Privacy Policy

Data Controller

innov8.ag is a trade name of Innov8 Ag Solutions Inc., a Washington State corporation. We are the data controller responsible for your personal data.

823 N Crestline St, Spokane, WA 99202, United States

For privacy inquiries: [email protected] | +1 (509) 473-0252

What We Collect

We collect the following categories of personal data:

• Account & Contact Information: Name, email, phone number, organization name, role, crops grown, and acreage when you create an account, request a demo, or submit a contact form.
• Operational Data: Harvest records, labor data, crop metrics, and equipment readings collected through our products (FairPick, FairTrak, MobileClock, etc.).
• Usage & Analytics Data: How you interact with our software and website, including pages visited, features used, session duration, and interaction events (such as button clicks and navigation patterns).
• Device & Technical Data: IP address, device type, operating system, browser type, and connectivity data from mobile apps, field devices, and website visits.
• Marketing Attribution Data: When you visit our website, we may collect the referring URL, landing page, and UTM campaign parameters associated with your visit.
• Session Replay Data: With your consent, Microsoft Clarity records anonymized session replays including mouse movements, clicks, and scrolls to help us identify usability issues. Clarity masks sensitive input fields by default.

Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6 / LGPD Article 7):

• Contract Performance: Processing necessary to deliver our services — including harvest tracking, reporting, payroll exports, and analytics — under your subscription agreement.
• Consent: For analytics cookies, session replay, marketing cookies, and anonymized benchmarking. You may withdraw consent at any time through our Cookie Settings or by contacting us.
• Legitimate Interest: For website security (rate limiting, spam prevention), product improvement based on aggregated usage patterns, and responding to your inquiries. We balance our interests against your rights and only rely on this basis where the impact on you is minimal.
• Legal Obligation: Where we are required to retain or disclose data to comply with applicable laws, regulations, or legal proceedings.

How We Use Your Data

• Service Delivery: To provide harvest tracking, reporting, payroll exports, and analytics you've subscribed to.
• Inquiry Response: To respond to your contact form submissions, schedule demos, and provide information you've requested.
• Support: To troubleshoot issues, provide training, and deliver onboarding assistance.
• Product Improvement: To analyze aggregated usage patterns and improve our products and website.
• Security: To protect against fraud, spam, and unauthorized access, including IP-based rate limiting on form submissions.
• Anonymized Benchmarking: With your explicit consent, to use anonymized and aggregated data for industry benchmarks and peer comparisons. You always own your raw data.

Data Sharing & Third-Party Processors

We do not sell your personal data. We do not share your personal data for cross-context behavioral advertising. We share information only with the following categories of recipients:

• Supabase (Database & Backend): Hosts our application database and processes form submissions. Data is stored on cloud infrastructure in the United States.
• Google Analytics (GA4): With your consent, measures website traffic and usage patterns. Data is transferred to Google servers in the United States under Google's data processing terms.
• Microsoft Clarity: With your consent, provides session replay and heatmap analytics. Data is transferred to Microsoft servers in the United States under Microsoft's data processing agreement.
• Pipedrive CRM: Contact form submissions (name, email, phone, organization, message) are forwarded to Pipedrive for sales follow-up. Pipedrive processes data in the European Union.
• Integrations: Payroll systems, ERPs, or other tools you choose to connect — only with your explicit authorization.
• Legal Requirements: When required by law, regulation, or legal proceedings, or to protect rights and safety.

International Data Transfers

If you are located outside the United States, your personal data will be transferred to the United States for processing. For transfers from the European Economic Area, United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) or the service provider's participation in recognized data transfer frameworks. For transfers from Brazil, we rely on the legal bases permitted under LGPD Article 33.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Subscription Data: For the duration of your active subscription plus 90 days for account recovery. After that, data is deleted or anonymized unless a longer retention is required by law.
• Contact Form Submissions: For up to 24 months to support ongoing sales and business development inquiries.
• Analytics Data: Google Analytics retains data for up to 26 months. Clarity session recordings are retained for up to 13 months.
• Rate-Limiting Records: IP-based rate-limiting data is deleted automatically after 24 hours.
• Legal Hold: We may retain data longer when required for legal, tax, or audit obligations.

To request data export or deletion, contact [email protected]. We will respond within 30 days.

Your Rights

Depending on your location, you may have the following rights regarding your personal data. To exercise any right, contact [email protected]. We will respond within 30 days (GDPR/LGPD) or 45 days (CCPA).

• Access: Request a copy of the personal data we hold about you, including the categories collected, sources, purposes, and recipients.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure / Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request that we restrict processing of your data while a dispute or request is being resolved.
• Data Portability: Receive your personal data in a structured, machine-readable format (CSV, JSON) or request transfer to another controller.
• Objection: Object to processing based on legitimate interest. We will cease processing unless we have compelling grounds.
• Withdraw Consent: Withdraw consent for any processing based on consent (e.g., cookies, benchmarking) at any time, without affecting the lawfulness of prior processing.
• Complaint: Lodge a complaint with your local data protection authority. EU residents may contact their national supervisory authority. Brazilian residents may contact the ANPD.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights (CCPA).

Automated Decision-Making

Our contact form uses automated spam scoring to filter fraudulent submissions. This scoring is based on submission patterns (timing, frequency, content analysis) and may result in a submission being silently rejected. No profiling or automated decision-making with legal or similarly significant effects is performed beyond this spam filtering. If you believe your submission was incorrectly filtered, contact us directly at [email protected].

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: You may request the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected from you.
• Right to Opt-Out: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different quality of service because you exercised your CCPA rights.

To submit a verifiable consumer request, email [email protected] with the subject line "CCPA Request."

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact [email protected].

Opt-In / Opt-Out

You control how your data is used beyond core service delivery:

• Analytics & Tracking Cookies: Opt-in only. Managed through our cookie consent banner or Cookie Settings in the footer.
• Anonymized Benchmarking: Opt-in only. You choose whether your anonymized data contributes to peer group comparisons.
• Marketing Communications: Opt-out anytime via unsubscribe links or by contacting us.
• Global Privacy Control (GPC): We honor browser-level GPC signals. If your browser sends a GPC signal, we automatically opt you out of non-essential cookies.

Cookie Policy

This site uses cookies and similar technologies. Essential cookies are necessary for the site to function. Non-essential cookies are only set after you provide affirmative consent via our cookie banner.

We use Google Consent Mode v2. When you deny analytics cookies, Google may still receive limited cookieless signals (page views without identifiers) to support aggregate measurement. No cookies are set and no personal data is transmitted in this mode.

You can change your cookie preferences at any time. Open Cookie Settings

Security

We use industry-standard encryption (TLS in transit, AES-256 at rest), access controls, and security practices to protect your data. Our systems are hosted on secure cloud infrastructure with regular security audits. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by posting a prominent notice on our website or by email. Your continued use of our services after the effective date of any changes constitutes acceptance of the updated policy.

Contact

For privacy inquiries, data subject requests, or complaints: [email protected]. For general inquiries: [email protected] | +1 (509) 473-0252. Mailing address: 823 N Crestline St, Spokane, WA 99202, United States.

Terms of Service | Data Governance