Privacy policy

Template — review before launch. Last updated: [DATE].

Who we are

AgriculturalAI [TODO: registered business address, ICO registration number]. Contact: CONTACT_EMAIL_PLACEHOLDER.

Data we collect

• Account data — names, email, phone, farm name and address (controller: AgriculturalAI).
• Parlour data — cow records and milking data uploaded from your parlour PC. This may include staff/milker IDs, which are personal data. For this data we act as your processor under the Data Processing Agreement.
• Chat messages and feedback you send in the portal.
• Technical data — uploader heartbeat, IP address, logs.
• Payment is handled by PayPal; we do not see your card or bank details.

Why and lawful basis

To provide the service (contract); to keep it secure and improve alerts (legitimate interests); to meet legal/tax duties (legal obligation); marketing only with consent.

Sharing

Sub-processors: hosting/database (Supabase, Cloudflare), payments (PayPal), and an AI analysis provider (e.g. OpenAI or Anthropic) receiving only the minimum data needed — never names of staff. Some may process data outside the UK under UK adequacy regulations or the UK IDTA/Addendum. We never sell data.

Where data is stored

Our database and file storage are hosted by Supabase in the London (eu-west-2) region (or another EU region), so your data stays under UK/EU data protection law.

Retention

Parlour data kept while you subscribe and deleted or returned within 90 days of cancellation; account and billing records kept 6 years for tax.

Your rights

Access, rectification, erasure, restriction, objection, portability, and to complain to the ICO (ico.org.uk, 0303 123 1113).

Security

Encrypted transport (HTTPS), per-farm upload keys, row-level database security so farms can't see each other's data.