Privacy Policy

1 Information We Collect

We collect the following types of information when you use the AgroResidue SCM platform:

• Account Information: Email address and encrypted password provided during account creation by your organization's administrator.
• Operational Data: Agricultural residue data, crop information, location data, and other field-level data you submit through the Platform.
• Usage Data: Login timestamps, session information, and general usage patterns for security and performance monitoring.
• Technical Data: IP address, browser type, device information, and operating system collected automatically via server logs.

2 How We Use Your Information

Your information is used exclusively for the following purposes:

• Providing and maintaining the Platform's core supply chain management features.
• Authenticating users and managing access control based on assigned roles.
• Generating AI-powered analytics and insights from submitted operational data.
• Sending essential communications such as password resets and account notifications.
• Monitoring and improving Platform security, performance, and reliability.

3 Data Storage & Security

We take data security seriously and implement industry-standard practices to protect your information:

• All passwords are hashed using bcrypt with salt rounds to prevent exposure.
• Authentication is managed via secure HTTP-only cookies with JWT tokens.
• Communication between your browser and our servers is encrypted using TLS/SSL.
• Rate limiting is applied to authentication endpoints to prevent brute-force attacks.
• Data is stored on secure, managed database servers with automated backups.

4 Cookies & Session Management

The Platform uses essential cookies for authentication and session management. These cookies are:

• HTTP-only: Not accessible by client-side JavaScript, reducing XSS attack risk.
• Secure: Only transmitted over HTTPS in production environments.
• Same-site strict: Prevents CSRF attacks by restricting cross-site cookie transmission.
• Session-based: Expire after 1 hour of inactivity for security.

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

5 Third-Party Services

The Platform integrates with the following third-party services for core functionality:

• AI Analytics: Operational data may be processed by AI services to provide data insights and analytical responses. No personal data is sent to AI providers.
• Email Service: Email notifications (password resets, account creation) are sent via a transactional email provider.
• Database Hosting: Operational data is stored on managed cloud database infrastructure.

We do not sell, trade, or transfer your personal information to third parties for marketing or advertising purposes.

6 Data Retention

We retain your account information and submitted data for as long as your account is active or as needed to provide services. When an account is suspended, we retain the associated data for audit and compliance purposes. If you wish to request deletion of your data, please contact your organization's administrator or our support team.

7 Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request updates to inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal and operational requirements.
• Portability: Request a machine-readable export of your submitted data.

To exercise any of these rights, please contact your organization's administrator or email us at support@agroresiduescm.live.

8 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

9 Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@agroresiduescm.live.