Introduction
Litequo LLC ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
This policy applies to all users worldwide and complies with GDPR (EU), KVKK (Turkey), CCPA (California), PIPEDA (Canada), Quebec Law 25, and other applicable data protection laws.
Data We Collect
Personal Information:
- Name, email address, phone number
- Company name and agricultural profile
- Billing and payment information
- Profile photo and preferences
Usage Data:
- IP address, browser type, device information
- Pages visited, features used, time spent
- Agricultural data (fields, inventory, schedules)
- AI analysis results and vision uploads
Cookies and Tracking:
- Essential cookies for authentication
- Functional cookies for preferences
- Analytics cookies (with consent)
- Marketing cookies (with consent)
How We Collect Your Data
- Directly from you: Registration, profile updates, contact forms
- Automatically: Cookies, analytics, usage logs
- Third parties: Google Sign-In, payment processors
- Public sources: Referral programs, dealership applications
How We Use Your Data
We use your data to:
- Provide and maintain the Service
- Process payments and manage subscriptions
- Personalize your experience and AI recommendations
- Send notifications and service updates
- Improve features and develop new services
- Prevent fraud and ensure security
- Comply with legal obligations
- Marketing (with consent)
Legal Basis (GDPR): Contract performance, legitimate interests, consent, legal compliance.
Data Security
We implement industry-standard security measures:
- Encryption in transit (TLS/SSL) and at rest
- Firebase Authentication with secure tokens
- Role-based access control (RBAC)
- Regular security audits and monitoring
- Secure payment processing (PCI-DSS compliant)
- Data backup and disaster recovery
No method is 100% secure. We cannot guarantee absolute security but continuously improve our measures.
Data Retention
We retain data as long as necessary for:
- Active accounts: Duration of service use
- Inactive accounts: 12 months, then anonymized
- Financial records: 7 years (legal requirement)
- Audit logs: 2 years
- Marketing data: Until consent withdrawn
You can request deletion anytime (subject to legal retention requirements).
Your Legal Rights
You have the right to:
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Request deletion ("right to be forgotten")
- Restriction: Limit processing of your data
- Portability: Receive data in machine-readable format
- Object: Opt-out of marketing and profiling
- Withdraw consent: Anytime for consent-based processing
- Complain: Lodge complaint with supervisory authority
To exercise rights, contact: privacy@agridigi.com
Third-Party Services
We use trusted third-party services:
- Firebase/Google Cloud: Hosting, authentication, database
- Stripe/PayPal: Payment processing
- Google AI: Vision analysis and AI features
- AgriDigi Satellite: Satellite imagery
- Analytics: Google Analytics (with consent)
When you connect AgriDigi to ChatGPT through OAuth, OpenAI/ChatGPT receives the approved account identifier, profile name or email address and permitted categories of your data needed to fulfill your requests, as described below. You choose the permissions and can revoke access in Connected apps.
Approved categories may include your fields and tasks; inventory, equipment and staff names, salaries and skills; financial records with amounts, currencies and dates; saved analysis metadata and summaries; drone and sensor metadata; notifications and support ticket text; account settings; and noncredential administrative configuration allowed by your staff role. Staff addresses, government identifiers and contact details, banking or card credentials, precise device locations, analysis images and raw chat history are excluded. Free text in approved records may contain personal information you entered. Complex changes are prepared as an exact operation plan that you review and explicitly approve in AgriDigi before execution; this handoff does not provide autonomous execution without that review.
AgriDigi stores OAuth authorization codes and access and refresh tokens as hashes on its servers. Connection grants expire after 30 days and access tokens after 10 minutes. To limit abuse, counters associated with hashed network addresses are kept for up to 30 days and are not shared with OpenAI. Revoking a connection stops future access; data already shared with ChatGPT is governed by OpenAI’s privacy policy. The stable opaque profile identifier is kept for the lifetime of your account to support reconnection. Operation retry receipts help prevent duplicate actions; after 730 days (about two years), they become eligible for automatic cleanup by hourly background jobs. Deleting your account immediately blocks integration access and starts asynchronous deletion of its integration profile, connection, credential and operation metadata. A background job retries this cleanup hourly. This integration excludes passwords, credentials, precise GPS coordinates, images, banking or card credentials and complete chat histories.
These services have their own privacy policies. We ensure they meet our security standards.
International Transfers
Your data may be transferred to and processed in the United States and other countries. We ensure adequate protection through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions (where applicable)
- Privacy Shield principles (US)
Children's Privacy
Our Service is not intended for children under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately for deletion.
Data Breach Notification
In compliance with GDPR Article 33-34, we have implemented a comprehensive data breach response procedure:
Notification Timeline:
- Supervisory Authority: Within 72 hours of becoming aware of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals
- Affected Users: Without undue delay when the breach is likely to result in a high risk to your rights and freedoms
Breach Response Procedure:
- Detection & Containment: Immediate identification and containment of the breach
- Assessment: Evaluation of the nature, scope, and potential impact of the breach
- Notification: Timely notification to supervisory authorities and affected individuals as required
- Documentation: Complete documentation of the breach, its effects, and remedial actions taken
- Remediation: Implementation of measures to address the breach and prevent future occurrences
What We Will Communicate:
- Nature of the personal data breach
- Contact details of our Data Protection Officer
- Likely consequences of the breach
- Measures taken or proposed to address the breach
- Recommendations for you to mitigate potential adverse effects
To report a suspected data breach, contact us immediately at: privacy@agridigi.com
California Privacy Rights (CCPA/CPRA)
🇺🇸 Notice to California Residents
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section describes your rights and how to exercise them.
Your California Privacy Rights:
- Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You can request that we delete the personal information we have collected from you, subject to certain exceptions.
- Right to Opt-Out of Sale/Sharing: You have the right to opt-out of the "sale" or "sharing" of your personal information. AgriDigi does not sell personal information for monetary consideration. We may share information with service providers for business purposes.
- Right to Correct: You can request that we correct inaccurate personal information that we maintain about you.
- Right to Limit Use of Sensitive Personal Information: You can limit our use of sensitive personal information to purposes necessary to provide the services you request.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Categories of Personal Information Collected:
In the past 12 months, we have collected the following categories of personal information:
- Identifiers (name, email, phone number, IP address)
- Commercial information (purchase history, subscription details)
- Internet/network activity (browsing history, interactions with our Service)
- Geolocation data (approximate location based on IP)
- Professional information (company name, agricultural profile)
🚫 Do Not Sell or Share My Personal Information
AgriDigi does not sell your personal information as defined under CCPA/CPRA. We do not share your personal information for cross-context behavioral advertising. If you wish to opt-out of any future sale or sharing, contact us at privacy@agridigi.com.
California "Shine the Light" (Civil Code § 1798.83):
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.
How to Exercise Your Rights:
To submit a request, you or your authorized agent may contact us:
- Email: privacy@agridigi.com
- We will respond to verifiable requests within 45 days (may be extended by an additional 45 days if necessary)
You may also contact the California Attorney General at oag.ca.gov for more information about your rights under CCPA/CPRA.
Changes to Privacy Policy
We may update this Privacy Policy. Changes will be posted with an updated date. Material changes will be notified via email or prominent notice.
Contact Us
Data Protection Officer:
Litequo LLC
30 N Gould St Ste R
Sheridan, WY 82801
United States
Email: privacy@agridigi.com
Phone: +1 (307) 429-4242
🇪🇺 EU Representative (GDPR Article 27)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, our designated EU Representative is:
AgriDigi EU Representative
Email: eu@agridigi.com
Our EU Representative is authorized to act on our behalf regarding all obligations under the General Data Protection Regulation (GDPR). You may contact them for any data protection inquiries, to exercise your rights, or to lodge complaints.
🇹🇷 Türkiye Representative (KVKK)
For users in Türkiye, contact us under KVKK:
Email: privacy@agridigi.com
🇨🇦 Canada Privacy Notice (PIPEDA & Quebec Law 25)
For users in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25 (Bill 64).
Under PIPEDA, you have the right to:
- Access your personal information held by us
- Challenge the accuracy and completeness of your information
- Request correction of inaccurate information
- Withdraw consent for collection, use, or disclosure (subject to legal restrictions)
- File a complaint with the Office of the Privacy Commissioner of Canada
Quebec residents: Under Law 25, you have additional rights including the right to data portability, the right to be forgotten, and the right to be informed of automated decision-making. We will respond to access requests within 30 days.
Email: privacy@agridigi.com
You may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376.