Privacy policy

This Privacy Policy explains how AgBase LLC (“AgBase”, “we”, “us”) collects, uses, shares and keeps information when you use the AgBase web dashboard, the AgBase iOS app and the related services (the “Service”). It is part of the Terms of Service, and words defined there (Organization, Owner, Authorized User, Customer Data) mean the same here. The Service is offered to businesses in the United States, and all data is stored and processed in the United States.

Most of the information in the Service is Customer Data that an Organization enters about its own operations, customers and crews. We process that data on the Organization’s behalf and under its instructions; the Organization decides who among its people may see it and answers to its own customers, growers and personnel for how it is used. If you are a pilot, driver, dispatcher or customer contact admitted by an Organization, that Organization is the first place to ask about the data it holds on you, and we will help it answer.

Account information: your name, email address, phone number, password (held only in hashed form by our authentication provider), your role in each Organization you belong to, and the version of the Terms you accepted and when.

Organization information: the business name, address, primary state, home bases, aircraft and drones, and the plan and add-ons it has bought.

Operational data: customers and their contacts and addresses; fields and their boundaries; work orders and jobs; products, mixes and rates; application and completion records, including the acres, times, weather readings and the products applied; photographs attached to a record; invoices; use reports; and the pilot credentials an Organization records, such as licence and certificate numbers and medical dates.

Location and flight data from the iOS app, with your permission: your device’s position while the app is open, your flight or drive path while a job is in progress, and the heading, speed, altitude and accuracy readings that go with them. Section 4 describes this in detail.

Device and technical information: a push-notification token if you allow notifications, and the server logs that every web service keeps (IP address, browser or app version, pages requested, errors). On our website and web dashboard, product-analytics events, tied to your account once you sign in: the pages you open, the controls you use and the errors the page hits, with the page’s text, titles, search terms and record ids stripped before anything leaves your browser; an error report keeps the error’s type and where it happened, not its message.

Billing information: Stripe, our payment processor, collects your card details directly, and we never see the full card number. We receive from Stripe the status of the subscription, its invoices and receipts, the name, business name, email address, phone number and billing address entered at checkout, and the card’s brand and last four digits.

Communications: what you send to support@agbaseco.com.

To provide the Service: to show each Organization its own data, to sync the web dashboard and the app, to generate the records, reports, maps and invoices you ask for, and to deliver the notifications you turn on. To run the business: to bill and collect payment, to answer support requests, to tell you about changes to the Service or these documents, and to enforce the Terms. To keep the Service safe: to authenticate you, to detect and prevent misuse, and to investigate security incidents. To improve the Service, using data that has been aggregated or de-identified so that neither a person nor an Organization can be identified, and the product analytics section 9 describes. To comply with law and respond to legal process.

We do not sell personal information, we do not share it for cross-context behavioral advertising, we do not use it for advertising of any kind, and we do not use Customer Data to train artificial-intelligence models.

The iOS app uses location only with your permission, which iOS asks for the first time it is needed and which you can change at any time in iOS Settings. While the app is open, your position is shown on your own route map and, if location sharing is on, sent to your Organization as a live position: a pilot’s to dispatch on the Fleet map, a driver’s to their own pilot’s map in the app. While a job is in progress, your flight or drive path is recorded for the completion record; during a job, recording and sharing both continue when the app is in the background or the screen is locked, and both stop when the job is completed. A pilot’s position is shown to their drivers and to dispatch; a driver’s position is shown to their own pilot and may be read by the Organization’s office roles. You can turn sharing off at any time in the app (Route sidebar or Settings), and the app keeps working; without location permission a job can still be flown and completed, but it is not tracked and the Route tab’s map is unavailable. The web dashboard shows live positions and tracks only to staff of the same Organization in roles that the Service allows to see them, and nowhere else.

Location and flight data belong to the Organization as Customer Data: it is the Organization that decides to record them and that answers to its crews for doing so.

Service providers who process data on our behalf and under our instructions: a database, file-storage and authentication provider (US region), a web-hosting provider for the website and web dashboard, a product-analytics and error-reporting provider for them (US region), Apple (push notifications and the App Store), and Stripe (payments; where Stripe, through its Link service, is the merchant of record for your payment, it keeps its own records under its own privacy policy).

Services the Service calls to show you something, which receive only what the request needs, usually a coordinate, a field boundary or flown track, or a place name, and never your name: map imagery and tile providers, aviation chart hosts, a weather service, a geocoding service, a product-registration database, field-line providers, land-survey and place-data sources, and a sensitive-site registry where your Organization connects one. Each is governed by its own terms and privacy policy.

Within your Organization: Authorized Users see the data their role allows, as the Owner and admins decide, and a customer contact sees only the portal their Organization shares with them. Across Organizations, nothing: each Organization sees only its own data.

Other apps you hand off to: when you open a location in a flight-planning or maps app, or export a file for an aerial guidance system or another system, that data goes to that app under its owner’s policies.

When the law requires: to a regulator, court or law-enforcement agency in response to valid legal process, or when we believe in good faith that disclosure is necessary to protect the rights, property or safety of AgBase, our customers or the public; or when your Organization asks us to. Where the law allows, we tell the Organization first. If AgBase is sold, merged or reorganized, Customer Data and account information may be transferred to the successor, who must honor this Privacy Policy.

Application and completion records are kept for at least three (3) years from their date, to meet state record-keeping rules, and we will not delete them on request during that period. Other Customer Data and account information is kept while the Organization’s account is open and for a short period afterward, then deleted or anonymized; the Terms describe when a lapsed Organization’s account closes. Server logs are kept for a short, rolling period. Backups expire on their own schedule, after which deleted data is gone from them too. We may keep information longer when the law, a legal hold or a dispute requires it.

Data is encrypted in transit and at rest. Access is restricted by Organization at the database (row-level security), so one Organization’s people cannot read another’s data, and within an Organization by role. The iOS app stores its offline copy in the device’s protected storage and clears it on sign-out. Passwords are never stored in readable form. No system is perfect: tell us at support@agbaseco.com if you find a problem, and we will tell affected Organizations of a breach as the law requires.

Export and deletion: an Organization’s Owner can ask us at support@agbaseco.com for an export of its data in a common machine-readable form, and for deletion of data that no retention requirement covers. Individuals can ask us to access, correct or delete the personal information we hold about them; where that information is Customer Data, we will work with the Organization that entered it. We confirm identity before acting on a request and answer within the time the applicable law allows.

State privacy rights: residents of California and other states with consumer privacy laws have the rights those laws provide, including to know what personal information is collected, to access, correct and delete it, and not to be discriminated against for exercising those rights. We do not sell or share personal information, so there is nothing to opt out of; if that ever changed, we would offer an opt-out first. Requests go to support@agbaseco.com.

Location: change permission in iOS Settings, or turn sharing off in the app. Notifications: turn them off in iOS Settings. Email: we send only account, billing and service messages; there is no marketing list.

Our website and web dashboard use the cookies they need to keep you signed in and to protect the session, and one first-party analytics cookie, with the browser’s local storage, that joins your visits into one record. We use that record only to see how the website and dashboard are used and where they fail, so we can improve them. There are no advertising cookies and no cross-site tracking, and we do not sell or share this data for advertising. We do not respond differently to a browser’s “Do Not Track” signal, because the analytics never follow you to other sites.

The Service is for working adults in the United States. It is not directed at children under 18, and we do not knowingly collect information from them; tell us if you believe a child has provided information and we will delete it.

We may revise this Privacy Policy. We will post the revised version at agbaseco.com/privacy with a new effective date and version, and give notice of a material change as the Terms describe. Where a revision requires acceptance, the Service will ask you to accept it before continuing.

Questions, requests and security reports go to AgBase LLC at support@agbaseco.com.