Privacy Policy

Last updated: 2 July 2026

The English version is legally authoritative. Translations are provided for convenience.

Plain-language summary

  • We collect what you give us (farm records, account details) plus weather/satellite data for your location, to run the product. Nothing is sold to anyone.
  • AI features send relevant farm context to our AI provider (Anthropic) to generate answers; providers may not train on this data under our agreements.
  • Peer benchmarks and the price exchange use anonymised aggregates with a minimum group size, so no individual farm is identifiable.
  • You can export everything (Settings, Export) and delete your account (30-day grace, then permanent erasure).
  • Payment card data is handled by Stripe, so we never see your card number.
  • You can opt in or out of SMS/WhatsApp and push notifications at any time in Settings.

This summary is for convenience. The full English text below is what legally applies.

1. Who we are

Agrivo is a farm-management platform. This policy explains what personal data we process, why, and the rights you have over it. Contact for all privacy matters: privacy@agrivo.farm.

2. Data we collect

Account data: name, email, password (stored as a bcrypt hash, we never see it), phone number if you add one, language, alert preferences. Farm data you enter: farms, field boundaries and GPS coordinates, crops, harvests and sale prices, input applications, workers (names, roles, wages, attendance), equipment, livestock, notes, traceability lots. Media you submit for AI features: crop photos (Crop Doctor, label scanning) and voice transcripts (voice entry). Technical data: IP address and user agent in security/audit logs, aggregate usage counters.

3. What we use it for

Providing the service (your records, dashboards, alerts); generating AI advice from YOUR farm context; weather and satellite features (your farm/field coordinates are sent to the weather and satellite providers to fetch data for that location); anonymous regional benchmarks (aggregated with a minimum group size so no farm is identifiable); billing; security (rate limiting, audit trail, login-abuse protection); and legally required record-keeping.

4. AI processing

When you use AI features, relevant farm context (field names, crops, numbers, your notes, photos or transcripts you submit) is sent to Anthropic’s Claude models to generate the response. We do not use your data to train models. AI usage is metered per your plan.

5. Subprocessors

Anthropic (AI responses) · Stripe (payments, card data never touches our servers) · Sentinel Hub (satellite imagery for your field coordinates) · Open-Meteo (weather for your farm coordinates) · Twilio (SMS/WhatsApp alerts, only if you opt in) · our hosting, database, cache and email-delivery providers. Each receives only what its function requires.

6. Legal bases (EU/UK users)

Contract performance (running your account and records); legitimate interests (security, service improvement, anonymous benchmarks); consent (phone alerts, push notifications, both opt-in and revocable in Settings); legal obligation (tax/billing records).

7. Retention

Your records are kept while your account is active. Housekeeping runs automatically: expired session tokens and one-time verification links are purged; dismissed alerts are removed after 90 days; raw weather logs after 2 years; idempotency (sync-dedup) keys after 30 days. When you delete your account there is a 30-day grace period (login disabled, data hidden), after which everything is permanently erased. Anonymised aggregates are not linked back to you and may be retained.

8. Your rights

Access and portability: Settings → “Export my data” downloads your full farm data as CSVs at any time. Rectification: everything you entered is editable in-app. Erasure: Settings → Danger zone → “Delete my account” (30-day grace, then permanent). Objection/restriction and complaints: email privacy@agrivo.farm; EU/UK users may also complain to their supervisory authority.

9. Security

Passwords are bcrypt-hashed; transport is TLS; tenant data is isolated per account and covered by automated isolation tests; access to production systems is restricted; security-relevant actions are recorded in an append-only audit log; failed logins are rate-limited per account and per IP.

10. International transfers

Our subprocessors may process data outside your country (for example, Anthropic and Stripe in the United States). Where GDPR applies, transfers rely on adequacy decisions or standard contractual clauses maintained by those providers.

11. Cookies and local storage

Agrivo uses browser local storage for your session tokens, language preference, and an offline cache of your own farm data (so the app works in the field without signal). We set no advertising or third-party tracking cookies.

12. Children

Agrivo is a business tool for adults; we do not knowingly process children’s data.

13. Changes

We will email registered users about material changes to this policy at least 14 days before they take effect.

Questions? Email privacy@agrivo.farm · See also the Terms of Service