Privacy Policy

1. Introduction

Harvestry, Inc. ("Harvestry," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cultivation operating system platform, website, and related services (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our Services.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Services, including:

• Account Information: Name, email address, phone number, company name, job title, and password when you create an account.
• Profile Information: Additional details you add to your profile, such as profile photo, preferences, and settings.
• Cultivation Data: Information about your cultivation operations, including crop data, environmental readings, inventory records, compliance documentation, and operational metrics.
• Payment Information: Billing address and payment card details (processed securely through our payment processors).
• Communications: Messages, feedback, and correspondence when you contact us or participate in surveys.

2.2 Information Collected Automatically

When you access our Services, we automatically collect certain information:

• Device Information: Device type, operating system, unique device identifiers, and browser type.
• Usage Information: Pages viewed, features used, time spent, and interaction patterns within our Services.
• Log Data: IP address, access times, referring URLs, and system activity logs.
• Location Information: General geographic location based on IP address.
• Cookies and Tracking: Information collected through cookies, pixels, and similar technologies (see our Cookie Policy).

2.3 Information from Third Parties

We may receive information from third parties, including integration partners (such as METRC, BioTrack, and other compliance systems), authentication providers, and analytics services.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related notifications
• Create and manage your account
• Facilitate compliance reporting and regulatory requirements
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Analyze usage patterns to improve user experience
• Develop new features and services
• Detect, prevent, and address fraud, security breaches, and technical issues
• Comply with legal obligations
• Send marketing communications (with your consent where required)

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted vendors who assist in operating our Services (e.g., hosting, analytics, payment processing).
• Integration Partners: With third-party services you choose to connect (e.g., compliance tracking systems, accounting software).
• Regulatory Authorities: As required for compliance reporting to state and local regulatory bodies.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: In other cases where you have given explicit consent.

5. Data Security

We implement robust security measures to protect your information, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Multi-factor authentication options
• Regular security audits and penetration testing
• Access controls and audit logging
• Secure data centers with SOC 2 Type II compliance
• Employee security training and background checks

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide Services, comply with legal obligations (including regulatory record-keeping requirements), resolve disputes, and enforce our agreements. Cultivation and compliance data may be retained for longer periods as required by applicable regulations.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Portability: Request a portable copy of your data in a machine-readable format.
• Opt-out: Opt out of marketing communications at any time.
• Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, please contact us at privacy@harvestry.io.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses to protect your information.

9. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete such information.

10. Third-Party Links

Our Services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as email notification or in-app announcement).

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: