Privacy Policy

We collect information needed to operate, secure, and improve the platform. This falls into a few categories:

• Account and billing information. Name, business email, phone number, company name, billing address, payment method details, and credentials you create to sign in.
• Operational data you choose to enter. Grow data, batch and plant records, task logs, quality measurements, inventory, environmental sensor readings, photographs, and any worker or crew identifiers you upload. This is customer-controlled data used to power your SmartGrow workspace.
• Usage and telemetry. Log data, device/browser type, feature usage, error reports, and performance metrics. We use this to keep the platform reliable and secure.
• Communications. Emails, support tickets, survey responses, and other messages you send us.

We do not request or store GPS location from mobile devices. Photographs, video, and audio uploaded to SmartGrow are used for operational purposes such as plant health records and quality review; they are not processed for biometric identification.

We use the information we collect to:

• Provide, operate, and maintain the SmartGrow platform and services.
• Deliver analytics, predictions, prescribed actions, reports, and quality insights.
• Process payments, send invoices, and manage subscriptions.
• Communicate with you about your account, support requests, updates, and security.
• Maintain security, prevent fraud, and enforce our Terms of Service.
• Build and improve our universal intelligence layer using aggregated or de-identified data so models, Mileposts, and relationships learned across customers remain proprietary to SmartGrow.

We do not sell personal information. We do not deploy advertising pixels, cross-site retargeting services, or data-broker integrations.

We share information only when necessary, with appropriate safeguards in place:

• With your organization. Account owners and authorized users within your workspace can access the data you or your team enter.
• Service providers. We use carefully selected vendors for hosting, payment processing, email delivery, customer support, analytics, and security. Contracts require them to use information only for the services they provide to us and to assist with valid privacy requests.
• Legal and safety. We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, users, or the public.
• Business transfers. If SmartGrow is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to existing commitments.

Customer-controlled worker and operational information belongs to the customer. Account, billing, security, analytics, and de-identified learning data are managed under SmartGrow's responsibility.

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal information we hold about you. You may also have the right to object to certain processing or withdraw consent.

To exercise your rights, contact us at privacy@smartgrow.farm. We will verify your identity before acting on your request and respond within the timeframes required by applicable law.

Customers can also export their data from the SmartGrow platform. After account termination, we provide a default 15-day read-only export window unless a different arrangement is negotiated in your agreement.

We protect information with encryption in transit and at rest, role-based access controls, logging, monitoring, backups, and vendor restrictions. We also provide personnel security training.

We retain information for as long as needed to provide the platform, comply with legal obligations, resolve disputes, and enforce agreements. For example, contracts, billing, ACH, compliance, and chain-of-custody records are retained for seven years where required. When information is no longer needed, we delete or de-identify it in a manner designed to prevent reasonably available re-identification.

Multi-factor authentication is available and encouraged, but it is not currently mandatory for all roles. We continue to evaluate whether it should become required for administrators, banking functions, API credentials, and regulatory integrations.

SmartGrow may use automated logic to recommend tasks, predict outcomes, or suggest corrective actions. These recommendations are designed to support human judgment, not replace it. Authorized managers can review context and retain authority over compensation and personnel decisions.

For deployments in California where automated logic influences work assignment, performance assessment, or compensation-related analysis, we will provide a pre-use notice before January 1, 2027 as required by applicable law. Declining an APC (prescriptive action) recommendation does not automatically create an employment penalty.

Educational licenses are offered through a separate agreement with the school or governing body. They require a named adult teacher or program administrator and supervised classroom use. We do not create individual student accounts or request student names under the current educational model.

Classroom records and demonstration data are non-identifying. If we ever introduce identifiable student accounts or direct collection of student information, we will conduct a new COPPA and FERPA review before launch.

SmartGrow is intended for adults and business users. We do not knowingly collect personal information from children under the age of 13 (or the relevant age of majority in your jurisdiction). If you believe we have collected information from a child, please contact us so we can delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page with a new effective date and, where appropriate, notify you through the platform or by email.

If you have questions about this Privacy Policy, your privacy rights, or how we handle your information, please reach out: