Skip to content

Independent farm operations / built for the next shift

Privacy Policy

Last updated: July 21, 2026

This policy describes how FarmHub, LLC (“FarmHub”, “we”, “us”) collects, uses, and shares personal information when you use our websites (including https://farmhub.ag), the FarmHub application and dashboard, our APIs, and related services (together, the “Services”).

1. Our role: controller and processor

For information about our customers and website visitors — account details, billing, usage, and marketing data — FarmHub acts as the data controller, and this policy applies directly.

Customers also store information about other people in the Services: for example, buyers of a farm’s storefront, supply-chain contacts on traceability records, and activity of team members they invite. For that information, our customer is the controller and we act as a processor (service provider) on their instructions. If your information was submitted to FarmHub by one of our customers, please direct requests to that customer; we will assist them in responding.

2. Information we collect

Account and profile information

Name, email address, password (stored as a salted hash), and optional profile details such as title, company, biography, website, avatar, and language and unit preferences, along with your marketing email preferences.

Billing and purchase information

Subscription plan, usage-based quantities (such as connected sensors and team seats), coupons, and invoices. Payments are processed by Stripe; we do not store your full card numbers.

Farm and operational content

The content you create in the Services: farm projects (including farm location), sensor and device telemetry, logs, tasks, crop and livestock records, treatment and compliance records, inventory, financial records, uploaded files and photos, storefront products and orders, and similar data.

Usage and log data

IP address, browser and device information, sign-in history, pages and features used, and an audit trail of actions taken in your projects (who did what, when, and from which IP address). Visits to public pages such as traceability shares are also logged.

Support and feedback

Messages you send us, in-app feedback (which may include an optional screenshot you choose to attach), and error reports.

Information from third parties

If you sign in with Google or another single sign-on provider, we receive your name and email address from that provider through our authentication service (WorkOS).

3. How we use information

  • to provide, operate, and secure the Services (performance of our contract with you);
  • to process payments and subscriptions;
  • to send transactional messages — such as verification emails, alerts and notifications you configure, billing notices, and service announcements;
  • to send onboarding and marketing emails, which you can opt out of at any time (consent or legitimate interest, as applicable);
  • to understand how the Services are used and improve them, including through analytics (legitimate interest, and consent where the law requires it);
  • to detect, investigate, and prevent fraud, abuse, and security incidents, including maintaining audit trails (legitimate interest and legal obligation);
  • to comply with legal obligations and resolve disputes, including responding to payment disputes with evidence of account activity.

4. How we share information

We do not sell personal information. We share it with service providers who process it on our behalf, and as you direct:

  • Payments: Stripe (billing, marketplace payments via Stripe Connect, and — in the event of a payment dispute — evidence such as purchase and sign-in activity);
  • Authentication: WorkOS (sign-in, single sign-on, and passwordless login);
  • Infrastructure and storage: Hetzner (application and database hosting in the EU) and Amazon Web Services (file storage, sensor data pipeline, translation, and address lookup; US);
  • Analytics: PostHog (product analytics; see our Cookie Policy);
  • Communications: our email delivery provider, OneSignal (push notifications), and Twilio (SMS alerts, if you configure them);
  • Monitoring: Sentry (error reporting and sampled, masked session replay);
  • Enrichment services: Google (geocoding and time zone lookup for your farm location), OpenWeatherMap (weather for your farm coordinates), and OpenStreetMap (map tiles);
  • Integrations and AI clients you connect: when you connect a third-party integration (such as Slack, QuickBooks, Shopify, or Twilio) or authorize an AI assistant or other client through our OAuth/MCP interface, we share the data needed to provide that connection. Those services are governed by their own privacy policies, and you can revoke their access in your settings;
  • People you share with: your team members and auditors according to the roles you assign, and anyone you give access to public pages such as storefronts and traceability shares;
  • Legal and business: courts, regulators, and law enforcement where required by law or to protect rights and safety; and a successor entity in connection with a merger, acquisition, or sale of assets (we will notify you of any such transfer).

5. International transfers

We store and process information in the European Union (application and database hosting) and the United States (file storage, sensor data pipeline, and most service providers). Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Retention

We keep account information for as long as your account exists and as needed afterward to comply with legal obligations, resolve disputes, and enforce agreements. Operational records — including telemetry, compliance records, and audit trails — are retained for the life of your account because they serve record-keeping and traceability purposes. When records are deleted in the product, they may first be flagged as deleted and then removed from our systems on a delayed schedule. You can request deletion as described below.

7. Your rights

Depending on where you live (including under the GDPR and US state privacy laws), you may have the right to access, correct, delete, or receive a portable copy of your personal information, to restrict or object to certain processing, to withdraw consent, and to opt out of marketing communications.

To exercise any of these rights, email support@farmhub.ag from the address associated with your account (or with proof of authorization, if you are an authorized agent). We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights. You may also lodge a complaint with your local data protection authority.

To unsubscribe from marketing email, use the unsubscribe link in any message or your notification settings.

8. Security

We protect personal information with measures including encryption in transit, hashed passwords, encrypted storage of integration credentials, role-based access controls, audit logging, and scanning of uploaded files. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will notify you and the relevant authorities of data breaches as required by applicable law.

9. Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy. Our Services do not currently respond to “Do Not Track” browser signals.

10. Changes to this policy

We may update this policy as our practices change. We will post the updated policy here and update the date above; for material changes we will provide additional notice by email or through the Services.

FarmHub, LLC
Data Controller
support@farmhub.ag