Privacy Policy

This Privacy Policy is issued by Farmonaut Inc. ("Farmonaut," "we," "us," or "our"), a company incorporated in the United States of America, with offices at 200 Vesey Street, 24th Floor, New York, NY 10006, USA. It describes how we collect, use, disclose, and safeguard personal data in connection with the Farmonaut Agriculture Platform (satellite crop monitoring, Jeevn AI farm advisory, fleet management, blockchain traceability, carbon analytics) and Farmonaut Mining Pro (satellite-based mineral exploration and geological mapping analytics), together the "Services."

This Policy applies to individuals who create a Farmonaut account, visit our websites, use our mobile applications, integrate with our APIs, or are otherwise identifiable in connection with the Services — including farmers, agribusiness staff, geologists, mining company personnel, enterprise administrators, and website visitors. It does not apply to information processed by third parties on their own websites or services, even where linked from ours (see Section 15).

• "Personal Data" — Any information relating to an identified or identifiable individual, including account details, contact information, and — where it can reasonably be linked to a specific person or business — field boundaries, Areas of Interest (AOI), and usage data.
• "Farm Data" — Field boundaries, crop type, sowing dates, yield records, satellite-derived vegetation indices (NDVI/EVI/LSWI), soil and weather data, and related agronomic records associated with your account.
• "Area of Interest (AOI)" — A user-defined geographic polygon submitted to Farmonaut Mining Pro for satellite-based geological analysis, and the associated Mineral Detection Data and Prospecting Reports generated for it.
• "Service Providers" — Third-party companies we engage to help operate the Services (e.g., payment processing, cloud hosting, analytics, email delivery), acting on our instructions under contract.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.

3.1 Account & Profile Information

Name, email address, phone number, company/organization name, country, role, and password (stored as a salted hash, never in plain text) when you register for the Agriculture Platform, Farmonaut Mining Pro, or Jeevn AI.

3.2 Farm & Field Data

Field boundaries and GPS coordinates you draw or upload, crop type, sowing/harvest dates, irrigation and fertilizer records, farm machinery/fleet identifiers, and any documents or photos you attach to a field record.

3.3 Mining Pro Account & Verification Information

For Mining Pro subscribers: organization details, intended use case, geographic scope of exploration activity, and — where required for account verification or compliance screening — additional documentation such as business registration details. See Section 6 for AOI-specific data.

3.4 Billing Information

When you purchase a subscription, your payment is handled directly by our payment processors — Stripe (card payments), Razorpay (India, INR payments), the Apple App Store or Google Play billing systems (in-app purchases), or by bank wire transfer for enterprise and Mining Pro invoicing. Farmonaut does not receive or store your full card number, CVV, or bank account credentials; we retain only the billing name, billing address, transaction ID, invoice history, and the last four digits of a payment card where provided to us by the processor for reconciliation and support purposes.

3.5 Communications

When you contact support, sales, or Mining Pro inquiries by email, in-app chat, or WhatsApp (including messages exchanged with our sales team via WhatsApp Business/Plivo), we retain the content of that correspondence, associated contact details, and — for sales and advisory calls — call recordings or AI-generated transcripts, to respond to you and maintain service records.

3.6 SMS and Text Messaging

If you give us your mobile number on a Farmonaut form or lead ad that tells you we may contact you by text message, or you text or call us first, we collect your number, the date and time you submitted it, and the page or form where you did so. We use this only to send you messages about your request, such as delivery of your analysis report, follow-up questions, scheduling calls, and replies to your messages. We send these through a messaging provider that acts on our behalf.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. No mobile information is shared with third parties or affiliates for marketing or promotional purposes, and text messaging opt-in data and consent will not be shared with any third party. Information is shared only with service providers that help us deliver messages, under confidentiality obligations, and where required by law.

You can opt out at any time by replying STOP to any message. Reply HELP for help. After you opt out we will not send further messages unless you opt in again. Message frequency varies. Message and data rates may apply. Consent to receive text messages is not a condition of any purchase. You can also contact [email protected].

4.1 Usage & Log Data

When you use our Services, we automatically collect device type, operating system, browser type, IP address (used to derive an approximate city/region-level location), pages or screens viewed, API endpoints called, timestamps, crash reports, and error logs.

4.2 Mobile SDKs

Our Android and iOS applications use Google Play Services and Firebase (Analytics and Authentication) to operate core app functionality, sign you in, and understand feature usage and crash diagnostics. We do not currently integrate any third-party advertising SDK into the Farmonaut mobile app.

4.3 Website Analytics

On farmonaut.com and mining.farmonaut.com, we use website analytics tools — including Microsoft Clarity — to understand aggregate visitor behavior (e.g., pages visited, scroll depth, anonymized session interactions) so we can improve site usability. These tools may set cookies as described in Section 5.

Our websites use cookies and similar technologies (local storage, pixels) for: (a) essential site functionality (e.g., keeping you logged in); (b) analytics (understanding how visitors use our site, via tools such as Microsoft Clarity); and (c) remembering preferences such as language or unit system.

Most browsers let you refuse or delete cookies through their settings. Blocking essential cookies may prevent parts of the Services — such as staying signed in — from working correctly. We do not use cookies for third-party behavioral advertising.

• To create and administer your account and authenticate you across our platforms;
• To provide the Services — generating satellite analytics, Jeevn AI advisories, Mineral Detection Data, and Prospecting Reports for the fields and AOIs you submit;
• To process payments, issue invoices and receipts, and manage subscriptions and renewals;
• To provide customer support and respond to inquiries, including via WhatsApp and email;
• To send text (SMS) and WhatsApp messages and make calls about your request, where you have given us your mobile number on a form that discloses this or contacted us first;
• To send transactional communications (billing notices, service alerts, advisory notifications) and, where you have not opted out, marketing communications about new features or offerings;
• To monitor, secure, debug, and improve the reliability and performance of our platforms and APIs;
• To train and improve our satellite-analytics, spectral-classification, and AI advisory models using aggregated and de-identified data;
• To detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service;
• To comply with applicable law, respond to lawful requests from public authorities, and enforce our agreements.

8.1 Service Providers

We share Personal Data with Service Providers who process it on our behalf and under contractual confidentiality and data-protection obligations, including:

8.2 Satellite & Data Providers

We source imagery from third-party satellite operators (e.g., ESA Copernicus/Sentinel, Landsat/USGS-NASA, ISRO Resourcesat, ASTER, and commercial providers). These providers supply us with Earth observation imagery; we do not send them your Personal Data, farm boundaries, or AOI definitions.

8.3 Legal & Safety Disclosures

We may disclose Personal Data where required to comply with a subpoena, court order, or other legal process; to enforce our Terms of Service; to protect the rights, property, or safety of Farmonaut, our users, or the public; or in connection with an investigation of suspected fraud or security incidents.

8.4 Business Transfers

If Farmonaut is involved in a merger, acquisition, financing, or sale of assets, Personal Data may be transferred as part of that transaction, subject to standard confidentiality arrangements and, where required by law, notice to affected users.

8.5 With Your Consent

We may share Personal Data for any other purpose with your explicit consent — for example, at your request, sharing a Prospecting Report with a named investment partner.

Farmonaut does not sell Personal Data to third parties, and we do not share Personal Data with third parties for cross-context behavioral advertising. Where applicable state law (such as the California Consumer Privacy Act, as amended by the CPRA) defines "sale" or "sharing" more broadly than a monetary transaction, our position remains the same: we do not engage in either practice, and we do not knowingly sell or share the Personal Data of individuals under 16 years of age.

We do not sell or share mobile phone numbers or text-message consent with third parties for promotional or marketing purposes.

Farmonaut is based in the United States and primarily serves users in the United States, India, and Africa, with our infrastructure and Service Providers principally located in the United States and India. If you access the Services from outside the United States, your Personal Data will be transferred to, stored, and processed in the United States and other countries where our Service Providers operate, which may have data protection laws different from those of your home country.

For visitors in the European Economic Area or United Kingdom, where we transfer Personal Data outside the EEA/UK we rely on appropriate safeguards recognized under GDPR/UK GDPR — such as Standard Contractual Clauses with our Service Providers — where such a transfer mechanism is required. If you are an EEA/UK-based user with questions about a specific transfer, contact us using Section 18.

We retain Personal Data for as long as your account remains active, plus a reasonable period thereafter to comply with legal, tax, accounting, and dispute-resolution obligations (typically up to 7 years for financial records). Upon a verified account-deletion or data-deletion request (see our Request Data Deletion page), we will delete or de-identify your Personal Data within 45 days, except data we are required to retain by law or that is necessary to complete transactions already in progress, resolve disputes, or enforce our agreements.

We use administrative, technical, and physical safeguards designed to protect Personal Data, including encryption of data in transit (TLS), access controls and role-based permissions, salted password hashing, and routine review of our systems. Payment card data is handled exclusively by PCI-DSS-compliant processors and never touches our servers in unencrypted form.

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you should also take reasonable steps to protect your own account, such as using a strong password and not sharing your credentials.

13.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: know what Personal Data we have collected about you and how it is used and disclosed; request deletion of your Personal Data; correct inaccurate Personal Data; and not be discriminated against for exercising these rights. As stated in Section 9, we do not sell or share Personal Data, so there is no sale/share opt-out to exercise.

13.2 India — Digital Personal Data Protection Act, 2023

If you are located in India, you have rights as a "Data Principal" under the DPDP Act, including the right to obtain a summary of your Personal Data being processed, the right to correction and erasure of your Personal Data, the right to grievance redressal, and the right to nominate another individual to exercise your rights in the event of death or incapacity. You may raise a grievance with our Grievance Officer using the contact details in Section 18; we will respond within the timeline prescribed by applicable rules.

13.3 European Economic Area & United Kingdom (GDPR)

If you are located in the EEA or UK, you have the right to access, rectify, erase, or restrict processing of your Personal Data; the right to data portability; the right to object to processing based on legitimate interests or for direct marketing; and the right to lodge a complaint with your local data protection supervisory authority. We rely on your consent, the performance of our contract with you, and our legitimate interests in operating and securing the Services as the legal bases for processing.

13.4 All Users

Regardless of location, you may at any time: access and update your account information from within the app; request a copy of your Farm Data or AOI data in a portable format; unsubscribe from marketing emails using the link in any such email; and request deletion of your account and Personal Data via our Request Data Deletion page. We will verify your identity before acting on a request that could affect your account.

Our Services are intended for users who are at least 18 years of age (or the age of majority in their jurisdiction), consistent with the eligibility requirement in our Terms of Service. We do not knowingly collect Personal Data from children under 13 in a manner inconsistent with the U.S. Children's Online Privacy Protection Act (COPPA). If we learn that we have collected Personal Data from a child under 13 without appropriate consent, we will delete it promptly. Parents or guardians who believe their child has provided us with Personal Data should contact [email protected].

Our Services may contain links to third-party websites, satellite data providers, or payment processors that are not operated by us. This Policy does not apply to those third-party sites. We encourage you to review the privacy policy of every site you visit.

Some browsers offer a "Do Not Track" (DNT) signal. There is no accepted industry standard for how to respond to DNT signals, and our Services do not currently respond to them differently than described in this Policy.

We may update this Privacy Policy from time to time. For material changes, we will provide at least 14 days' advance notice via email or in-app notification before the change takes effect, and update the "Last Updated" date above. Continued use of the Services after a change takes effect constitutes your acceptance of the revised Policy.