Privacy Policy
Effective date: June 25, 2025 · Last updated: October 29, 2026
Contact: [email protected] | +1 (385) 503-5055
Preamble
This Privacy Policy ("Policy") is issued by FoodAgri AI LLC, a Wyoming Limited Liability Company, with its principal place of business at 30 N Gould St Ste 100, Sheridan, WY 82801, USA ("FoodAgri AI," "we," "us," or "our"). FoodAgri AI is part of CloviTek, which handles privacy questions and requests for FoodAgri at [email protected].
This Policy explains how FoodAgri AI collects, uses, shares, and protects your personal information in line with applicable data privacy laws, including the California Consumer Privacy Act (CCPA) where it applies and the EU and UK General Data Protection Regulation (GDPR) for personal data covered by it. We are committed to transparency, user rights, and responsible data handling.
If you have questions or wish to exercise your privacy rights, contact us at:
- Email: [email protected]
- Phone: +1 (385) 503-5055
- Mail: FoodAgri AI LLC, 30 N Gould St Ste 100, Sheridan, WY 82801, USA
We may update this Policy from time to time. We will tell you about material changes as described in section 13.
1. Definitions
- Personal Data: Any information relating to an identified or identifiable individual (see "Information We Collect").
- Processing: Any operation performed on Personal Data (collection, use, storage, sharing, deletion, etc.).
- User/You: Any individual or entity using FoodAgri AI's services.
- Services: The website, platform, research, reports, templates, tools and related services provided by FoodAgri AI, as described on our website and in our Terms of Use.
- Third-Party Service Provider: Any third party engaged by FoodAgri AI to assist in providing services (cloud hosting, analytics, payments, etc.).
- Data Subject Request: A request to exercise rights under applicable data protection laws.
- Data Handling and Deletion Schedule: Our detailed retention and deletion policy, set out in our Data Handling and Deletion Schedule.
- Standard Contractual Clauses (SCCs): EU-approved contractual safeguards for international data transfers.
- Material Change: Any change to this Policy that significantly affects how we collect, use, or disclose your Personal Data.
2. Information We Collect
We collect the following categories of personal data, depending on your interactions with our platform and services:
| Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Contact & Identity Information | Name, business, email, phone, address | Account creation, communication, support | Contract, Legitimate Interests, Consent |
| Account & Profile Data | Username, password (hashed), company, user ID, profile photo | Account management, security, personalization | Contract, Legitimate Interests |
| Billing & Payment Data | Billing address, payment method (last 4 digits), transaction history, tax/VAT ID | Payments, invoicing, compliance | Contract, Legal Obligation |
| Usage & Activity Data | Logins, IP, device/browser info, pages/features used, actions taken | Analytics, security, troubleshooting | Legitimate Interests, Consent (analytics) |
| Support & Communications | Support tickets, chat/email transcripts, feedback | Support, quality assurance, dispute resolution | Contract, Legitimate Interests |
| Uploaded Content | Files, documents, recordings, business/customer data, AI outputs | Service delivery, storage, AI features | Contract, Legitimate Interests, Consent |
| Marketing & Preferences | Opt-in/opt-out status, preferences, campaign responses | Marketing (with consent), preference management | Consent, Legitimate Interests |
| Cookies, Tracking & Analytics | Cookies, device IDs, geolocation, analytics | Site functionality, analytics, personalization | Consent (non-essential), Legitimate Interests |
| Third-Party Integration Data | Data from integrated tools (CRM, email, calendar), API tokens | Integrations, workflow automation | Contract, Legitimate Interests, Consent |
| Legal & Compliance Data | Consent records, data subject requests, audit logs | Compliance, legal defense, audits | Legal Obligation, Legitimate Interests |
| Special Category Data | Not requested (for example, health or biometric data). Please do not upload it. | None | Not applicable |
For more details, see our Data Handling and Deletion Schedule.
3. How We Use Your Information
We process your data only for the purposes described below and in accordance with applicable law:
- To create and manage your account
- To deliver and improve our Services
- To process payments and manage subscriptions
- To communicate with you about updates, support, and account matters
- To provide analytics, security, and troubleshooting
- To send marketing communications (with your consent)
- To comply with legal obligations and respond to regulatory requests
- To enable integrations with third-party tools
- To maintain records of consent and manage your privacy rights
We rely on contract performance, legitimate interests, legal obligations, and consent (where required) as lawful bases for processing.
FoodAgri AI is not a law firm or an accounting firm. Information you share with us is protected as described in this Policy, but it is not covered by attorney-client privilege or accountant-client confidentiality. Share legal or tax matters you need kept privileged with your own attorney or CPA.
4. International Data Transfers
Your data may be transferred to and processed in countries outside your home jurisdiction, including the United States. We use SCCs, adequacy decisions, and supplementary technical and organizational measures (e.g., encryption, access controls, transfer impact assessments) to ensure your data is protected in accordance with GDPR and other privacy laws.
5. Data Security
We use a layered security program, including:
- Encryption: TLS for data in transit
- Access Controls: Role-based access
- Network Security: Firewalls, intrusion detection, regular patching
- Data Minimization: Only necessary data collected/processed
- Backup & Recovery: Regular backups, disaster recovery plan
- Monitoring & Incident Response: Continuous monitoring, documented incident response
- Employee Training: Regular security and privacy training
6. Data Retention and Deletion
We retain personal data only as long as necessary for the purposes described or as required by law. Retention periods for each data category are detailed in our Data Handling and Deletion Schedule.
Upon expiry of the retention period or upon verified user request, data is securely deleted or irreversibly anonymized using methods consistent with NIST SP 800-88 Rev. 2 (for example, cryptographic erasure, secure erase commands or our providers' deletion tools). Deletion and anonymization actions are logged and periodically audited. For data processed by third-party providers, we coordinate deletion and obtain confirmation from those providers.
7. Children's Privacy
Our website and Services are intended for businesses and are not directed to children under 13 (or the higher age set by your local law). We do not knowingly collect personal data from children. If we learn that a child has provided personal data to us, we will delete it promptly. Parents or guardians may contact us about any such data.
8. Cookies and Tracking Technologies
We use only the cookies and browser storage needed to run the website and remember your settings (such as light or dark theme), and analytics that do not use cookies. If we add non-essential cookies, you will first see a cookie banner allowing you to accept all, reject all, or customize your preferences. Non-essential cookies will only be set with your explicit consent. See our Cookie Policy for details.
9. Sharing Your Information with Third Parties
We share personal data with trusted third-party service providers under strict contractual and security safeguards. These include:
| Category | Example Providers | Data Shared | Purpose | Security/Compliance |
|---|---|---|---|---|
| Cloud Hosting | Cloud hosting providers | All user data | Secure storage, uptime | Encryption and access controls |
| Payment Processing | Payment processors | Billing info, transactions | Payments, refunds | PCI DSS, DPA |
| Analytics | Cookie-free website analytics | Usage, device info | Analytics, improvement | Data minimization, DPA |
| Email/Communication | Email and support tools | Email, name, support content | Notifications, support | Encryption, DPA |
| CRM/Marketing Automation | Customer relationship (CRM) tools | Contact info, preferences | CRM, marketing | DPA, access controls |
| AI/ML Infrastructure | AI model providers | Content, usage (as needed) | AI-powered features | DPA, industry-standard security |
All providers are contractually bound to use your data only for specified purposes and to implement industry-standard security measures. For a current list of providers and their certifications, contact [email protected].
10. Your Rights
You have the following rights under GDPR, CCPA, and other applicable laws:
- Right to Know/Access: Request information about what data we hold and how it is used.
- Right to Correction: Request correction of inaccurate or incomplete data.
- Right to Deletion: Request deletion of your data, subject to legal exceptions.
- Right to Restrict Processing: Request restriction of processing in certain circumstances.
- Right to Object: Object to processing for certain purposes (e.g., marketing).
- Right to Data Portability: Receive your data in a portable format.
- Right to Opt-Out of Sale or Sharing (CCPA): We do not sell personal information or share it for cross-context behavioral advertising, and we treat a Global Privacy Control signal from your browser as a request to opt out.
- Right to Non-Discrimination: Exercise your rights without discrimination.
- Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing).
To exercise your rights, use our Data Rights Request page, email [email protected], call +1 (385) 503-5055, or write to our address above. We will verify your identity and respond within the timeframe required by law.
11. Data Subject Requests and Verification
To protect your data, we verify your identity before processing requests. If you have an account, submit requests while logged in or confirm via your registered email. For sensitive requests, we may ask for additional information. Abusive or excessive requests may be refused or subject to a reasonable fee, with written explanation.
12. International Transfers and Additional Safeguards
For transfers to countries without adequate data protection, we use SCCs and supplementary measures (encryption, access controls, transfer impact assessments, audit rights, etc.) to ensure your data receives essentially equivalent protection.
13. Changes to This Privacy Policy
We may update this Policy from time to time. For material changes (e.g., new data types, new uses, new third-party sharing, or changes to your rights), we will provide at least 14 days' advance notice by email and website banner, and require renewed consent where required by law. The "Last Updated" date at the top of this Policy will always reflect the current version.
14. Contact Us
For privacy-related inquiries or to exercise your rights, contact:
Email: [email protected]
Phone: +1 (385) 503-5055
Mail: FoodAgri AI LLC, 30 N Gould St Ste 100, Sheridan, WY 82801, USA