Privacy notice

What we hold

Account details: your name, email address and the language you chose for the interface.

Farm records you enter: fields and parcels, crops, field operations, journal entries, documents, photographs you attach to them, and the other operational data the application exists to keep.

Offer requests: when you ask a supplier for an offer, the message you write and the promotion it refers to, together with the moment you gave consent.

What we use it for

Running the application for your farm — showing your records back to you, and producing the reports and exports you ask for.

When you tick the consent box on an offer request, your name and your message are shared with that supplier so they can contact you about it. Nothing is shared with a supplier unless you tick that box, and no offer request is stored without it.

When you open a conversation on the exchange, the farm you write to sees your name alongside your messages — the same as an offer request, and for the same reason: they need to know who they are talking to. Your phone number and email are NOT shared by writing; those stay behind the contact-reveal step, which both sides have to take deliberately.

How it is protected

Sensitive free-text and contact fields are encrypted before they are written to the database, so they are not readable in a database dump.

Each farm`s data is isolated at the database level. One organisation cannot read another`s records, and that isolation is enforced by the database itself rather than only by application code.

Your consent to share an offer request is stored with the moment you gave it, so it can be shown if you ever ask why a supplier received your details.

Your rights

Under the GDPR you may ask for a copy of your personal data, ask for it to be corrected or erased, object to how it is used, or withdraw a consent you previously gave. Contact the operator of this deployment using the details below.

Getting a copy of your data

You can download everything we hold about you from your account settings, as a machine-readable file. It contains your account details, the notices you have filed, the statements of reasons written to you, your messages, enquiries and blocks. It does NOT contain farm records you authored — those belong to the farm, which has its own record-keeping duties — nor your sign-in credentials, nor blocks other people have made against you. The file itself lists what it leaves out.

Deleting your account

You can ask us to delete your account from your account settings, or in the app. When you do, we sign you out everywhere and your account stops being visible to other farms straight away. Nothing is removed for 30 days: if you change your mind, sign in again and cancel. That waiting period is there to protect you from a hasty decision or from someone else using your account.

After 30 days we remove the information that identifies you. Your name is deleted and your email address is replaced, which also frees that address so you can sign up again. Your sign-in credentials, your social blocks and your feature-trial memberships are deleted outright. Listings, conversations, messages and enquiries stay, with your name replaced by a random code that we do not keep a key to — those records also belong to the farm you dealt with, or to the person on the other side of the conversation.

Files you uploaded stay with the farm — a photograph attached to a journal entry, a document attached to a task — for the same reason its journal entries do: they are the farm’s record of what was done in its fields, and some of them it is required to keep. After deletion they are no longer attributable to you, because the account that uploaded them no longer carries your name or your address.

We cannot delete everything, and we would rather say so than imply otherwise. Where you have reported content to us, the report stays linked to you. The law that requires us to act on reports about illegal or harmful content (the EU Digital Services Act) also requires us to keep an auditable record of what was reported and what we did about it, and Article 17(3)(b) of the GDPR allows us to keep personal data where we have that kind of legal obligation. For the same reason, our tamper-evident activity logs are never rewritten. So after deletion you are no longer identifiable from your account, and a regulator asking about a specific report can still be answered.

How long we keep it

An offer request is kept for 24 months from the day you send it, then marked for deletion and permanently removed 90 days later. Farm records and account details are kept while your account is active.

Who is responsible

Agrent is software operated by an organisation that decides what is collected and why. That organisation is the data controller for the records in this deployment and is the party to contact about them.

Contact: ivo@inflect.bg