FarmAssist — Privacy Policy

Effective Date: December 1, 2025

Last Updated: April 19, 2026

1. Introduction and Scope

FarmAssist ("we," "us," or "our") is committed to protecting your personal information and ensuring transparency in how our AI-powered agricultural assistance service operates. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the FarmAssist application and related services (collectively, the "Service").

1.1 Application Scope

This Policy applies to all users of the Service, regardless of subscription plan or access level, all platforms through which the Service is accessed, data collected from users located anywhere in the world, and all interactions with our AI-powered chatbot and advisory features.

This Privacy Policy is incorporated by reference into our Terms of Service & EULA. By using the Service, you agree to the practices described in this Policy.

1.2 AI-Specific Notice

The Service utilizes generative artificial intelligence (AI) technology. When you interact with our chatbot:

1. Your queries are processed by large language models (LLMs) to generate agricultural guidance
2. Conversations may be analyzed to improve model accuracy and relevance
3. AI-generated responses are advisory in nature and should not replace professional agronomic consultation for critical decisions
4. The AI does not make automated decisions that produce legal or similarly significant effects without human oversight

2. Data Controller Information

The data controller responsible for your personal information is FarmAssist AI LLC.

• Privacy Contact: privacy@farmassist.com
• Data Protection Officer: dpo@farmassist.com
• Security Contact (urgent): security@farmassist.com

3. Information We Collect

3.1 Information You Provide Directly

Note on Payment Data: Payment card details are processed exclusively by Stripe, Inc. (PCI DSS Level 1 certified) and are never stored on our servers.

Note on Passwords: Passwords are hashed using industry-standard algorithms. We cannot retrieve or view your plaintext password.

3.2 Automatically Collected Information

1. Usage Data: Features used, session metrics, plan limit status, engagement and error data
2. Device & Browser Information: Browser type, operating system, device type, screen resolution
3. Log Data: IP address, access timestamps, pages visited, error logs
4. Cookies and Similar Technologies: Session, preference, security, analytics, and advertising/conversion-measurement cookies (see Section 8)
5. Chat Metadata: Conversation identifiers, timestamps, response metrics
6. Performance Metrics: Response time, latency, availability statistics

3.3 Sensitive Personal Information

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, health or biometric data, or government-issued ID numbers.

4. How We Use Your Information

We use your information for: account management and authentication; delivering AI-generated responses; improving the Service and AI model performance (subject to opt-out); enforcing usage limits; detecting and preventing abuse; sending transactional communications; complying with legal obligations; analytics; and customer support.

4.1 What We Do NOT Do With Your Data

1. Profiling based on the content of your conversations, or use of your agronomic queries for advertising purposes. We do use advertising-platform pixels to measure ad performance and reach comparable audiences (see Section 8)
2. Sale or rental of personal data to third parties
3. Automated decision-making producing legal effects without human oversight
4. Training third-party AI models (your data is used only to improve FarmAssist services)
5. Sharing identifiable conversation content with external parties without your explicit consent

5. AI Model Providers and Data Processing

5.1 Third-Party AI Model Usage

FarmAssist utilizes large language models from third-party AI providers. Our agreements include:

1. No training on your data: Providers are contractually prohibited from using your queries to train their general models
2. Data minimization: Providers must delete or anonymize queries within specified timeframes
3. Data Processing Agreements: All providers have executed GDPR-compliant DPAs
4. Confidentiality obligations: Providers may not disclose your data to third parties

Important: While we impose strict contractual controls, your queries are transmitted to third-party AI infrastructure for processing. We recommend not including proprietary trade secrets or personal identifiers in queries.

6. AI Training and Data Usage for Model Improvement

6.1 Use of Conversation Data

To improve accuracy, relevance, and safety, we may use de-identified conversation data to fine-tune and evaluate our AI models. Before any use, data is de-identified, reviewed by qualified personnel, and processed using privacy-preserving techniques.

6.2 Opt-Out of AI Training

You may opt out at any time via Account Settings or by emailing privacy@farmassist.com. Opt-out applies prospectively and does not affect the quality of AI responses you receive.

7. Data Sharing and Disclosure

We do not sell your personal data. We share your information only with:

• Service Providers: Trusted third-party vendors under contractual Data Processing Agreements
• Legal Obligations: When required by law, court order, or valid governmental request
• Business Transfers: In connection with merger, acquisition, or corporate restructuring
• With Your Consent: When you have given explicit consent
• Aggregate Data: Anonymized, aggregated data that cannot identify you

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Service, including strictly necessary cookies, functional/preference cookies, analytics cookies, and advertising and conversion-measurement cookies.

8.1 Advertising and Conversion Measurement Partners

We run advertising campaigns and use the following third-party tags on our website. These tags set cookies and may allow the partner to recognize your browser across sites:

• Meta Pixel (Meta Platforms, Inc.): Measures the results of our advertising on Facebook and Instagram, including whether a visit led to an account signup, and helps us build similar audiences. See Meta's Privacy Policy.
• LinkedIn Insight Tag (LinkedIn Corporation): Measures the results of our advertising on LinkedIn, including whether a visit led to an account signup, and helps us reach relevant professional audiences. See LinkedIn's Privacy Policy.

These tags receive page-visit and signup-event information. We do not send the content of your conversations, your uploaded files, or your agronomic data to any advertising partner.

8.2 Your Choices

• Browser controls: You can block or delete cookies in your browser settings. Blocking advertising cookies does not affect your ability to use the Service.
• LinkedIn: Opt out through your LinkedIn ad settings.
• Meta: Opt out through your Meta ad preferences.
• Global Privacy Control: We honour a Global Privacy Control (GPC) signal sent by your browser as a request to opt out of the sharing of personal information for cross-context behavioural advertising.
• US state and Canadian residents: Depending on your jurisdiction, you may have the right to opt out of "sale" or "sharing" of personal information for cross-context behavioural advertising. Email privacy@farmassist.com and we will apply the opt-out to your account.

9. Data Retention

9.1 Retention Periods

Data retention periods vary by data category and your subscription plan. In general:

1. Conversation history: Retained per your subscription plan
2. Account information: Retained for the duration of your account plus a post-deletion period
3. Payment records: Retained as required by tax and financial regulations
4. Usage metadata: Retained for a reasonable period for analytics and enforcement
5. Anonymized AI training data: Retained indefinitely
6. Server and security logs: Retained for security and compliance obligations

9.2 Account Deletion

Upon account deletion, personal data will be deleted or anonymized within a reasonable timeframe. To delete your account: Account Settings → Account → Delete Account, or email privacy@farmassist.com.

10. Data Security

We implement industry-standard technical and organizational measures including:

1. Encryption in transit (TLS) and at rest (AES-256)
2. Industry-standard password hashing with unique salts
3. Role-based access controls with principle of least privilege
4. Regular penetration testing, vulnerability scanning, and security audits
5. Documented incident response and business continuity plans

Data Breach Notification: In the event of a data breach, we will notify affected users within legally required timeframes, describe the nature and scope, explain remedial steps, and notify applicable authorities. Security concerns: security@farmassist.com

11. Your Rights and Choices

11.1 Universal Rights

1. Access: Request a copy of your personal data
2. Correction: Correct inaccurate or incomplete data
3. Deletion: Request deletion of your personal data
4. Portability: Receive your data in a machine-readable format
5. Opt-out of Marketing: Unsubscribe from marketing emails
6. Opt-out of AI Training: Prevent your conversation data from being used to improve AI models

11.2 How to Exercise Your Rights

Submit requests via email to privacy@farmassist.com, through Account Settings → Privacy → Privacy Requests, or by mail. We will acknowledge requests within 5 business days.

12. Children's Privacy

The Service is intended for use by individuals 18 years of age or older. We do not knowingly collect personal data from minors.

13. International Data Transfers

Your personal data may be transferred to, stored in, and processed in countries other than your country of residence. We use appropriate safeguards including Standard Contractual Clauses and Data Processing Agreements.

14. Regional Disclosures

EEA, UK & Switzerland (GDPR): Additional provisions regarding legal bases, DPO contact, and international transfer safeguards apply. Contact dpo@farmassist.com.

California Residents (CCPA/CPRA): Additional rights may apply under California privacy law.

Canadian Residents (PIPEDA): Your personal information is governed by PIPEDA and applicable provincial legislation.

Other Jurisdictions: Residents of states with comprehensive privacy laws, Brazil (LGPD), Australia (Privacy Act), and other jurisdictions may have additional rights. We recognize Global Privacy Control (GPC) signals.

15. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide advance notice via email and/or in-app notification. Your continued use after the effective date constitutes acceptance.

16. Contact Us

• Privacy Team: privacy@farmassist.com
• Data Protection Officer: dpo@farmassist.com
• Security (urgent): security@farmassist.com

This Privacy Policy reflects compliance obligations under GDPR, CCPA/CPRA, PIPEDA, and general privacy best practices.