Privacy Policy

What we collect

• Account details: your name, email address and password. Passwords are stored only as secure hashes by our authentication provider.
• Farm records you enter: animals, flocks, fields, crops, feed, treatments, harvests, sales, expenses, documents, certificates, photos and notes, plus a history of changes (the audit log).
• Location: your farm's general location and, if you enter it, your street address. The street address stays private unless you turn on “Show street address publicly”. On the community map, farms appear only at an approximate location.
• Billing: your plan, billing status and a customer ID from Stripe. Card details go directly to Stripe; we never see or store your full card number.
• Community activity: listings, group posts, messages to other farms, reports and blocks.
• Feedback you send us, and the page you sent it from.
• Technical data: device and browser type, pages visited, and error reports. We use this to keep ProvenFarm working and to learn which features help. Our usage counting doesn't use cookies or follow you across other sites.

How we use it

• To run ProvenFarm for you: store your records, show your dashboards and reports, send the alerts you asked for, and process payments.
• To publish what you choose to make public: your farmstand page, product QR passports and community listings.
• To keep ProvenFarm safe: prevent abuse, moderate the community and investigate problems.
• To improve ProvenFarm, using aggregated usage data and the feedback you send.
• To contact you about your account, billing and important changes. Product news is only sent if you opt in, and every such email has an unsubscribe link.

Who can see your records

• Your team: people you invite, according to their role. Inspectors see only records marked Inspector or Public, and only until their access expires.
• The public: only what you mark Public or publish, such as your farmstand page and QR passports.
• Other farms: only your community profile, listings and the messages you send them.
• ProvenFarm staff: only when needed to verify certificates you submit, handle a report, provide support you asked for, or keep the service secure.

Service providers

We use a small number of trusted companies to run ProvenFarm. They process data only on our instructions:

• Supabase — database, file storage and sign-in
• Vercel — website hosting and privacy-friendly usage counts
• Stripe — payments
• Resend — email delivery
• Sentry — error reports, which help us fix crashes

Your data is stored in the United States. We may also disclose information when the law requires it, to protect people's safety, or as part of a merger or sale of the business, in which case this policy continues to apply.

If you sign up for a farm's updates

If you leave your email on a farm's stand page, that farm can see it and ProvenFarm uses it only to send you that farm's updates. We don't sell it or use it for our own marketing. Unsubscribe with the link in any email; the farm can also remove you.

Cookies and local storage

We use a small number of essential cookies and browser storage entries. They keep you signed in, remember which farm you're working on, and let the app work offline. We don't use advertising or cross-site tracking cookies.

Your choices and rights

• Privacy levels: choose Private, Inspector or Public for each record, and set a default.
• Export: download all of your farm's records at any time from Settings → Data.
• Correct: edit your records and profile at any time.
• Delete: delete your account from Settings → Data. If you own a farm, its records are deleted too. Certified organic farms must keep records for 5 years, so we'll remind you to export first.
• Notifications: choose which alerts reach your email or device, in Settings → Notifications.

Depending on where you live (for example California, Colorado, Virginia or the EU/UK), you may have further rights to access, correct, delete or move your data, and to object to certain uses. We honor these requests wherever you live. Email us and we'll respond within 30 days.

How long we keep data

We keep your records while your account is active. When you delete them or your account, they're removed from our live systems right away, and from backups within 30 days. We may keep limited billing records for as long as tax law requires, and a note of any moderation decisions, to prevent abuse.

Security

Records are encrypted in transit and at rest. Every farm's data is separated by database-level access rules, so one farm can't see another's records. Private files are served only through short-lived links. No system is perfect: if we learn of a breach that affects you, we'll tell you promptly.

Children

ProvenFarm is for adults running farms. We don't knowingly collect information from children under 13. If you think a child has given us information, contact us and we'll delete it.

Changes

If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect. See also our Terms of Service.