Independent Viva Land Buyer Information Project Privacy policy Effective October 31, 2026 | Version 2026-10-31.5 https://vivalandbuyers.org/privacy Private contact: https://vivalandbuyers.org/contact Deletion requests: https://vivalandbuyers.org/delete Who operates this site The Independent Viva Land Buyer Information Project operates vivalandbuyers.org. This independently organized information project is not a law firm, government agency, or service affiliated with Viva Land Group or Viva Farms LLC. The organizer does not publish a personal identity on this website. Send privacy questions through the private website contact form; no email account is needed. What we collect The buyer questionnaire collects your submitted answers, purchase year and county, optional written descriptions and contact details, separate permission choices and their wording/version, the privacy-policy version in effect when the response is received, timestamps, and administrative review/public-visibility settings. You can participate without providing your name, email or phone number. The private contact form collects your messages and any details you include, and retains the conversation history and administrator replies. It returns a random request reference and private access code so you can reopen the conversation, read replies and send more messages without email. Message history includes participant/administrator labels and server-recorded timestamps. Contact conversations cannot be deleted through the participant controls; send a private request if you want the organizer to review removal. We store hashes of private access/deletion codes, not the original codes. Do not include Social Security numbers, bank/account numbers, identity documents, private access codes or unnecessary information about other people. This site does not accept participant document uploads. Private responses and public statistics Raw questionnaire responses, contact messages, participant names and contact details are not displayed publicly. Authorized administrators can review private records. Public statistics contain categorical answer counts only when the participant grants public-statistics permission. County, purchase year, written descriptions and contact details are excluded from those public statistics. Public counts begin with the first consenting submission. Purchases and reported experiences are self-reported and not automatically verified. You can leave public-statistics permission unchecked and still submit privately. An administrator can hide a response from every public total while retaining it privately. A review label does not prove an account is true or wrongdoing occurred. Public corporate filings and research documents are separate from participant submissions and may name company representatives or parties already identified in those records. How information is used and shared Private information is used to review buyer experiences, handle corrections/deletion and privacy requests, maintain the project, and prepare reports the participant authorized. Contact, public statistics, attorney sharing, regulatory sharing and project updates have separate optional permissions. Leaving one unchecked does not prevent choosing another. Identifying responses and contact details are shared with attorneys or regulators only with the corresponding permission or where disclosure is legally required. Agencies may disclose information under applicable laws and procedures. Submission does not create an attorney-client relationship or privilege, enroll anyone in a lawsuit, or guarantee representation, investigation or compensation. We do not sell participant information, publish it as testimonials, or use advertising trackers. Contact permission does not mean an email is sent automatically. Private contact replies are provided on this website using the request reference/code. Information already shared with an authorized recipient may be subject to that recipient's records and retention practices. Retention and deletion There is no age-based automatic deletion of questionnaire responses or private contact requests. Records may be retained while needed for the project or a related attorney/regulatory review. Retention decisions are made manually; there is no automatic two-year or three-year purge. Records should be removed when no longer needed, subject to any documented preservation requirement. Request deletion of your submitted experience on the website using its submission reference and private deletion code. A valid request normally deletes the active submission immediately and removes its contribution from public statistics. A documented legal/preservation hold can prevent immediate deletion; use the private contact form to request review. Administrators can delete records manually. Deleting a response does not delete a separate contact conversation, which has its own reference/code. Limited audit metadata, such as a random record reference, action and timestamp, may remain after deletion for security/accountability. Restricted backup copies can retain earlier data until separately removed. We do not promise a fixed backup-expiration period or immediate erasure from every backup. A backup restore must be checked against deletion records before restored responses are used or published. Keep your reference and private code safely. They appear on the confirmation screen and are not emailed. You can choose Save as PDF to download a private copy, or Print to print it. These copies include your message or questionnaire answers and private reference/code; conversation copies include message history. Keep them private because anyone with a conversation reference/code can read and send messages. PDF files are generated on your device using resources hosted by this website; private content is not sent to a PDF service. Without them, we may be unable to identify an anonymous record or authenticate a request. Use private contact to discuss the situation; recovery or disclosure of a record is not guaranteed. Security, cookies and service providers Questionnaire/contact message contents are encrypted in the application database. Review status, public-visibility flags, timestamps and audit metadata are not encrypted at the application field level. Administrative access is controlled through Cloudflare Access. The server validates signed Access tokens for administrator requests. These protections reduce risk but do not guarantee absolute confidentiality. Cloudflare provides DNS, HTTPS, tunnel routing and security, and may process IP addresses, browser/request metadata, security events and necessary cookies. Service-provider technical records can identify devices or activity. The public questionnaire does not require an application login cookie. Administrator sessions use a restricted cookie; Cloudflare may use its own security or Access cookies. The app stores checklist choices in browser local storage. It does not save completed questionnaire responses or contact messages in browser storage. Browser autofill/history and screenshots are controlled by your browser/device. Temporary app rate-limit records are held in memory. Administrative actions are audited without copying response contents into the audit log. Private codes are submitted in request bodies, not URL parameters. We do not intentionally log those bodies. Your choices and policy updates For corrections or permission changes, use the submission controls with your reference/code or send a private contact request. You can delete a response and submit a replacement with different permissions. Administrators cannot grant sharing permissions on your behalf through the response editor. This policy is effective October 31, 2026. Material changes will be posted with a new version/date. A policy update does not silently grant new sharing permissions for existing responses. External sites and recipients have their own policies. This website is intended for adult purchasers; do not submit information about children.