Privacy & Cookie Policy

AgProAnalytics.com — Last updated: May 2026. GDPR Compliant — Regulation (EU) 2016/679

1. Data Controller

AgProAnalytics operates agproanalytics.com. We act as the Data Controller for personal data you submit to the platform. Contact: [email protected].

2. Data We Collect

Category	Data	Purpose	Legal Basis (GDPR Art. 6)
Account Data	Name, email address, password (hashed), access level, subscription status	Account management, authentication, billing	Contract (Art. 6(1)(b))
Farm Records	Animal IDs, field names/GPS boundaries, soil data, task records, inventory, sales, weighing, rotation, financial projections	Core farm management service	Contract (Art. 6(1)(b))
Telemetry / Satellite	Field GeoJSON boundary coordinates transmitted to Google Earth Engine for satellite analysis; date ranges for imagery queries	Satellite imagery analysis (NDVI, EVI, terrain, geology etc.)	Contract (Art. 6(1)(b)) & Legitimate Interest (Art. 6(1)(f))
Usage Data	IP address, browser type, pages visited, session duration	Security, platform performance, analytics	Legitimate Interest (Art. 6(1)(f))
Cookies	Session cookies, analytics cookies (see Section 7)	Authentication, platform functionality, usage analytics	Consent (Art. 6(1)(a))
Payment Data	Transaction reference numbers (payment card data handled entirely by our payment processor — we do not store card details)	Subscription management	Contract (Art. 6(1)(b))

3. How We Use Your Data

To provide, maintain and improve the AgProAnalytics platform and Telemetry Service.
To manage your account, process payments, and send subscription notices.
To transmit field boundary coordinates to Google Earth Engine solely to perform the satellite analysis you request. We do not sell or share these coordinates with third parties for any other purpose.
To send transactional emails (eBCard invitations, scheduler notifications, account alerts).
To comply with legal obligations under Irish and EU law.

4. Data Sharing & Third Parties

Third Party	Purpose	Location
Google Earth Engine / Google Cloud Platform	Satellite imagery analysis (Telemetry Service); field boundary GeoJSON transmitted per-request only	EU/EEA & USA (Standard Contractual Clauses)
MongoDB Atlas / Cloud DB Provider	Database storage for all farm and account data	EU region preferred; DPA in place
Payment Gateway Provider	Subscription payment processing	EU (PCI-DSS compliant)
Email Service Provider	Transactional emails (invitations, notifications)	EU/EEA
Google Analytics (optional)	Aggregated website usage statistics — only if you accept cookies	USA (Standard Contractual Clauses)

We do not sell your personal data to any third party.

5. Your GDPR Rights

Under GDPR you have the following rights, exercisable by contacting [email protected]:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate data.
Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal retention obligations. Farm records may need to be retained for statutory periods under DAFM or EU regulations.
Restriction: Request that we restrict processing of your data.
Portability: Request a machine-readable export of your farm data.
Objection: Object to processing based on legitimate interests.
Withdraw Consent: Where processing is based on consent (e.g. analytics cookies), you may withdraw at any time via cookie settings.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC): dataprotection.ie.

6. Data Retention

Farm records (tasks, animals, fields, inventory etc.): retained for the duration of your subscription and 30 days after account deletion, unless a longer period is required by law (e.g. DAFM audit requirements).
Telemetry analysis requests: field boundary coordinates are not persistently stored by us beyond the analysis session; satellite imagery is served from third-party APIs and not cached locally.
Account data: retained until account deletion plus 30 days.
Payment transaction references: retained for 7 years for accounting purposes.

7. Cookies

Cookie	Type	Purpose	Duration
Session Cookie (connect.sid)	Strictly Necessary	Maintains your login session and authentication state	Session / 24 hours
CSRF Token	Strictly Necessary	Protects forms against cross-site request forgery	Session
Cookie Consent (cookiebar)	Strictly Necessary	Stores your cookie preference so the banner is not shown repeatedly	1 year
Google Analytics (_ga, _gid)	Analytics (Opt-in)	Aggregated, anonymised website usage statistics. Only set if you accept cookies.	2 years / 24 hours
Telemetry Session	Functional	Stores the GeoJSON field boundary and date range for the current satellite analysis session. Never shared externally.	Session / 24 hours

You can withdraw consent for non-essential cookies at any time by clearing your browser cookies or by clicking "Manage Cookies" in the footer. Strictly Necessary cookies cannot be disabled as they are required for the platform to function.

8. Security

We implement industry-standard security measures including HTTPS encryption, bcrypt password hashing, JWT token authentication for telemetry sessions, MongoDB access controls, CSRF protection on all forms, rate limiting on authentication endpoints, and regular security reviews. However, no system is 100% secure; you should use a strong, unique password for your account.

9. Children's Privacy

The Service is intended for use by adults (18+) managing agricultural businesses. We do not knowingly collect data from persons under 18.

10. International Transfers

Some data is processed outside the EEA (notably by Google Earth Engine for satellite analysis). Such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring equivalent GDPR protections apply.

11. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be notified by email. Continued use after the updated policy is posted constitutes acceptance.

12. Contact Us

Data protection queries: [email protected]
General enquiries: [email protected]