Your operational data is yours. We don't sell it, share it with advertisers, or use it to train models that serve other customers. We store it on U.S. infrastructure, encrypted at rest and in transit. You can export or delete it at any time.
Our promise
Agnes serves family farms, co-ops, elevators, and the people who keep the grain belt running. The data you bring to Agnes — scale tickets, settlements, field-level economics — is some of the most sensitive operational data a working farm has. We treat it accordingly.
This policy explains exactly what we collect, what we do with it, and what choices you have. If anything here is unclear, email hello@agnes.farm and we'll explain in plain language.
What we collect
We collect three kinds of data:
What we don't collect
We don't collect device location beyond IP-region for security, we don't run third-party advertising trackers, and we don't fingerprint browsers. We don't read or scan the content of attachments for any purpose other than running the features you asked for (e.g. the lens extracting ticket fields).
How we use it
We use your data to:
- Operate the Service — run the lens, store records, fulfill API requests, deliver reports;
- Communicate with you — receipts, security alerts, product updates, support replies;
- Improve the Service — aggregate, de-identified analytics on usage patterns and error rates;
- Protect the Service — detect fraud, abuse, and unauthorized access;
- Comply with the law — respond to lawful subpoenas, court orders, and regulatory requests.
What we don't do
We don't sell your data. We don't share it with advertisers. We don't train shared AI models on your operational records. We don't disclose it to third parties except where listed in §4 (Who we share with).
Where it lives
Operational data is stored in U.S.-Central regions of our cloud providers, encrypted at rest with AES-256 and in transit with TLS 1.3. Daily backups are retained for 30 days, encrypted with separate keys.
How long we keep it
- Active accounts: retained while your subscription is active.
- Cancelled accounts: data exportable for 30 days, then deleted within 90 days.
- Backups: rolling 30-day retention, then overwritten.
- Billing records: retained for 7 years for tax/audit reasons.
- Legal hold: retained if subject to active litigation hold or regulatory inquiry.
Your rights
Regardless of where you live, you have the following rights over your data on Agnes:
- Access — export everything from your dashboard or by emailing hello@agnes.farm
- Correction — edit any record directly in the product
- Deletion — delete records, or close the account entirely
- Portability — export in CSV, JSON, or PDF
- Objection — opt out of non-essential processing
For requests under GDPR, CCPA, or other regional regulations, email hello@agnes.farm and we'll respond within 30 days.
How we handle your data
The short version of how Agnes treats your operation's data:
- Encryption — AES-256 at rest, TLS 1.3 in transit. Backups encrypted with separate keys.
- U.S. hosting — operational data lives in U.S.-Central regions of our cloud providers. It doesn't leave the country in the normal course of operating the Service.
- Least-privilege access — staff access is role-scoped, MFA-required, and audit-logged. Access reviews run quarterly.
- Backups — daily, encrypted, 30-day rolling retention.
- Breach notification — if we ever experience an incident affecting your data, we notify affected account owners within 72 hours of confirmation, with what happened and what we're doing about it.
- Vendor diligence — every subprocessor has a data-processing agreement on file (see §4).
Report a security issue to hello@agnes.farm. We acknowledge within 24 hours and disclose responsibly.
Children
Agnes is not intended for use by anyone under 18. We don't knowingly collect data from children. If you believe a child has signed up, contact us and we'll delete the account.
Changes
We update this policy from time to time. Material changes are announced to account owners at least 30 days in advance. Continuing to use Agnes after the effective date means you've accepted the updated policy.
Contact
Privacy questions, data requests, or just curious how we handle something? Email hello@agnes.farm.