Privacy Policy

At Koru Farm OÜ ("Koru Farm", "we", "us", or "our"), we are committed to protecting the privacy and security of our users' personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our agricultural management platform and related services.

By using Koru Farm, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our services.

What information do we collect?

We collect information that you provide directly to us when you create an account, set up your farm profile, or interact with our platform. This includes:

• Account information: name, email address, phone number, and password.
• Farm data: PAC documents, parcel information, crop data, treatment records, and SIGPAC references.
• Voice recordings: when you use our Voice AI assistant to record treatments or manage tasks.
• Usage data: how you interact with the platform, features you use, and actions you take.
• Device information: browser type, operating system, IP address, and mobile device identifiers.

How do we use your information?

We use the information we collect to:

• Provide, maintain, and improve our agricultural management services.
• Process your PAC documents and extract parcel, crop, and area data.
• Generate SIEX-compliant reports and digital field journals.
• Power our Voice AI assistant to understand and execute your farm management commands.
• Sync with official registries including SIGPAC, ASPAFITOS, REA, and ROPO.
• Send you important updates, security alerts, and service notifications.
• Analyse usage patterns to improve platform performance and user experience.

Data storage and security

Your data is stored on secure servers within the European Union. We implement industry-standard security measures, including encryption at rest and in transit, to protect your personal and farm data.

Voice recordings are processed to extract treatment and task information, then stored securely. You can delete your voice recordings at any time through the platform settings.

How long do we keep your information?

We retain your personal and farm data for as long as your account is active or as needed to provide you services. Treatment records and compliance data are retained for the minimum period required by Spanish agricultural regulations (currently 5 years under Real Decreto 1054/2022).

Data sharing and third parties

We do not sell your personal data. We may share information with:

• Official agricultural authorities when required for compliance reporting (SIEX, SIGPAC).
• Cloud infrastructure providers who process data on our behalf under strict data protection agreements.
• Law enforcement when required by law or to protect the rights and safety of our users.

Your rights under GDPR

As a data subject under the General Data Protection Regulation, you have the right to:

1. Access the personal data we hold about you.
2. Request correction of inaccurate or incomplete data.
3. Request deletion of your personal data ("right to be forgotten").
4. Restrict or object to the processing of your data.
5. Request portability of your data in a machine-readable format.
6. Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@koru.farm.

Cookies

We use essential cookies to ensure the proper functioning of our platform. We also use analytics cookies to understand how users interact with our services. You can manage your cookie preferences through your browser settings.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our platform and updating the "Current as of" date.

Contact us

If you have questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@koru.farm
• Company: Koru Farm OÜ