Privacy Policy

FoodAgri AI LLC's comprehensive privacy policy and data protection practices

Effective Date: June 25, 2025

Contact: [email protected] | +1 (307) 555-1234

Preamble

This Privacy Policy ("Policy") is issued by FoodAgri AI LLC, a Wyoming Limited Liability Company, with its principal place of business at 30 N Gould St Ste R, Sheridan, WY 82801, USA ("FoodAgri AI," "we," "us," or "our"). FoodAgri AI was founded in August 2025.

This Policy explains how FoodAgri AI collects, uses, shares, and protects your personal information in compliance with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), the Children's Online Privacy Protection Act (COPPA), and other applicable data privacy laws. We are committed to transparency, user rights, and responsible data handling.

If you have questions or wish to exercise your privacy rights, contact us at:

Email: [email protected]
Phone: +1 (307) 555-1234
Mail: FoodAgri AI LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA

We may update this Policy from time to time. We will notify you of material changes via email, website banner, and by updating the "Last Updated" date above. Substantial changes will require renewed consent.

1. Definitions

Personal Data: Any information relating to an identified or identifiable individual (see "Information We Collect").
Processing: Any operation performed on Personal Data (collection, use, storage, sharing, deletion, etc.).
User/You: Any individual or entity using FoodAgri AI's services.
Services: The AI-powered SaaS solutions provided by FoodAgri AI, as described on our website and in user agreements.
Third-Party Service Provider: Any third party engaged by FoodAgri AI to assist in providing services (cloud hosting, analytics, payments, etc.).
Data Subject Request: A request to exercise rights under applicable data protection laws.
Data Handling and Deletion Schedule: Our detailed retention and deletion policy, available at .
Standard Contractual Clauses (SCCs): EU-approved contractual safeguards for international data transfers.
Material Change: Any change to this Policy that significantly affects how we collect, use, or disclose your Personal Data.

2. Information We Collect

We collect the following categories of personal data, depending on your interactions with our platform and services:

Category	Examples	Purpose	Lawful Basis
Contact & Identity Information	Name, business, email, phone, address	Account creation, communication, support	Contract, Legitimate Interests, Consent
Account & Profile Data	Username, password (hashed), company, user ID, profile photo	Account management, security, personalization	Contract, Legitimate Interests
Billing & Payment Data	Billing address, payment method (last 4 digits), transaction history, tax/VAT ID	Payments, invoicing, compliance	Contract, Legal Obligation
Usage & Activity Data	Logins, IP, device/browser info, pages/features used, actions taken	Analytics, security, troubleshooting	Legitimate Interests, Consent (analytics)
Support & Communications	Support tickets, chat/email transcripts, feedback	Support, quality assurance, dispute resolution	Contract, Legitimate Interests
Uploaded Content	Files, documents, recordings, business/customer data, AI outputs	Service delivery, storage, AI features	Contract, Legitimate Interests, Consent
Marketing & Preferences	Opt-in/opt-out status, preferences, campaign responses	Marketing (with consent), preference management	Consent, Legitimate Interests
Cookies, Tracking & Analytics	Cookies, device IDs, geolocation, analytics	Site functionality, analytics, personalization	Consent (non-essential), Legitimate Interests
Third-Party Integration Data	Data from integrated tools (CRM, email, calendar), API tokens	Integrations, workflow automation	Contract, Legitimate Interests, Consent
Legal & Compliance Data	Consent records, data subject requests, audit logs	Compliance, legal defense, audits	Legal Obligation, Legitimate Interests
Special Category Data	Only with explicit consent (e.g., health, biometric, sensitive data)	Only for specified, limited purposes	Explicit Consent (GDPR Art. 9)

For more details, see our .

3. How We Use Your Information

We process your data only for the purposes described below and in accordance with applicable law:

To create and manage your account
To deliver and improve our AI-powered SaaS features
To process payments and manage subscriptions
To communicate with you about updates, support, and account matters
To provide analytics, security, and troubleshooting
To send marketing communications (with your consent)
To comply with legal obligations and respond to regulatory requests
To enable integrations with third-party tools
To maintain records of consent and manage your privacy rights

We rely on contract performance, legitimate interests, legal obligations, and consent (where required) as lawful bases for processing.

4. International Data Transfers

Your data may be transferred to and processed in countries outside your home jurisdiction, including the United States. We use SCCs, adequacy decisions, and supplementary technical and organizational measures (e.g., encryption, access controls, transfer impact assessments) to ensure your data is protected in accordance with GDPR and other privacy laws. For more, see our .

5. Data Security

We use a layered security program, including:

Encryption: TLS for data in transit, AES-256 for data at rest
Access Controls: Role-based access, MFA for admin accounts
Network Security: Firewalls, intrusion detection, regular patching
Data Minimization: Only necessary data collected/processed

Backup & Recovery: Regular backups, disaster recovery plan
Monitoring & Incident Response: Continuous monitoring, documented incident response
Employee Training: Regular security and privacy training
Certifications: ISO 27001 and SOC 2 Type 2 certifications

For more, see our .

6. Data Retention and Deletion

We retain personal data only as long as necessary for the purposes described or as required by law. Retention periods for each data category are detailed in our .

Upon expiry of the retention period or upon verified user request, data is securely deleted or irreversibly anonymized using industry-standard methods (e.g., multi-pass overwriting, cryptographic erasure, secure erase commands, physical destruction, k-anonymity). Deletion and anonymization actions are logged and periodically audited. For data processed by third-party providers, we coordinate deletion and obtain confirmation from those providers.

7. Children's Privacy

We do not knowingly collect personal data from children under 13 (or the applicable age in your jurisdiction) without verifiable parental consent. If we learn that a child has provided us with data without such consent, we will promptly delete that information. Parents may contact us to review, correct, or delete their child's data.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and support marketing. On your first visit, you will see a cookie banner allowing you to accept all, reject all, or customize your preferences. Non-essential cookies will only be set with your explicit consent. You can change your preferences at any time via the "Manage Cookie Preferences" link. See our for details.

9. Sharing Your Information with Third Parties

We share personal data with trusted third-party service providers under strict contractual and security safeguards. These include:

Category	Example Providers	Data Shared	Purpose	Security/Compliance
Cloud Hosting	AWS, Google Cloud	All user data	Secure storage, uptime	Encryption, ISO 27001, SOC 2
Payment Processing	Stripe, PayPal	Billing info, transactions	Payments, refunds	PCI DSS, DPA
Analytics	Google Analytics	Usage, device info	Analytics, improvement	Data minimization, DPA
Email/Communication	SendGrid, Intercom	Email, name, support content	Notifications, support	Encryption, DPA
CRM/Marketing Automation	HubSpot, Salesforce	Contact info, preferences	CRM, marketing	DPA, access controls
AI/ML Infrastructure	OpenAI, Google AI	Content, usage (as needed)	AI-powered features	DPA, industry-standard security

All providers are contractually bound to use your data only for specified purposes and to implement industry-standard security measures. For a current list of providers and their certifications, contact [email protected].

10. Your Rights

You have the following rights under GDPR, CCPA, and other applicable laws:

Right to Know/Access: Request information about what data we hold and how it is used.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Deletion: Request deletion of your data, subject to legal exceptions.
Right to Restrict Processing: Request restriction of processing in certain circumstances.
Right to Object: Object to processing for certain purposes (e.g., marketing).
Right to Data Portability: Receive your data in a portable format.
Right to Opt-Out of Sale (CCPA): Direct us not to sell your data (we do not sell data).
Right to Non-Discrimination: Exercise your rights without discrimination.
Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing).

To exercise your rights, use our , email [email protected], call +1 (307) 555-1234, or write to our address above. We will verify your identity and respond within the timeframe required by law.

11. Data Subject Requests and Verification

To protect your data, we verify your identity before processing requests. If you have an account, submit requests while logged in or confirm via your registered email. For sensitive requests, we may ask for additional information. Abusive or excessive requests may be refused or subject to a reasonable fee, with written explanation.

12. International Transfers and Additional Safeguards

For transfers to countries without adequate data protection, we use SCCs and supplementary measures (encryption, access controls, transfer impact assessments, audit rights, etc.) to ensure your data receives essentially equivalent protection.

13. Changes to This Privacy Policy

We may update this Policy from time to time. For material changes (e.g., new data types, new uses, new third-party sharing, or changes to your rights), we will provide at least 14 days' advance notice by email and website banner, and require renewed consent where required by law. The "Last Updated" date at the top of this Policy will always reflect the current version.

14. Contact Us

For privacy-related inquiries or to exercise your rights, contact:

Email: [email protected]

Phone: +1 (307) 555-1234

Mail: FoodAgri AI LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA

Last updated: June 25, 2025