This is a translation. The Spanish version of this policy is the authoritative one. If the two ever disagree, the Spanish text governs. Read it in Spanish.
Your privacy is our priority. This policy explains how we protect your personal data. We comply with the LFPDPPP (Mexico's federal data protection law), the GDPR (EU), and international best practice.
1. Introduction
AgroBridge Technologies, S.A. de C.V. ("AgroBridge", "we") is the controller of your personal data. This policy sets out:
- What data we collect
- How we use and protect it
- Your rights over your data
- How to exercise those rights
1.1 Scope
This policy applies to all AgroBridge services, including:
- The website and platform at agrobridge.io
- The AgroBridge mobile app for Android (
com.agrobridge.ztd, distributed on Google Play) - The AgroBridge mobile app for iOS (App Store)
- Our APIs and backend services
What the mobile apps do specifically — including the device permissions we ask for — is set out in Section 3.
2. Data We Collect
2.1 Identification data
- Full name and business name
- Email address and phone number
- Physical and tax address
- RFC (the Mexican taxpayer registry number) or an equivalent tax identification
- Identity documents (in Mexico, the INE voter card; or a passport)
2.2 Commercial data
- Product and certification information
- Transaction history
- Bank details for payments
- Export and import licences
2.3 Technical data
- IP address and approximate location
- Device and browser type
- Cookies and similar technologies
- Activity logs on the platform
2.4 Browser permissions
The website may ask your permission to use the microphone, if you turn on voice commands in simplified mode. It is the only place we ask for it: neither of our mobile apps uses the microphone. It only listens while you switch it on, and you can refuse the permission and carry on using everything else. Your browser is what asks, and you can revoke it from your browser settings at any time.
2.5 Sensitive data
We do not collect sensitive data (ethnic origin, health, sexual orientation, religious belief) unless it is strictly necessary for the service and you have given express consent.
3. Mobile Apps (Android and iOS)
Our mobile apps ask for device permissions only for specific features. Every permission is optional: the app asks for each one at the moment it needs it, you can refuse and keep using the rest of the platform, and you can revoke it at any time from your operating system settings.
3.1 Device permissions
The two apps do not ask for the same things. This table says, for each permission, which one uses it. A "no" means that app cannot ask for it: the permission is not declared in the package published to the store, so your operating system will never offer it to you.
If a permission is not in this table, neither app asks for it. In particular: we do not use the microphone, we do not read NFC tags, and we do not track your location in the background.
| Permission | Android | iOS | What we use it for |
|---|---|---|---|
| Location (precise and approximate) | Yes, only while you are using the app | Yes, only while you are using the app | To geolocate lots and plots at harvest time, and to record traceability events with the place they happened. Neither app uses your location in the background. |
| Camera | Yes | Yes | To scan traceability QR codes, photograph lots and products, and capture documents and certificates. Images are uploaded only when you confirm. |
| Photos | Yes (system picker) | Yes | To attach images already on your phone to your lots' events. On Android this goes through the system picker: you choose the photo, and the app gets no access to the rest of your gallery. |
| Biometrics (fingerprint / face) | Yes | Yes (Face ID / Touch ID) | To unlock the app and authorise sensitive operations. Your biometric data never leaves your device: the operating system only tells us whether the check succeeded. |
| Notifications | Yes | No | They are not active today. The permission is declared on Android, so the system may ask you for it, but we send no push notifications at all. If we ever turn them on, they will only be alerts about your own orders. The iOS app does not send push notifications and will not ask your permission to do so. |
| Storage | Yes | No | Android only: to save the certificates, invoices and export documents you download onto your device, and to keep data for offline use. The iOS app does not declare this permission; it keeps those files inside its own space, without reaching the rest of the phone. |
3.2 Third-party services in the apps
The Google services in this section are in the Android app only. The iOS app does not integrate Firebase: it sends no usage events, sends no crash reports, and accesses no advertising identifier. They collect data under their own privacy policies:
| Service | Data it processes | Purpose |
|---|---|---|
| Firebase Analytics | Usage events, device identifiers, Android advertising ID, device model, country | Usage analysis and product improvement |
| Firebase Crashlytics | Crash logs, device state at the moment of the error, installation identifier | Diagnosing and fixing errors |
| Firebase Cloud Messaging | The device's notification token | Delivering push notifications. The library ships inside the app, but we send no notifications today (see section 3.1). |
| Firebase Performance | Response times, network latency, screen performance | Performance monitoring |
| Firebase Remote Config | Installation identifier | Rolling features out gradually |
| Google Play Services (Location and Maps) | Location coordinates | Lot maps and shipment tracking |
See Google's Privacy Policy and Firebase's privacy practices.
3.3 Advertising identifier
Firebase Analytics may access the Android advertising ID. We do not sell this identifier, we do not use it for targeted advertising, and we do not share it with ad networks. You can reset or disable it from Settings > Google > Ads on your Android device.
3.4 Data stored on your device
So that the app works in rural areas with patchy connectivity, we store your recent lots, orders, catalogue and certificates locally on your device, along with any operations waiting to sync. This data is encrypted, and it is deleted when you sign out or uninstall the app.
3.5 Minors and intended audience
The AgroBridge mobile apps are intended solely for people over 18 who take part in the agricultural supply chain. They are neither designed for nor directed at children, and we do not knowingly collect data from minors.
4. How We Use the Data
We use your data to:
| Purpose | Legal basis |
|---|---|
| Create and manage your account | Performance of a contract |
| Manage orders and quotes | Performance of a contract |
| Verify identity and prevent fraud | Legal obligation / legitimate interest |
| Send service notifications | Performance of a contract |
| Send marketing communications | Consent |
| Improve our services | Legitimate interest |
| Meet tax obligations | Legal obligation |
5. Sharing Information
We share your data with:
- Buyers and sellers: the information needed to complete a transaction
- Certifiers: to validate agricultural certifications
- Authorities: where the law requires it (in Mexico, SAT for tax and SENASICA for food safety; the FDA in the United States)
- Service providers. We name them one by one, with what each receives:
- DigitalOcean, LLC (United States, San Francisco) — the AgroBridge API, the lot database, and storage for the documents and photos you upload.
- Vercel Inc. (United States) — website hosting. Receives your IP address and the data of each request.
- Neon (United States) — the website's database.
- PostHog — product analytics on the website: which screens get used. Stores a cookie and data in your browser. It only runs if you accept cookies in the banner shown when you arrive.
- Sentry — website error reports. Receives the technical detail of the failure, which may include the page you were on and your user identifier.
- Anthropic (Claude) — processes the text of your questions when you use the AI assistant. What you type in that conversation reaches them.
We never sell your personal data.
6. Blockchain
We do not publish any of your data on a blockchain today. On-chain anchoring is switched off on our servers: we write no transactions, we publish no lot identifiers, and there is no record of you on any public network.
Each lot carries a verification code that we calculate on our own servers from its identifier. It is there so a lot can be quoted; it is not a cryptographic proof and it is not anchored on any network.
If we ever do turn anchoring on, we will update this notice before we do, and tell you. What is worth knowing in advance: anything written to a blockchain is public and cannot be deleted, so if that day comes we would publish identifiers only, never your name or your personal data.
7. Security
We protect your data with:
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- Multi-factor authentication (MFA)
- Regular security audits
- 24/7 threat monitoring
- Role-based access controls
8. Data Retention
| Type of data | Retention period |
|---|---|
| Account data | While the account is active, plus 2 years |
| Financial transactions | 10 years (Mexican tax obligation) |
| Certifications | 5 years after expiry |
| Activity logs | 1 year |
9. ARCO Rights (Mexico)
Under the LFPDPPP — Mexico's federal law on the protection of personal data held by private parties — and its Regulations, you have the following rights, known in Mexico by the acronym ARCO:
- Access (Acceso): to know what data we hold about you and how we use it
- Rectification (Rectificación): to correct inaccurate or incomplete data
- Cancellation (Cancelación): to ask us to delete data once it is no longer needed
- Objection (Oposición): to object to certain uses of your data
9.1 Withdrawing consent
Under Article 8 of the LFPDPPP, you have the right to withdraw at any time the consent you gave us to process your personal data. Withdrawal is not retroactive.
Important: withdrawing consent may mean we can no longer provide some or all of our services, particularly those that require identity verification or payment processing.
9.2 How to exercise your rights
To exercise any of these rights, including withdrawing consent, send your request to ceo@agrobridge.io with:
- Your full name and the email address you registered with
- A clear description of the right you want to exercise
- A copy of a valid government-issued ID (in Mexico, the INE card; or a passport)
- If you are withdrawing consent, whether it is total or partial, and for which purposes
We will answer within 20 business days at most. If the request is well founded, we will act on it within the following 15 business days after we send our answer.
9.3 Limits
Some data cannot be deleted, and some processing cannot be withdrawn, where:
- The law requires us to keep it (for example, tax records for 10 years)
- It is needed to perform a contract that is still in force
- It is needed to exercise rights in legal proceedings
10. Account and Data Deletion
You can ask us to delete your AgroBridge account and the personal data associated with it at any time, without installing the mobile app.
The route is not the same on every platform. These are the three:
- In the iOS app: Profile > Settings > "Delete my account". You confirm with your password; there is no word to type.
- In the Android app: Profile > Delete account (at the bottom of the screen). You confirm with your password and by typing
ELIMINAR(the word shown in the app). - On the web: deletion is requested by email to ceo@agrobridge.io. The agrobridge.io/legal/delete-account page opens an email already written with what we need. The website does not delete the account on the spot: we process it within the timelines in 10.3 below.
10.1 What gets deleted
- Your profile, credentials and contact details
- Your product listings and any lots with no transactions
- Documents and certificates you uploaded
- Your preferences, favourites and browsing history
- Activity logs and analytics data tied to your account
- Notification tokens and data stored on your device
10.2 What we have to keep
Some information cannot be deleted, because the law requires us to keep it:
| Data | Reason | Period |
|---|---|---|
| Tax records and invoices | Tax obligation (SAT, Mexico) | 10 years |
| History of completed transactions | Accounting obligation and the other party's rights | 10 years |
| Fraud prevention records | Legitimate interest and legal obligation | 5 years |
Data we keep is separated from your identity wherever that is technically possible, and its use is limited to meeting the obligation that justifies keeping it.
10.3 Timelines
We confirm we received your request within 20 business days at most, as the LFPDPPP requires. Once confirmed, deletion is completed within 30 calendar days, and backups containing your data are purged within 90 days at most.
Note: if you have open orders or shipments in transit, you will need to finish or cancel them before we can process the deletion. We will tell you if that is the case.
11. GDPR Rights (European Union)
If you are an EU resident, you also have the right to:
- Portability: receive your data in a structured format
- Erasure: deletion, under certain conditions
- Restriction: limit how we process it
- Complaint: lodge a complaint with a data protection authority
Our representative in the EU is: GDPR-Rep.eu
Email: agrobridge@gdpr-rep.eu
Address: Mühlenstraße 8a, 14167 Berlin, Germany
13. Minors
AgroBridge is not directed at people under 18. We do not knowingly collect data from minors. If you believe we have collected a minor's data, contact us immediately.
14. International Transfers
Your data may be transferred to servers in the United States (DigitalOcean, Vercel and Neon) and other countries. We ensure adequate protection through:
- EU standard contractual clauses
- Privacy certifications
- Data processing agreements
15. Changes to this Policy
We may update this policy from time to time. Material changes will be notified by email at least 30 days before they take effect.
16. Contact
Data Protection Officer:
AgroBridge Technologies, S.A. de C.V.ceo@agrobridge.io
Av. Chapultepec 123, Col. Americana
Guadalajara, Jalisco, Mexico, CP 44160