Your choices control what is shared.

Download this privacy policy (text)

Who operates this site

The Independent Viva Land Buyer Information Project operates vivalandbuyers.org. This independently organized information project is not a law firm, government agency, or service affiliated with Viva Land Group or Viva Farms LLC. The organizer does not publish a personal identity on this website. Send privacy questions through the private website contact form; no email account is needed.

What we collect

The buyer questionnaire collects your submitted answers, purchase year and county, optional written descriptions and contact details, separate permission choices and their wording/version, the privacy-policy version in effect when the response is received, timestamps, and administrative review/public-visibility settings. You can participate without providing your name, email or phone number.

The private contact form collects your messages and any details you include, and retains the conversation history and administrator replies. It returns a random request reference and private access code so you can reopen the conversation, read replies and send more messages without email. Message history includes participant/administrator labels and server-recorded timestamps. Contact conversations cannot be deleted through the participant controls; send a private request if you want the organizer to review removal. We store hashes of private access/deletion codes, not the original codes. Do not include Social Security numbers, bank/account numbers, identity documents, private access codes or unnecessary information about other people. This site does not accept participant document uploads.

Private responses and public statistics

Raw questionnaire responses, contact messages, participant names and contact details are not displayed publicly. Authorized administrators can review private records. Public statistics contain categorical answer counts only when the participant grants public-statistics permission. County, purchase year, written descriptions and contact details are excluded from those public statistics.

Public counts begin with the first consenting submission. Purchases and reported experiences are self-reported and not automatically verified. With small totals, people may be able to infer individual answers even though identifying fields are omitted. We cannot promise complete anonymity or that a participant cannot be identified. You can leave public-statistics permission unchecked and still submit privately.

An administrator can hide a response from every public total while retaining it privately. A review label does not prove an account is true or wrongdoing occurred. Public corporate filings and research documents are separate from participant submissions and may name company representatives or parties already identified in those records.

How information is used and shared

Private information is used to review buyer experiences, handle corrections/deletion and privacy requests, maintain the project, and prepare reports the participant authorized. Contact, public statistics, attorney sharing, regulatory sharing and project updates have separate optional permissions. Leaving one unchecked does not prevent choosing another.

Identifying responses and contact details are shared with attorneys or regulators only with the corresponding permission or where disclosure is legally required. Agencies may disclose information under applicable laws and procedures. Submission does not create an attorney-client relationship or privilege, enroll anyone in a lawsuit, or guarantee representation, investigation or compensation.

We do not sell participant information, publish it as testimonials, or use advertising trackers. Contact permission does not mean an email is sent automatically. Private contact replies are provided on this website using the request reference/code. Information already shared with an authorized recipient may be subject to that recipient's records and retention practices.

Retention and deletion

There is no age-based automatic deletion of questionnaire responses or private contact requests. Records may be retained while needed for the project or a related attorney/regulatory review. Retention decisions are made manually; there is no automatic two-year or three-year purge. Records should be removed when no longer needed, subject to any documented preservation requirement.

Request deletion of a buyer response on the website using its submission reference and private deletion code. A valid request normally deletes the active response immediately and removes its contribution from public statistics. A documented legal/preservation hold can prevent immediate deletion; use the private contact form to request review. Administrators can delete records manually. Deleting a response does not delete a separate contact conversation, which has its own reference/code.

Limited audit metadata, such as a random record reference, action and timestamp, may remain after deletion for security/accountability. Restricted backup copies can retain earlier data until separately removed. We do not promise a fixed backup-expiration period or immediate erasure from every backup. A backup restore must be checked against deletion records before restored responses are used or published.

Keep your reference and private code safely. They appear on the confirmation screen and are not emailed. You can choose Save as PDF to download a private copy, or Print to print it. These copies include your message or questionnaire answers and private reference/code; conversation copies include message history. Keep them private because anyone with a conversation reference/code can read and send messages. PDF files are generated on your device using resources hosted by this website; private content is not sent to a PDF service. Without them, we may be unable to identify an anonymous record or authenticate a request. Use private contact to discuss the situation; recovery or disclosure of a record is not guaranteed.

Security, cookies and service providers

Questionnaire/contact message contents are encrypted in the application database. Review status, public-visibility flags, timestamps and audit metadata are not encrypted at the application field level. Administrative access uses Cloudflare Access plus the project password and authenticator code. These protections reduce risk but do not guarantee absolute confidentiality.

Cloudflare provides DNS, HTTPS, tunnel routing and security, and may process IP addresses, browser/request metadata, security events and necessary cookies. Service-provider technical records can identify devices or activity. The public questionnaire does not require an application login cookie. Administrator sessions use a restricted cookie; Cloudflare may use its own security or Access cookies.

The app stores checklist choices in browser local storage. It does not save completed questionnaire responses or contact messages in browser storage. Browser autofill/history and screenshots are controlled by your browser/device. Temporary app rate-limit records are held in memory. Administrative actions are audited without copying response contents into the audit log. Private codes are submitted in request bodies, not URL parameters. We do not intentionally log those bodies.

Your choices and policy updates

For corrections or permission changes, use the submission controls with your reference/code or send a private contact request. You can delete a response and submit a replacement with different permissions. Administrators cannot grant sharing permissions on your behalf through the response editor.

This policy is effective October 31, 2026. Material changes will be posted with a new version/date. A policy update does not silently grant new sharing permissions for existing responses. External sites and recipients have their own policies. This website is intended for adult purchasers; do not submit information about children.

Cloudflare describes its own processing in its privacy policy.