Privacy Policy

1. Information We Collect

We collect information you provide directly to us:

• Account Information: Name, email address (from Google OAuth), profile picture
• Profile Information: Phone number, address, PAN number (optional, for KYC)
• Transaction Information: Lot purchases, payment proofs, payout history
• Communication: Emails, support requests, feedback

2. How We Use Your Information

• Create and manage your investment account
• Process lot purchases and verify payments
• Calculate and distribute daily payouts
• Send transactional emails (confirmations, notifications, statements)
• Comply with legal and regulatory requirements (KYC, anti-money laundering)
• Improve our Platform and customer support

3. Information Sharing

We do not sell your personal information. We may share information only in these circumstances:

• Service Providers: Supabase (database/auth), Resend (email), Google (OAuth) — under strict data processing agreements
• Legal Requirements: When required by law, regulation, or valid legal request
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice)

4. Data Security

• All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Supabase Row Level Security ensures users only access their own data
• Admin access logged in audit trail
• Payment proofs stored in private Supabase Storage with signed URLs
• Regular security reviews and dependency updates

5. Data Retention

• Account data: Retained while account is active, plus 7 years after closure for regulatory compliance
• Transaction records: Retained for 7 years per financial regulations
• Payment proofs: Retained for 3 years after verification
• Email logs: Retained for 1 year

6. Your Rights

Under applicable law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion (subject to legal retention requirements)
• Restrict or object to processing
• Data portability
• Withdraw consent for marketing communications

To exercise these rights, email farmdirect.ind@gmail.com.

7. Cookies & Tracking

We use minimal cookies:

• Essential: Session management, authentication, CSRF protection
• Analytics: None (we respect your privacy)
• Marketing: None

8. Third-Party Services

• Google OAuth: Handles authentication; we receive only name, email, profile picture
• Supabase: Database and auth infrastructure; data stored in their secure cloud
• Resend: Transactional email delivery; emails contain only necessary transaction data

9. Children's Privacy

Our Platform is not intended for individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us immediately for deletion.

10. International Transfers

Your data may be processed on servers located outside India (Supabase cloud infrastructure). We ensure adequate safeguards through standard contractual clauses and data processing agreements.

11. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified via email and Platform notice. The "Last updated" date above reflects the most recent revision.

12. Contact

For privacy concerns or to exercise your rights, contact our Data Protection Officer atfarmdirect.ind@gmail.com.