Privacy Policy

This notice describes how AGRIS processes the personal data of users of the site and the application.

1. Data controller

[Ragione sociale], with registered office in [indirizzo], P.IVA/C.F. [___]. Contact: [email].

2. Data we process

• Registration data: name, email address, password (stored encrypted), role.
• Company data: company name, VAT number and contacts if provided, field boundaries (geometries/coordinates), crops, treatments and agronomic data entered.
• Usage data: essential technical logs (e.g. logins) for security and operation.

3. Purposes and legal basis

• Service delivery and account management — performance of a contract (art. 6.1.b).
• Security, abuse prevention and technical operation — legitimate interest (art. 6.1.f).
• Legal obligations (e.g. invoicing, if payment is active) — legal obligation (art. 6.1.c).

4. Who we share data with

Data is processed by providers acting as data processors, including:

• Hosting: cloud infrastructure (Amazon Web Services), servers in the EU/EEA.
• Email sending: SMTP provider for service communications (e.g. password reset).
• Payments: Stripe (when the subscription is active), which processes payment data independently as data controller for its own purposes.

We do not sell or transfer data to third parties for marketing purposes.

5. Retention

We retain data for as long as necessary to provide the service and while the account is active; upon account deletion, data is removed or anonymized, except where legal obligations apply (e.g. accounting documents).

6. Your rights

You can exercise at any time the rights provided by articles 15–22 GDPR: access, rectification, erasure, restriction, portability and objection, by writing to [email]. You also have the right to lodge a complaint with the Data Protection Authority.

7. Cookies

The site only uses technical cookies: see the Cookie Policy.