Privacy Policy.

The Short Version

We collect only what we need to sell you plants, build your habitat, and deliver good service. We don’t sell your data. We don’t share it with random ad networks. We try to be the boring, trustworthy kind of small business when it comes to your information.

If you ever want to know what we have, change it, or delete it — email us at info@theelectricjungle.com and we’ll handle it.

What We Collect

When you place an order

• Name & email — so we can confirm and update you on your order.
• Phone number (optional) — for pickup coordination.
• Order details — plants/builds ordered, amount, pickup slot, notes.
• Signed agreements — for custom build orders only.

When you create an account

• Email, password (stored hashed — never in plain text), tier, and rewards points balance.
• If you sign in with Google or a one-time email magic link instead of a password, we receive your email address (and, from Google, your name and verified-email status) — we never see your Google password.
• Order history tied to your email.
• Email preferences (whether you opted out of marketing) — transactional emails always send regardless.

When you join The Jungle Club (subscription)

• Stripe Customer ID and Subscription ID issued by Stripe.
• Tier (Spark / Surge), billing cycle dates, pause / skip / cancel history.
• Your cycle picks and pickup-slot bookings.

When you contact us (Support or Events)

• Name, email, message, and ticket / event-request reference number so we can reply and track follow-ups.
• Phone, event date, location, and headcount — only for event/booking requests where you provide them.

When you use the Plant Advisor (Dwight)

• The text of your messages is sent to Anthropic (Claude API) so Dwight can reply. Conversations aren’t tied to your account by default and are not stored long-term beyond Anthropic’s standard logging.
• We rate-limit by IP to prevent abuse — the IP and a request counter sit briefly in our edge cache.

When you tap “I’m here” at pickup

• We log the timestamp and your order reference so we know to come outside. That’s it.

When you chat with us from an in-store code

• If you scan one of our in-store help codes and start a chat, we store your messages and a chat session ID so we can answer you in real time. The chat isn’t tied to your account unless you share your name or order number in it — don’t send card numbers or passwords through it.

When you subscribe to the newsletter

• Just your email. Unsubscribe any time via the link in every email or from your account’s email preferences.

What we don’t collect

• Your credit card or bank info — that goes directly to Stripe (PCI-compliant). We never see or store it.
• Your location beyond your billing/pickup info.
• Browsing behavior across other sites.

How We Use It

• Fulfilling orders — confirming, prepping, scheduling pickups, sending tracking links.
• Customer support — answering your questions, handling warranty claims.
• Account features — rewards points, order history, tier benefits.
• Occasional updates — new plant drops, build availability (only if you’ve opted in).
• Required record-keeping — sales records, tax compliance.

We don’t use your data to train AI models, sell to data brokers, or pad some marketing list. Promise.

Who We Share It With

We use a small set of trusted services to actually run the business:

• Stripe — payment processing (cards, Apple Pay, Google Pay, Samsung Pay, BNPL) and subscription billing for The Jungle Club. Stripe also provides the Customer Portal where you manage your subscription payment method.
• Google — we use Google Workspace for email and Google Sheets/Apps Script for our order system.
• Cloudflare — serves the site, runs our backend API, and protects against abuse.
• Resend — transactional email delivery (order confirmations, magic-link sign-in, pickup updates).
• Anthropic (Claude) — powers the Plant Advisor (Dwight). Your messages are sent to Anthropic to generate replies; they handle data per their own privacy policy.

That’s the entire list. We don’t sell, rent, or trade your data with anyone else. Ever.

We may disclose information if required by law (court order, subpoena) — but only the minimum required.

How We Protect It

• HTTPS everywhere — all traffic is encrypted in transit.
• Hashed passwords — we never store passwords in readable form.
• Tokenized order tracking — your order links use unique tokens, not predictable IDs.
• Limited admin access — only the owner and authorized staff can view customer records.
• No payment data — we never store card numbers, so they can’t be stolen from us.

No system is bulletproof. If something does go wrong, we’ll notify affected customers within a reasonable timeframe.

Your Rights

You can do any of the following at any time by emailing info@theelectricjungle.com:

• Ask for a copy of everything we have on you.
• Correct or update your information.
• Delete your account and personal data (we keep order records for tax purposes, but personal details get scrubbed).
• Opt out of all marketing emails (one-click unsubscribe in every email).
• Withdraw consent for non-essential data use.

Cookies & Local Storage

We use browser local storage to remember:

• Your shopping cart (so it’s there if you close the tab).
• Your sign-in session (magic-link auth issues a session token; it expires after 30 days).
• Your reservation timer during checkout.
• Whether you chose guest checkout for the current session.

No third-party tracking cookies. No ad cookies. No cross-site fingerprinting.

Email Preferences

Every marketing email has a one-click Unsubscribe link that pulls a per-recipient token; tapping it flips your marketing-email flag off immediately. You can also manage this from your account’s Notifications section.

Transactional emails always send regardless — order confirmations, receipts, pickup updates, payment failures, Jungle Club cycle picks, password resets. These are required to deliver the service you bought.

Kids

Our site isn’t aimed at children under 13, and we don’t knowingly collect their data. If you’re a parent and think your kid signed up, email us — we’ll remove it.

Changes to This Policy

If we update this policy, we’ll bump the “last updated” date at the top. Significant changes will be announced via email for account holders. Continued use of the site after changes means you accept the updated policy.