Privacy Notice

10xPlot is responsible for the personal information described in this notice. Privacy questions and requests can be sent to thinley@10xplot.com.

10xPlot is built for Bhutanese landowners and people authorised to work with Bhutanese land records, including users living outside Bhutan.

• Account information, including your name, email address, authentication status, email-verification state, encrypted authenticator setup data and hashed one-time backup codes. Passwords are stored only as salted password hashes.
• Uploaded Lag Thram pages, coordinate tables, images, parcel geometry, corrections, project notes and generated outputs.
• Payment and entitlement information, including amount, currency, payment status and provider reference. 10xPlot does not receive or store your complete card number.
• Land Showcase information, selected media, publication choices, view counts and buyer enquiries.
• Support correspondence and limited security records, such as successful or blocked sign-in events, hashed network identifiers, browser user-agent information and session-revocation activity.

• To register and protect your account.
• To read coordinates, locate a parcel and generate the services you request.
• To provide paid access, maintain transaction records and respond to support issues.
• To publish and operate a Land Showcase after you give the required confirmation.
• To prevent misuse, investigate faults and improve service reliability.
• To verify referral-partner performance and calculate commission on eligible Stripe-confirmed purchases. Partners see anonymous customer references, not your Lag Thram, parcel or contact details.
• To meet legal, accounting, security and regulatory duties.

Your uploaded land record and the parcel created from it are treated as private project information unless you deliberately share or publish them.

10xPlot also uses attributed government and public datasets to add geographic, agricultural, market, soil, water and terrain context. These reference datasets are not used to establish your identity, but the resulting analysis is connected to your project.

10xPlot uses specialist providers only where needed to operate the service. These may include IONOS for application hosting, Mapbox for interactive maps, Stripe for checkout and Google when you choose Google sign-in.

Application hosting is located with IONOS in the European Economic Area. Other providers may process limited information in locations described in their own privacy notices and contractual safeguards.

A project is private by default. If you publish a Land Showcase, the title, description, selected media, approved parcel presentation and chosen contact information can be viewed through the public link.

Do not publish a Lag Thram image, personal identifier or other material that should remain private. You can pause or remove the showcase through your account, subject to copies already shared or retained by others.

Account and project information is retained while it is needed to provide the service. Payment, accounting, support and security records may be kept for longer where required for legitimate business or legal purposes.

10xPlot uses email verification, short-lived HttpOnly sessions, anti-forgery protection, refresh-token rotation, privileged-account two-factor authentication, access controls, encrypted network connections and operational safeguards. No online service can guarantee absolute security.

Depending on the law that applies to you, you may ask for access, correction, deletion, restriction or a copy of your personal information, or object to certain uses.

Some information may need to be retained for payment, fraud prevention, dispute, accounting or legal reasons. You may also complain to the data-protection authority that applies to your circumstances.

Send a privacy question or rights request to thinley@10xplot.com or use the Support page.