Privacy Policy.

01Scope

This Privacy Policy ("Policy") explains how AgroBigGrow ("we", "us", "our") collects, uses, discloses and protects information in connection with the AgroBigGrow website (agrobiggrow.com) and the AgroBigGrow mobile application (together, the "Service"). It forms part of our Terms of Service and should be read alongside our Data Ownership Charter.

By using the Service you consent to the practices described here. If you do not agree with this Policy, please do not use the Service. This Policy is intended to be consistent with the Digital Personal Data Protection Act, 2023 (India) and, where they apply, the GDPR and similar frameworks.

02Information we collect

a. Information you give us

• Account details: name, phone number or email used to create your account and enable sync;
• Farm profile: farm name, crops, units and preferences you configure during onboarding;
• Farm Data: the records you create: bookkeeping vouchers, party ledgers, inventory, attendance, payroll and production entries, including names of workers and counterparties you choose to record;
• Support correspondence: messages you send us, and our replies.

b. Information collected automatically

• Device & app diagnostics: device model, OS version, app version, crash logs and performance traces, used to keep the app reliable on low-end devices;
• Usage events: anonymised feature-usage signals (for example, which modules are opened) that help us prioritise improvements. These are aggregated and not tied to your farm records;
• Website data: standard server logs (IP address, browser type, pages visited) when you browse agrobiggrow.com.
• Website analytics: privacy-respecting product analytics (PostHog, EU cloud) recording pages visited, approximate region, device and browser type, interactions such as button taps, and the contents of messages you send us through the contact form. It runs without advertising cookies or cross-site tracking, does not store IP addresses, and honors your browser's Do Not Track setting.

03How we use information

• To operate the Service: create your account, sync your records across devices, and generate the reports you request;
• To keep the Service reliable: diagnose crashes, resolve sync conflicts and improve performance on low-end hardware;
• To communicate with you: service notices, security alerts, and replies to your support requests;
• To improve the product: aggregated, anonymised analysis of feature usage, never the contents of your ledgers;
• To meet legal obligations: respond to lawful requests and enforce our Terms.

We do not use your Farm Data to train advertising profiles, and we do not sell personal information to anyone.

04Offline-first storage & sync

AgroBigGrow is local-first by architecture. Every record you create is written to an encrypted on-device database the moment it is made, no connectivity required. Records leave your device only through the sync engine, and only to your own account.

• On device: data is encrypted at rest using the platform's hardware-backed keystore where available;
• In transit: sync traffic is encrypted with TLS;
• In our cloud: synced records are stored encrypted, access-controlled and logged;
• Conflict-safe: the sync engine is idempotent, so poor connectivity never duplicates or corrupts vouchers.

If you never enable sync, your Farm Data never leaves your device. Some features (multi-device access, cloud backup and institutional sharing) require sync to be on.

05Sharing & disclosure

We share information only in these cases:

1. With your explicit consent: for example, when you choose to share reports with an FPO, lender or agri-business partner. They see only what you share, and you can revoke access;
2. Service providers: vetted processors (cloud hosting, crash reporting, privacy-respecting analytics) bound by contract to process data only on our instructions;
3. Legal requirements: where disclosure is required by applicable law, regulation or valid legal process;
4. Business transfers: if AgroBigGrow is involved in a merger or acquisition, your data remains governed by this Policy and you will be notified before any change takes effect.

Where we publish insights (for example, regional crop trends), they are built only from anonymised, aggregated data that cannot be traced back to you or your farm.

06Data security

We use industry-standard safeguards: encryption at rest and in transit, least-privilege access controls, audit logging on cloud systems, and payroll-grade immutable records that make tampering evident. No method of transmission or storage is 100% secure, but protecting farm data is the core of our product, not an afterthought. See our Data Ownership Charter.

07Retention & deletion

• On-device data stays until you delete it or uninstall the app;
• Synced data is kept while your account is active;
• Account deletion removes your synced Farm Data from production systems within 30 days, and from encrypted backups within 90 days;
• Exports: you can export your complete records at any time before deleting anything;
• We may retain minimal records where required by law (for example, transaction records for tax compliance).

08Your rights

You can, at any time:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Export your Farm Data in portable formats;
• Delete your data or your entire account;
• Withdraw consent for optional processing such as partner sharing; withdrawal does not affect processing already lawfully completed, or processing the law permits without consent;
• Raise a grievance with our grievance officer (Section 12), and escalate to the Data Protection Board of India where applicable.

Most of these actions are available directly in the app. For anything else, write to [email protected].

09Children's privacy

The Service is intended for adults managing farm operations and is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10International transfers

Synced data is primarily stored in data centres serving India. Where processing occurs in another country, we ensure appropriate safeguards consistent with applicable data protection law.

11Changes to this policy

We may update this Policy to reflect changes in technology, law or the Service. We will post the updated Policy here with a new "last updated" date and notify you in the app for material changes. Continued use after changes take effect constitutes acceptance.

12Grievance officer & contact

For privacy questions, requests or complaints, contact our Grievance Officer at [email protected]. We aim to acknowledge within 48 hours and resolve within the timelines prescribed by applicable law.