Privacy

Your data, your terms.

A plain-language summary of what we collect, why, and how we protect it. The full legal policy is being finalised — for any specific privacy question email info@agro-dash.org and we'll respond within one business day.

Last updated: 2026-04-27

What we collect

  • Account details — name, email, phone, and the role you sign up under (farmer, buyer, miller, etc.).
  • KYC documents — government ID, business registration, and role-specific certificates we use to verify counterparties.
  • Farm & activity data — farm location, GPS coordinates, planting and harvest records, lab test results, and storage / clearance events. This is the chain-of-custody data that powers traceability.
  • Payment data — the payout method you register (mobile money number, bank account) and the transaction references for settlements. We never store your full mobile money PIN or bank password.
  • Usage data — login times, IP addresses, device type, and the pages you visit. Used for security and product improvement.

Who can see what

  • You see your own data, always, in full.
  • Counterparties see only what's required to trade — buyers see a verified-farmer code, county, and credit grade on listings, never your name or contact until an agreement is matched.
  • Quality assessors, warehouses, logistics providers see the consignments routed to them.
  • Admin / platform support can see full account details for fraud prevention, dispute resolution, and KYC review.
  • Regulators may request data we are legally required to provide (e.g., EUDR-mandated traceability records). We log every such request.

How we protect it

Data in transit is encrypted with TLS 1.2+. Data at rest is encrypted in our cloud database. Sensitive credentials (JWTs, API keys, payment provider secrets) live in Google Secret Manager — not in source code. Access to production data is restricted, audited, and tied to specific roles.

Your rights

  • You can request a copy of all data we hold about you.
  • You can request correction of any inaccurate field.
  • You can deactivate your account; data is retained only as long as required for legal / financial compliance, then deleted.
  • You can revoke marketing communications without affecting transactional notifications (escrow events, dispute updates, etc.).

Cookies

We use first-party cookies for authentication and session state, and minimal analytics cookies to understand which features are most useful. We do not sell user data to advertisers.

Contact

Privacy questions, data export requests, or concerns: info@agro-dash.org.