Privacy Policy

1. What we collect

When you create an account, we collect your name, email address, ZIP code, and password (hashed). Farmers additionally provide farm profile details, farm address, phone number, photos they upload, and bank account information processed directly by Stripe. Business buyers provide business profile and contact details.

We also collect information generated by your use of the platform: orders placed, products listed, cart contents, pickup times selected, support requests, and optional recommendation preferences when you consent to personalization.

2. How we use it

• To operate the marketplace — connecting consumers and farmers for transactions
• To process payments and route payouts via Stripe Connect
• To send transactional emails (order confirmations, receipts) via Resend
• To show nearby farms using your ZIP code or location
• To improve the platform, personalize discovery when enabled, and diagnose errors

We do not sell your personal information to third parties.

3. Third-party services

AGRIO uses the following third-party services, each governed by their own privacy policy:

• Supabase — database and authentication
• Stripe — payment processing and payouts
• Resend — transactional email delivery
• Google Maps — address geocoding (server-side only)
• Vercel — hosting and edge delivery

4. Data storage and security

Your data is stored in a Supabase PostgreSQL database with row-level security policies. Authentication is handled by Supabase Auth using industry-standard JWT tokens. Passwords are never stored in plain text. Payment card data is handled exclusively by Stripe and never touches AGRIO servers. Images you upload are stored in Supabase Storage using owner-scoped access rules.

5. Your rights

You may request access to, correction of, or deletion of your personal data at any time in the app or by emailing hello@agrio.farm. Account deletion removes your profile and personal data from our active systems within 30 days, subject to any legal retention requirements.

6. Cookies

We use session cookies set by Supabase Auth to keep you logged in. If you choose to improve recommendations, AGRIO may use a first-party anonymous ID and privacy-safe marketplace events such as farm views, product views, searches, and favorites. Recommendation tracking is optional, can be declined or turned off, and is not used for third-party advertising. No third-party analytics scripts are loaded on AGRIO.

7. Children

AGRIO is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, contact us at hello@agrio.farm.

8. Changes to this policy

We may update this policy as the platform evolves. Material changes will be communicated by email to registered users. Continued use after changes constitutes acceptance.

9. Contact

Questions about this policy? Email hello@agrio.farm.