see, correct or delete your data at any time.

1.Who we are

Landly is operated by [Full legal name of the owner or company], [Business / company registration number], [Postal address], Israel. For the personal data described here, we are the data controller (the “owner of the database” under Israeli law): we decide why and how it is used.

Questions or requests about your data: landly.co.il@gmail.com.

2.What we collect

What you give us in the order brief

  • Contact details: your name, business email, phone or WhatsApp number (optional).
  • Business details: business name, industry, current website, and the plan you chose.
  • Your answers about the page: what you sell, your goal, your ideal customer, objections, tone, competitors, things to avoid, deadline and brand colours.
  • Files: your logo and any photos you upload. If a photo shows people, it is personal data about them — please only upload photos you have permission to use.
  • A form key for your own page’s contact form, if you choose to give us one.
  • Your agreement: that you ticked the consent box, and which version of our Terms applied.

Images upload as soon as you add them. So that you can see a preview and don’t wait at the end, each image is sent to our image host the moment you drop it into the form — even if you never submit the brief. They are still deleted automatically after 180 days, and you can ask us to delete them sooner.

When you pay

Payments are handled by our payment provider Gumroad (Gumroad, Inc., United States). They collect your payment details directly; we never see or store your full card number. We receive your name, email, billing country, the amount, and a transaction reference.

When you email us

Your messages, revision requests and anything you attach.

When you browse our website

  • Anonymous usage statistics through Umami: pages viewed, the site you came from, browser, operating system, device type and country. We also count a few events — such as which package was clicked, which step of the form was reached, or that a required field was left empty — without ever recording what you typed. Umami does not use cookies and does not identify individual visitors.
  • Technical data that any website receives: your IP address and browser information, which our hosting provider and the services that deliver our fonts and code need in order to send you the page.

We do not use advertising pixels, remarketing or social media trackers.

3.Why we use it, and our legal basis

If you are in the European Economic Area or the UK, the GDPR requires us to tell you the legal basis for each use.

What we doData usedLegal basis
Build, deliver and revise your pageBrief, files, emailsPerforming our contract with you
Take payment and handle refundsPayment and contact detailsPerforming our contract with you
Keep invoices and accounting recordsPayment and contact detailsLegal obligation (tax law)
Reply to your questions and send order updatesContact details, emailsContract, or our legitimate interest in answering you
Keep a record that you accepted our TermsConsent box, terms version, timeLegitimate interest in proving our agreement
Improve our website and formAnonymous statisticsLegitimate interest in a site that works
Show your published page in our portfolioYour page as it appears publiclyLegitimate interest — you can object at any time
Deal with disputes and legal claimsOrder records and emailsLegitimate interest in protecting our rights

We don’t send marketing emails. If that ever changes, we’ll ask for your consent first. We don’t make decisions about you by automated means that have legal or similarly significant effects.

4.Who handles your data

We don’t sell your data and we don’t share it for advertising. We use the following service providers to run Landly. Each receives only what it needs for its job.

ProviderWhat it does for usWhat it receives
Web3FormsDelivers your submitted brief to our email inboxEverything in the brief, plus image links
Google (Gmail)Our email inboxYour brief and all email between us
ImgBBHosts the images you upload in the briefYour image files. Each image gets a web link that is not listed publicly, but anyone who has the link can open it. Deleted automatically after 180 days.
GumroadProcesses your paymentPayment details, name, email, billing address
Umami (EU hosting)Anonymous website statisticsAnonymous usage data, no cookies
CloudflareHosts our websiteIP address and browser information in server logs
Google Fonts and cdnjs (Cloudflare)Deliver our fonts and animation codeIP address and browser information when a page loads
AI-assisted tools (Claude, by Anthropic)Help draft copy and designYour brief answers — never your payment details

We may also disclose data where the law requires it, to protect our legal rights, or to a buyer if Landly is ever sold — in which case this policy continues to protect your data.

5.International transfers

We are based in Israel. The European Commission recognises Israel as providing an adequate level of data protection, so data can flow from the EU to us without extra safeguards.

Some of our providers process data in other countries, including the United States. Gumroad, which handles payments, and Google, which hosts our inbox, are both based there. Where data leaves the EEA, UK or Israel for a country without an adequacy decision, we rely on safeguards such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses, where the provider offers them. You can ask us for details.

6.How long we keep it

DataHow long
Uploaded images on ImgBBDeleted automatically 180 days after upload
Briefs that were never paid forDeleted within 90 days
Your brief, files and emails for a paid order3 years after your last order, so we can support your page and deal with any claim
Invoices, payment and refund records7 years, as required by Israeli tax law
A draft of the brief saved in your browserUntil you submit the form or clear your browser storage
Anonymous website statisticsKept in aggregate; they don’t identify you

If you ask us to delete your data sooner, we will, except for records we must keep by law.

7.Cookies & browser storage

We don’t set cookies. Our analytics are cookieless, so there’s no cookie banner.

While you fill in the order brief, your browser saves a draft on your own device (in “local storage”, under the name landly-brief-v1) so you don’t lose your answers if the page reloads. That draft is not sent to us until you submit, and it is deleted from your device when you do. You can remove it at any time by clearing your browser’s site data.

8.Your rights

Depending on where you live, you have some or all of these rights. We honour them for everyone, wherever you are:

  • Access — get a copy of the data we hold about you.
  • Correction — fix anything that is wrong or incomplete.
  • Deletion — ask us to erase your data.
  • Restriction — ask us to pause using it while a concern is looked into.
  • Portability — receive the data you gave us in a common format.
  • Objection — object to uses based on our legitimate interests, including our portfolio.

Email landly.co.il@gmail.com. We reply within 30 days. We may need to confirm it’s really you before sharing data, and we won’t charge you.

You can also complain to a data protection authority: in Israel, the Privacy Protection Authority; in the EU, the authority in your country; in the UK, the Information Commissioner’s Office. We’d appreciate the chance to put things right first.

9.US state privacy notice

If you live in California or another US state with a consumer privacy law: in the last 12 months we have collected the categories of data described in section 2, for the purposes in section 3, from you directly and from your use of our site. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we don’t use sensitive personal information. You have the right to know, correct and delete your data, and we won’t treat you differently for using those rights. Use the contact details above to make a request.

10.Security

Our website is served over encrypted HTTPS, and we use two-factor authentication on the accounts that hold your data. Only the people who work on your order can access your brief. No system is perfectly secure, so please don’t include passwords, payment card numbers, government ID or health details in your brief — we never need them.

If a breach ever puts your data at risk, we will notify you and the relevant authorities as the law requires.

11.Children

Landly is a service for businesses. It is not directed at anyone under 18, and we don’t knowingly collect data from children. If you believe a child has sent us data, contact us and we will delete it.

12.Your page’s visitors

This policy covers Landly’s own website and customers. Once your landing page is published, you are responsible for the personal data your page collects from its visitors — for example through its contact form or any analytics you add — including having your own privacy notice. Landly doesn’t receive or have access to your visitors’ data.

13.Changes to this policy

When we change how we handle data, we update this page and the date at the top. If a change is significant and affects data we already hold about you, we’ll tell you by email before it takes effect.

14.Contact

Landly
[Full legal name of the owner or company]
[Postal address]
Email: landly.co.il@gmail.com