Welcome to Farmroute. Farmroute LLC ("Farmroute," "we," "our," or "us") values your privacy and is committed to protecting the information entrusted to us. This Privacy Policy explains how we collect, use, disclose, process, store, and protect information when you use the Farmroute website, mobile applications, APIs, software, and related services (collectively, the "Services"). Farmroute is business software designed for agricultural organizations. Because different customers use different features, not every user will provide every category of information described in this Privacy Policy. This Privacy Policy applies worldwide unless superseded by local law.
1. Scope
This Privacy Policy applies to: The Farmroute website; Farmroute mobile applications; Farmroute Computer applications; Farmroute APIs; Farmroute cloud services; Customer support; Electronic communications; Payroll calculations; Workforce management; Scheduling; Messaging; Documents and templates; Electronic signatures; Offline synchronization; Optional analytics and diagnostics. It does not apply to third-party websites, applications, or services that Farmroute integrates with. Those services maintain their own privacy policies and terms. Farmroute generally acts as a service provider/data processor for information that farms and other organizations upload about their workers. The organization using Farmroute generally determines what information is collected about its workforce, how long it is retained, and how it is used. Farmroute processes that information on the organization's behalf to provide the Services.
2. Information We Collect
Farmroute collects information directly from you, from organizations you belong to, automatically through your use of the Services, and from certain third-party service providers necessary to operate the platform. Depending on the features you use, Farmroute may collect the following categories of information.
2.1 Account and Authentication Information
We may collect: Username Email address Account type Country Farmroute profile identifier Authentication identifiers Session information Access tokens Refresh tokens Account creation date Login timestamps Password reset requests Account recovery requests Email verification status Authentication history Passwords are not stored in Farmroute's application database. Authentication is provided by Supabase Auth, which securely stores password hashes and manages authentication tokens.
2.2 Personal Profile Information
Depending on your account and organization, Farmroute may collect: First name Middle name Last name Preferred name Name suffix Display name Date of birth Gender Profile photograph Email addresses Telephone numbers Emergency contact information Street address City State or Province Postal code Country Time zone Preferred language Worker number QR code Barcode Organization identifiers Farm identifiers Farm name Farm acreage Primary crop information where supplied Organizations may synchronize certain profile information into worker records when necessary for legitimate business operations.
2.3 Employment Information
Organizations using Farmroute may collect and manage workforce information including: Worker identifiers Employment status Employment type Role Classification Role permissions Crew memberships Work locations Administrative permissions Organization memberships Hire dates Start dates Rehire dates Termination dates Leave information Return dates Worker tags Worker assignments Invitation history Invitation codes Membership history Suspension history Revocation history Onboarding status Organizations may create worker records before those workers create a Farmroute Account.
2.4 Human Resources Information
Organizations may store employment-related records, including: Performance notes Attendance notes Safety records Compliance notes Incident reports Recognition records Disciplinary records Accommodation notes Termination notes Tax identifiers Other employment documentation Many of these fields permit free-form text entry. Organizations should avoid storing unnecessary sensitive personal information unless required for legitimate employment, legal, regulatory, or operational purposes.
2.5 Scheduling and Timekeeping
When scheduling or workforce management features are used, Farmroute may process: Shift names Shift identifiers Shift dates Scheduled hours Break periods Assigned workers Assigned crews Assigned locations Clock-in times Clock-out times Multiple work sessions Attendance events Worked hours UTC offsets Shift history Administrative actions Timekeeping history
2.6 Payroll Information
Farmroute may process information necessary to estimate gross compensation, including: Hourly rates Salary rates Daily rates Piece rates Weight rates Currency Overtime rules Double-time rules Premiums Bonuses Minimum guarantees Deductions Pay modifiers Piece quantities Weights Historical pay rates Payroll calculations Gross compensation estimates Payroll exports Farmroute currently calculates gross compensation estimates and is not a payroll tax withholding or net-pay processing service.
2.7 Subscription Information
For organization billing, Farmroute may collect: Subscription plans Storage plans Storage usage Subscription status Cancellation status Scheduled plan changes Billable worker information Subscription estimates Stripe customer identifier Stripe subscription identifier Product identifiers Pricing identifiers Farmroute does not store complete payment card numbers. Payment processing is handled by Stripe.
2.8 Tasks and Workflow Data
Farmroute may collect: Task names Instructions Descriptions Workflow responses Text responses Numeric responses Currency values Selected workers Quantities Weights Decision branches Completion history Generated workflow artifacts Payroll workflow results
2.9 Location Information
When enabled by the customer and permitted by the user, Farmroute may process location information including: Farm addresses Geographic coordinates Field boundaries Map markers Map notes Location targets GPS coordinates Distance calculations Geofence compliance Capture timestamps Location information is collected only when required by the relevant feature or workflow and only after appropriate permission has been granted or coordinates are manually entered. Address searches may be processed through OpenStreetMap Nominatim. Satellite imagery and map tiles may be provided through Esri ArcGIS.
2.10 Camera, Media, and File Uploads
When required by the Services, Farmroute may process: QR codes Barcodes Photographs Videos Uploaded files File names File hashes File sizes MIME types Upload timestamps Scan history Farmroute requests camera permission to support scanning, document capture, worker identification, and other workflow features. Farmroute does not request microphone or contact-list permissions at this time.
2.11 Messaging
Farmroute may process messaging information including: Direct messages Group messages Announcements Sender information Recipient information Message timestamps Replies Reactions Message edits Message deletion status Group memberships Administrative roles Invitation history Read state Mute state Conversation preferences
2.12 Documents and Storage
Organizations may upload and manage: Documents PDFs Images Videos Forms Employee records Contracts Certifications Licenses Other files Farmroute also stores related metadata including ownership, storage location, timestamps, file hashes, logical folders, storage quotas, and document classifications.
2.13 Templates and Electronic Signatures
Farmroute may process: PDF templates Form fields Employee responses Draft responses Completed documents Typed signatures Drawn signatures Signature timestamps Signature consent Signature hashes Device information associated with signing User agent information Farmroute does not currently extract or store biometric templates from electronic signatures.
2.14 Device, Synchronization, and Offline Data
Farmroute may process technical information including: Device identifier Platform App version Synchronization checkpoints Synchronization operations Offline records Conflict information Retry information Connection status Local SQLite data Notification preferences Active organization Cached drafts Synchronization payloads To support offline functionality, portions of your information may be stored locally on your device.
2.15 Push Notifications
Farmroute may process: Push notification tokens Device platform Notification settings Active organization Notification identifiers Conversation identifiers Task identifiers Schedule identifiers Notification previews Registration timestamps Push notifications are delivered through Firebase Cloud Messaging and Apple Push Notification service.
2.16 Analytics and Diagnostics
If enabled, Farmroute may collect product analytics and diagnostic information including: Platform App version Screen views Feature usage Authentication events Worker management events Scheduling events Messaging events File operations Export events Performance metrics Sanitized error reports HTTP metadata Request duration Backend environment Operational metrics Farmroute is designed to exclude raw messages, document contents, signature images, payroll values, uploaded files, and similar customer content from product analytics. Session replay and session recording are not used. Users may disable client-side product analytics and crash reporting through the application settings. Disabling client-side diagnostics does not necessarily disable limited server-side operational telemetry required to maintain and secure the Services.
2.17 Email Communications
Farmroute and its email providers may process information necessary to deliver: Account verification emails Password reset emails Organization invitations Worker invitations Subscription notices Billing communications Security notifications Support communications This may include recipient email addresses, usernames, organization names, invitation codes, deep links, message content, and delivery status.
2.18 Sources of Information
We may receive information: directly from you; from organizations you belong to; from authorized administrators; automatically from your device; from workflow sensors such as the camera or location services when enabled; from generated operational records; from authentication, billing, mapping, notification, analytics, and email providers necessary to provide the Services.
3. How We Use Your Information
Farmroute uses the information described in this Privacy Policy only as necessary to provide, maintain, secure, improve, and support the Services, fulfill our contractual obligations, comply with Applicable Law, and operate the Farmroute platform. The information used depends on the features enabled by your Organization and the manner in which you use the Services.
3.1 To Provide the Services
We use information to provide the functionality requested by our customers and Users, including: creating and managing Accounts; authenticating Users; managing Organizations and Memberships; maintaining workforce records; assigning permissions and roles; displaying profiles and worker information; synchronizing information across authorized devices; maintaining offline functionality; processing scheduling and workforce operations; managing tasks and workflows; supporting messaging and collaboration; storing and retrieving uploaded documents; generating completed forms and documents; managing electronic signatures; calculating gross compensation estimates; generating payroll exports; providing subscription functionality; and operating other features available through the Services.
3.2 Authentication and Account Security
We use authentication information to: verify your identity; authenticate login requests; maintain active sessions; detect suspicious login activity; secure Accounts; recover Accounts; reset passwords; manage authentication tokens; prevent unauthorized access; and enforce security controls. Passwords are processed through Supabase Authentication and are not stored as plaintext within Farmroute's application database.
3.3 Workforce Management
Organizations use Farmroute to manage workforce information. We process workforce information in order to: create worker records; assign workers to Organizations; manage crews; assign work locations; maintain employment records; support onboarding; record employment history; manage leave information; maintain permissions; administer Organization Memberships; support workforce reporting; and provide workforce management functionality requested by Organizations. Farmroute processes this information on behalf of the Organization using the Services.
3.4 Scheduling and Timekeeping
Scheduling information is used to: assign shifts; manage schedules; record attendance; calculate worked time; determine shift status; enforce customer-configured attendance rules; support workforce reporting; generate payroll calculations; and maintain scheduling history.
3.5 Payroll Calculations
Payroll-related information is processed to: calculate gross compensation estimates; apply customer-configured pay rules; calculate overtime and premiums; process piece-rate and weight-based compensation; generate payroll exports; support payroll review; and maintain payroll history. Farmroute currently provides payroll calculation and export functionality and is not a payroll processor, tax filing service, or tax withholding provider. Organizations remain responsible for reviewing payroll calculations before use.
3.6 Documents and Storage
We use uploaded files and documents to: securely store customer files; organize records; generate completed documents; manage templates; maintain document history; support Organization workflows; synchronize files across authorized devices; calculate storage usage; enforce storage quotas; and restore customer information where appropriate.
3.7 Templates and Electronic Signatures
Information collected through templates and electronic signature workflows is used to: populate documents; assign templates; generate completed PDFs; verify signing events; maintain signature audit trails; demonstrate signing history; associate signed documents with the appropriate User or Worker; support document retrieval; and maintain document integrity through cryptographic hashes. Farmroute does not currently use signature images to create or identify biometric templates.
3.8 Messaging and Collaboration
Messaging information is processed to: deliver messages; synchronize conversations; manage group memberships; display message history; provide read and unread state; display reactions; support replies; maintain notification state; administer communication settings; and provide collaboration features requested by Organizations.
3.9 Location Information
When enabled by the Organization and permitted by the User, location information may be used to: verify proximity to work locations; support workflow requirements; record task completion locations; determine geofence compliance; display maps; identify fields and work areas; calculate distances; display location markers; and support location-dependent features. Location information is processed only when required by the applicable feature or workflow or when manually entered by a User.
3.10 Camera and Uploaded Media
Camera access and uploaded media may be used to: scan QR codes; scan barcodes; capture task documentation; verify worker identification; upload photographs; upload videos; complete workflows; generate documentation; and maintain Organization records. Farmroute requests camera access only when required by the applicable feature.
3.11 Notifications
Notification information is used to: deliver push notifications; notify Users of messages; notify Users of task assignments; notify Users of Organization activity; deliver security notifications; deliver account-related notifications; deliver workflow updates; notify Users of document assignments; notify Users of scheduling events; and maintain notification preferences.
3.12 Customer Support
We may use your information to: respond to support requests; troubleshoot technical issues; investigate reported bugs; diagnose synchronization problems; restore customer data where possible; answer questions; investigate suspected abuse; improve documentation; and provide customer assistance. Support personnel access customer information only where reasonably necessary to provide requested support or maintain the Services.
3.13 Product Improvement
We may use operational and technical information to: improve performance; identify usability issues; prioritize new features; improve synchronization; optimize infrastructure; reduce crashes; improve reliability; monitor feature adoption; evaluate software quality; and improve overall user experience. Where practical, we rely on aggregated, de-identified, or sanitized technical information rather than customer content.
3.14 Analytics and Diagnostics
If enabled, Farmroute uses analytics and diagnostic information to: understand feature usage; identify software defects; monitor application performance; detect service degradation; improve application stability; investigate technical incidents; monitor synchronization health; identify infrastructure bottlenecks; evaluate feature adoption; maintain service quality; and improve future releases. Farmroute is designed to exclude raw document contents, message contents, uploaded files, signature images, payroll values, filenames, backend response bodies, and similar customer content from product analytics. Users may disable client-side product analytics and crash reporting through the application settings. Certain limited server-side operational telemetry may continue to be processed where necessary to maintain the security, availability, and reliability of the Services.
3.15 Artificial Intelligence Features
Farmroute may offer optional AI-powered features to assist Users with organizing, summarizing, analyzing, or generating information. Where technically supported, AI processing occurs locally on the User's device. Farmroute does not transmit locally processed AI prompts or responses to Farmroute servers solely because an AI feature is used. If future AI features require processing by a third-party AI provider, those features will be clearly identified before use and this Privacy Policy will be updated accordingly. Users remain responsible for reviewing all AI-generated output before relying upon it.
3.16 Billing and Subscription Management
We use subscription information to: administer subscriptions; calculate subscription charges; determine billable usage; manage storage plans; process payments; issue invoices; calculate applicable taxes; manage cancellations; process refunds where applicable; prevent billing fraud; and maintain financial records required by Applicable Law. Payment card information is processed by our payment providers and is not stored by Farmroute.
3.17 Compliance with Law
We may process information where reasonably necessary to: comply with legal obligations; respond to lawful governmental requests; comply with court orders; enforce these Privacy Policy and our Terms of Service; protect our legal rights; investigate fraud; investigate security incidents; protect the safety of Users or third parties; protect Farmroute systems; and satisfy regulatory or accounting requirements.
3.18 Business Operations
We may process information as reasonably necessary to: maintain backups; secure our infrastructure; prevent abuse; administer the Services; detect unauthorized activity; manage service reliability; monitor system capacity; recover from disasters; maintain audit records; support mergers, acquisitions, financing, or other corporate transactions where permitted by Applicable Law; and otherwise operate Farmroute in a secure, reliable, and lawful manner.
3.19 We Do Not Sell Your Personal Information
Farmroute does not sell personal information. We do not rent personal information. We do not provide customer information to advertising networks for targeted advertising. We do not use customer documents, messages, payroll information, employee records, uploaded files, or other customer content to train artificial intelligence models. We use customer information solely to provide, maintain, secure, support, and improve the Services as described in this Privacy Policy.
4. How We Share Your Information
Farmroute shares information only where reasonably necessary to provide the Services, comply with Applicable Law, fulfill our contractual obligations, protect the security of the Services, or at your direction. We do not sell or rent your personal information. The categories of recipients described below reflect Farmroute's current implementation. Additional service providers may be added in the future as the Services evolve. When required by Applicable Law, this Privacy Policy will be updated to reflect material changes.
4.1 Organizations You Belong To
If you are a member of an Organization, Farmroute shares information with that Organization and its authorized administrators to provide workforce management and collaboration features. Depending on your role and the permissions configured by the Organization, authorized Organization users may have access to information including: your profile information; employment information; worker records; schedules; timekeeping information; task assignments and responses; payroll calculations; uploaded documents; electronic forms; messages sent within the Organization; signatures associated with Organization documents; and other information necessary for the Organization to operate its workforce. Organization administrators are responsible for determining how information within their Organization is accessed, retained, and managed. If you leave an Organization, information associated with your employment or activities within that Organization may continue to be retained by the Organization as permitted by Applicable Law and its own policies.
4.2 Other Users
Information may be visible to other Users where necessary to provide collaboration features. Depending on the feature being used, this may include: your display name; profile photograph; worker name; assigned role; Organization role; task assignments; schedules; messages you send; reactions; replies; shared documents; electronic forms; group memberships; and other information intentionally shared through the Services. The visibility of information depends on your Organization's configuration, your permissions, and the features being used.
4.3 Service Providers
Farmroute uses carefully selected third-party service providers to operate the Services. These providers receive only the information reasonably necessary to perform the services they provide to Farmroute. Supabase Farmroute uses Supabase to provide authentication and hosted PostgreSQL database services. Depending on the feature being used, Supabase may process: authentication identifiers; account information; password hashes; session information; database records; synchronization data; uploaded Content; and other customer information stored through the Services. Supabase processes information according to its own privacy and security practices.
Stripe Farmroute uses Stripe to process subscription payments. Stripe may receive: organization name; customer identifiers; subscription identifiers; billing information; transaction amounts; payment status; and other payment-related information necessary to process transactions. Farmroute does not receive or store complete payment card numbers. Payment information is processed according to Stripe's own privacy policy.
Resend Farmroute uses Resend to deliver certain transactional email communications. Resend may receive: recipient email address; username; organization information; worker invitation information; invitation codes; password reset information; email subject; email content; and delivery status information. Resend is used solely to deliver email communications requested or required by the Services.
Firebase Cloud Messaging Farmroute uses Firebase Cloud Messaging ("FCM") to deliver push notifications. Firebase may receive: device push token; notification payload; platform information; notification identifiers; and technical delivery metadata.
Apple Push Notification Service For iOS devices, Farmroute uses Apple Push Notification service ("APNs"). Apple may receive: device token; notification payload; delivery information; and related technical metadata necessary to deliver notifications.
PostHog If product analytics are enabled, Farmroute uses PostHog to understand product usage and improve the Services. PostHog may receive: analytics identifiers; organization identifiers; platform; application version; feature usage events; screen names; navigation events; workflow events; performance metrics; sanitized diagnostics; and other technical information described in this Privacy Policy. Farmroute is designed to exclude raw customer documents, uploaded files, message contents, payroll values, signature images, backend response bodies, and similar customer content from product analytics. Session replay and session recording are disabled.
OpenStreetMap Nominatim When Users perform address searches, search requests are sent to OpenStreetMap's Nominatim service. Those requests may include: address search terms; approximate network information; IP address; and other information normally transmitted during web requests.
Esri ArcGIS Farmroute uses Esri ArcGIS to display certain satellite imagery and mapping services. Esri may receive: requested map tiles; map coordinates; zoom level; approximate network information; and IP address.
4.4 User-Directed Sharing
Certain features allow Users to intentionally share information with third parties. For example, Users may export or share documents through: email applications; cloud storage providers; nearby sharing services; file management applications; printing services; or other applications selected by the User. Once information is shared outside Farmroute at the User's direction, its handling is governed by the receiving service's privacy practices.
4.5 Legal Requirements
Farmroute may disclose information where we reasonably believe disclosure is necessary to: comply with Applicable Law; comply with legal process; respond to subpoenas; respond to court orders; comply with governmental requests; comply with regulatory obligations; protect the rights or property of Farmroute; investigate fraud; investigate security incidents; enforce our Terms of Service; protect Users or third parties from harm; or otherwise comply with legal obligations. Where permitted by Applicable Law, we may notify affected customers before responding to legal requests.
4.6 Business Transfers
If Farmroute participates in a merger, acquisition, financing, investment, corporate restructuring, bankruptcy proceeding, sale of assets, or similar business transaction, customer information may be transferred as part of that transaction. Any successor entity will remain subject to obligations substantially consistent with this Privacy Policy unless and until a revised Privacy Policy is provided.
4.7 Professional Advisors
Farmroute may disclose information to professional advisors where reasonably necessary, including: attorneys; accountants; auditors; insurance providers; and other professional advisors, provided such parties are subject to appropriate legal or contractual obligations regarding confidentiality.
4.8 Corporate Affiliates
If Farmroute establishes subsidiaries, parent companies, or affiliated entities in the future, information may be shared among those entities where reasonably necessary to operate the Services, provided appropriate safeguards are maintained.
4.9 Aggregated and De-Identified Information
Farmroute may create aggregated, anonymized, or de-identified information that cannot reasonably identify an individual. We may use such information to: analyze platform usage; improve the Services; develop new features; understand product performance; publish statistical information; and conduct internal business analysis. Farmroute will not intentionally identify an individual from de-identified information unless required by Applicable Law.
4.10 Information We Do Not Share for Advertising
Farmroute does not: sell personal information; rent personal information; disclose customer information to advertising networks for targeted advertising; share uploaded customer documents for marketing purposes; share payroll information for advertising purposes; share employee records with data brokers; provide customer content to artificial intelligence providers to train general-purpose AI models; or monetize customer information through advertising platforms. Customer information is shared only as described in this Privacy Policy or as directed by the customer or User.
4.11 International Sharing
Because Farmroute is available worldwide, authorized Users, Organizations, and service providers may access or process information from countries other than the one in which it was originally collected. Farmroute takes reasonable measures to protect information during such transfers and requires service providers to protect customer information in accordance with applicable contractual and legal requirements. Additional information regarding international data transfers is provided in the "International Data Transfers" section of this Privacy Policy.
5. Cookies, Analytics, Diagnostics, and Similar Technologies
Farmroute uses cookies, local storage, device identifiers, and similar technologies to operate the Services, authenticate Users, improve reliability, and understand how the Services are used. Because Farmroute consists of both a website and mobile applications, some technologies described in this section apply only to the website, while others apply only to the mobile applications.
5.1 Cookies
Our website may use cookies and similar technologies to: maintain secure user sessions; remember authentication status; preserve user preferences; improve website functionality; protect against fraudulent activity; measure website performance; and support other essential website functionality. Most web browsers allow you to control or disable cookies through your browser settings. Disabling certain cookies may affect the availability or functionality of portions of the Services.
5.2 Local Device Storage
The Farmroute mobile applications may store information locally on your device to support offline functionality and improve performance. Depending on the features you use, locally stored information may include: profile information; workforce information; schedules; tasks; payroll-related information; document metadata; draft forms; synchronization state; notification preferences; active Organization selection; cached application data; and other information necessary to support offline operation. Some locally stored information may remain on the device until it is synchronized, replaced, or removed.
5.3 Authentication Technologies
Farmroute uses authentication technologies to securely identify Users and maintain authenticated sessions. These technologies may include: authentication tokens; refresh tokens; session identifiers; secure cookies where applicable; cryptographic authentication mechanisms; and device session information. Authentication services are currently provided through Supabase Authentication.
5.4 Product Analytics
If enabled, Farmroute uses PostHog to understand how the Services are used and to improve functionality, reliability, and user experience. Product analytics may include information such as: application version; operating system; platform; screen or route names; feature usage; navigation events; organization role; account type; workflow completion events; scheduling activity; messaging activity; export activity; task events; template events; notification events; application performance metrics; and other operational events generated while using the Services. Analytics are intended to help Farmroute understand how features are used, identify opportunities for improvement, and prioritize future development.
5.5 Product Analytics Controls
Farmroute provides Users with the ability to disable client-side product analytics through the application settings. When product analytics are disabled: future client-generated analytics events are not transmitted; existing analytics already processed before disabling may remain within our analytics systems in accordance with applicable retention policies; and certain server-side operational telemetry necessary for security, reliability, fraud prevention, or infrastructure monitoring may continue to be processed. Disabling analytics does not disable functionality necessary to operate the Services.
5.6 Diagnostics and Crash Reporting
Farmroute may collect diagnostic information to identify software defects, improve stability, investigate technical issues, and maintain the reliability of the Services. Diagnostic information may include: sanitized error codes; stack traces; application version; operating system; platform; module or screen name; request duration; HTTP method; sanitized request routes; status code category; request identifiers; backend environment; synchronization state; infrastructure metrics; and other technical information reasonably necessary to diagnose software issues. Diagnostic information is intended solely for technical support, troubleshooting, reliability improvements, and security monitoring.
5.7 Information Excluded from Analytics
Farmroute is designed to exclude certain categories of customer content from product analytics where practical. Examples include: message contents; uploaded document contents; completed forms; electronic signature images; payroll values; uploaded filenames; backend response bodies; raw exception text containing customer information; and similar customer-generated content. While sanitized operational metadata may be processed for diagnostics, Farmroute's analytics implementation is designed to avoid collecting customer business content whenever reasonably possible.
5.8 Session Recording
Farmroute does not currently use: session replay; session recording; screen recording analytics; or user interaction playback technologies. If these technologies are introduced in the future, this Privacy Policy will be updated before they are deployed where required by Applicable Law.
5.9 Device Identifiers
Farmroute may generate or store technical identifiers necessary to operate the Services. These identifiers may include: installation identifiers; device identifiers generated by the application; synchronization identifiers; push notification tokens; session identifiers; and other technical identifiers necessary for authentication, synchronization, notifications, security, or offline functionality. These identifiers are used to provide and secure the Services and are not used for advertising or cross-service behavioral tracking.
5.10 Log Information
Farmroute automatically generates operational logs as part of normal operation. These logs may include: authentication events; synchronization events; notification delivery events; API requests; infrastructure events; security events; service availability events; database events; WebSocket events; queue processing events; and other operational records required to maintain the Services. Operational logs are used to maintain security, investigate incidents, troubleshoot problems, and improve reliability.
5.11 Do Not Track
Some web browsers provide a "Do Not Track" ("DNT") preference. Because there is no universally accepted standard governing DNT signals, Farmroute does not currently respond differently based solely on browser-provided DNT signals. Farmroute does not use customer information for cross-site behavioral advertising or targeted advertising.
5.12 No Advertising Technologies
Farmroute does not currently use: advertising SDKs; advertising identifiers (such as IDFA or GAID) for advertising purposes; third-party advertising networks; behavioral advertising technologies; cross-site advertising trackers; advertising pixels designed for targeted advertising; or customer information for advertising profiling. If advertising technologies are introduced in the future, this Privacy Policy will be updated before their use where required by Applicable Law.
5.13 Future Technologies
As Farmroute develops new features, we may introduce additional technologies to improve the Services. If those technologies materially change how personal information is collected, processed, or shared, we will update this Privacy Policy and, where required by Applicable Law, provide additional notice before such changes become effective.
6. Data Retention
Farmroute retains personal information only for as long as reasonably necessary to provide the Services, fulfill contractual obligations, comply with Applicable Law, resolve disputes, enforce our agreements, maintain system integrity, and protect the security and reliability of the Services. Because Farmroute is a business software platform, different categories of information may be retained for different periods depending on their purpose, customer configuration, legal obligations, and technical requirements.
6.1 Customer-Controlled Information
Organizations using Farmroute generally determine how long workforce, operational, payroll, scheduling, messaging, document, and other business records are retained within their Organization. Farmroute stores and processes this information on behalf of the Organization until: the Organization deletes the information; the Organization deletes its account; the information is otherwise removed through the Services; or retention is required for legal, regulatory, security, fraud prevention, dispute resolution, backup integrity, or other legitimate operational purposes.
6.2 Account Information
We retain account information for as long as your Account remains active. If your Account is deleted, certain information may continue to be retained where reasonably necessary to: comply with Applicable Law; resolve disputes; detect or prevent fraud; enforce our agreements; maintain audit records; preserve backup integrity; or protect the Services.
6.3 Synchronization Information
Synchronization metadata is retained only as long as reasonably necessary to support synchronization, conflict resolution, reliability, and auditing. Based on Farmroute's current implementation: synchronization change history is generally retained for approximately ninety (90) days before routine pruning; and temporary synchronization bootstrap sessions generally expire after approximately twenty-four (24) hours. These periods may change as the Services evolve.
6.4 Billing Information
Subscription records, invoices, payment history, subscription identifiers, billing events, and related financial records may be retained for the period required by Applicable Law, accounting standards, tax obligations, fraud prevention, dispute resolution, or other legitimate business purposes. Payment card information is processed by Stripe and is subject to Stripe's own retention practices.
6.5 Documents and Files
Documents, uploaded files, completed forms, electronic signatures, photographs, videos, and other customer content remain available until deleted by the customer or otherwise removed in accordance with customer actions or Organization policies. Where technically necessary, backup copies may continue to exist for a limited period following deletion before being permanently overwritten.
6.6 Messages and Collaboration Data
Messages, conversations, reactions, group memberships, and related collaboration records are generally retained until deleted by the customer or otherwise removed through the Services. Certain historical records, such as archived groups or administrative events, may continue to exist where required to preserve conversation history, maintain audit records, or support system integrity.
6.7 Diagnostics and Operational Logs
Operational logs, infrastructure metrics, authentication events, security events, synchronization records, and diagnostic information are retained only for as long as reasonably necessary to: operate the Services; investigate technical issues; detect abuse; monitor system health; maintain security; comply with Applicable Law; and improve platform reliability. Retention periods for operational logs may vary depending on the service generating the information.
6.8 Third-Party Service Providers
Certain information is processed by third-party providers such as Supabase, Stripe, Resend, Firebase Cloud Messaging, Apple Push Notification service, and PostHog. Retention of information processed by those providers is governed by their own policies and technical configurations. Farmroute cannot guarantee identical retention periods across third-party providers.
6.9 Deletion Requests
Where permitted by Applicable Law, Users and Organizations may request deletion of applicable personal information. Deletion requests may be limited where retention is necessary to: comply with legal obligations; detect or prevent fraud; resolve disputes; complete ongoing transactions; maintain security; preserve backups; enforce our agreements; or protect the rights, property, or safety of Farmroute, our customers, or third parties.
6.10 No Universal Retention Period
Because Farmroute supports workforce management, employment records, payroll calculations, scheduling, messaging, document management, and other customer-controlled workflows, no single retention period applies to every category of information. Unless a specific retention period is expressly stated in this Privacy Policy or required by Applicable Law, information is retained only for as long as reasonably necessary for the purposes described herein.
7. Security of Your Information
Farmroute takes the security of customer information seriously and implements administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction. No system connected to the Internet can be guaranteed to be completely secure. Accordingly, while Farmroute strives to protect your information using reasonable and appropriate safeguards, we cannot guarantee absolute security.
7.1 Security Measures
Depending on the feature and infrastructure involved, Farmroute employs safeguards including: encrypted communications using HTTPS/TLS; authenticated API requests; secure authentication through Supabase Authentication; password hashing managed by Supabase; role-based authorization; Organization-based access controls; permission-based visibility restrictions; database authentication; synchronization integrity checks; server-side validation; infrastructure monitoring; audit logging; backup procedures; service availability monitoring; and other security controls appropriate to the Services. Security controls are periodically reviewed and may change as Farmroute evolves.
7.2 Access Controls
Access to customer information is restricted based on legitimate business needs and technical authorization. Only appropriately authorized personnel, systems, or service providers may access customer information where necessary to: provide the Services; respond to customer support requests; investigate technical issues; maintain security; comply with Applicable Law; or fulfill other legitimate operational responsibilities.
7.3 Authentication Security
Authentication is provided through Supabase Authentication. Farmroute's application database does not store plaintext passwords. Authentication credentials are managed through secure authentication mechanisms, including password hashing, authentication tokens, session management, and related security controls. Users are responsible for maintaining the confidentiality of their passwords and authentication credentials.
7.4 Customer Responsibilities
Customers also play an important role in protecting their information. Users should: choose strong passwords; protect authentication credentials; enable available security features where appropriate; keep devices secure; promptly install application updates; review Organization permissions; remove unnecessary access; report suspected security incidents promptly; and avoid uploading unnecessary sensitive personal information. Organizations are responsible for configuring user permissions appropriately and ensuring their use of the Services complies with Applicable Law.
7.5 Incident Response
If Farmroute becomes aware of a security incident affecting personal information, we will investigate the incident, take reasonable steps to contain and remediate it, and provide notifications where required by Applicable Law. The timing and content of any notification may depend upon: the nature of the incident; applicable legal obligations; law enforcement requirements; technical considerations; and the steps necessary to secure the Services.
7.6 Third-Party Providers
Farmroute relies on trusted third-party service providers to deliver portions of the Services. While Farmroute carefully selects these providers, each provider maintains its own security practices and infrastructure. Additional information regarding those providers is available in their respective privacy and security documentation.
7.7 No Absolute Security Guarantee
Although Farmroute implements reasonable safeguards designed to protect personal information, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure. Users should exercise appropriate care when transmitting sensitive information and should immediately notify Farmroute if they believe their Account or information has been compromised.
7.8 Responsible Security Reporting
If you believe you have discovered a security vulnerability affecting the Services, please report it to security@farmroute.ag or legal@farmroute.ag rather than publicly disclosing the issue. Responsible disclosure allows Farmroute to investigate, validate, and remediate security issues while helping protect our customers and the integrity of the Services.
8. International Data Transfers
Farmroute provides its Services to customers around the world. As a result, your personal information may be collected, stored, processed, transferred, or accessed in countries other than the country in which it was originally collected. By using the Services, you acknowledge that your information may be transferred to and processed in jurisdictions that may have different data protection laws than those in your country of residence.
8.1 Processing in the United States
Farmroute LLC is organized under the laws of the State of South Dakota, United States. Our infrastructure and certain third-party service providers may process or store information within the United States or other jurisdictions in which those providers operate. Regardless of where processing occurs, Farmroute takes reasonable measures to protect personal information in accordance with this Privacy Policy and Applicable Law.
8.2 Global Access
Because Farmroute is designed for organizations that may operate across multiple locations or countries, authorized Users may access Organization information from different jurisdictions. Organizations are responsible for ensuring that their use of Farmroute complies with applicable employment, labor, privacy, tax, immigration, and other laws governing their operations.
8.3 International Service Providers
Farmroute uses third-party providers to deliver portions of the Services, including authentication, cloud infrastructure, email delivery, analytics, billing, mapping, and push notifications. These providers may process information in multiple countries depending on their infrastructure and operational requirements. Farmroute selects service providers that maintain appropriate technical and organizational safeguards for the services they provide.
8.4 Cross-Border Transfers
Where personal information is transferred across national borders, Farmroute will take commercially reasonable measures to help ensure such transfers are made in accordance with Applicable Law. Depending on the circumstances, these safeguards may include: contractual protections; organizational safeguards; technical safeguards; encryption during transmission; access controls; authentication requirements; or other legally recognized transfer mechanisms where applicable.
8.5 Customer Responsibilities
Organizations using Farmroute are responsible for determining whether their collection, upload, and processing of workforce information complies with Applicable Law in each jurisdiction in which they operate. Farmroute provides the software platform but does not determine the legal basis upon which an Organization collects or processes employee information.
8.6 Government Requests
Farmroute may disclose information to governmental authorities, regulators, law enforcement agencies, or courts where required by Applicable Law or valid legal process. Where legally permitted and reasonably practicable, Farmroute may notify the affected customer before producing information in response to such requests.
8.7 Future Compliance Measures
As Farmroute expands internationally, we may adopt additional contractual, technical, or organizational safeguards to support international transfers and evolving privacy requirements. Any material changes affecting international processing will be reflected in this Privacy Policy.
9. Your Privacy Rights
Depending on your location and Applicable Law, you may have certain rights regarding your personal information. Because Farmroute is a business platform, some requests must be directed to the Organization that controls your information, while other requests may be submitted directly to Farmroute.
9.1 Access
You may have the right to request access to personal information that Farmroute maintains about you. Where applicable, this may include requesting a copy of certain personal information associated with your Account.
9.2 Correction
You may request correction of inaccurate or incomplete personal information. Certain information may also be updated directly through your Farmroute Account or by your Organization's administrators.
9.3 Deletion
You may request deletion of personal information where permitted by Applicable Law. Deletion requests may be limited where Farmroute is required or permitted to retain information for purposes such as: legal compliance; fraud prevention; security; dispute resolution; backup integrity; enforcement of our agreements; or other legitimate operational requirements. Where Farmroute acts as a service provider or processor on behalf of an Organization, deletion requests relating to Organization-controlled information should generally be directed to the Organization responsible for that information.
9.4 Data Portability
Where provided by Applicable Law, you may request a copy of certain personal information in a commonly used electronic format. The availability of portable exports may depend on the type of information requested and the technical capabilities of the Services.
9.5 Restriction and Objection
Depending upon your jurisdiction, you may have the right to request that certain processing activities be restricted or to object to particular uses of your personal information. Farmroute will evaluate such requests in accordance with Applicable Law and the role Farmroute serves with respect to the requested information.
9.6 Consent
Where processing is based upon your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn. Certain features of the Services may become unavailable if the required permissions or consent are withdrawn.
9.7 Marketing Communications
Farmroute primarily sends operational and account-related communications necessary to provide the Services. Where Farmroute sends optional marketing communications, you may unsubscribe using the methods provided in those communications. Even if you opt out of marketing communications, Farmroute may continue sending: security notifications; billing communications; password reset emails; legal notices; service announcements; and other communications necessary to operate your Account or provide the Services.
9.8 Analytics Preferences
Users may disable client-side product analytics and crash reporting through the application settings. Disabling these features does not disable server-side operational telemetry required to maintain the security, availability, reliability, or integrity of the Services.
9.9 Notification Preferences
Users may manage many notification preferences through the Services or through their device operating system. Disabling notifications may prevent timely receipt of important account, security, scheduling, messaging, or operational updates.
9.10 Organization-Controlled Information
Organizations determine how much of the workforce information stored within their Farmroute Organization is collected, retained, modified, exported, or deleted. If your personal information was provided to Farmroute by your employer or another Organization using the Services, you should generally direct requests relating to that information to the Organization responsible for your employment or relationship with that Organization. Farmroute may assist Organizations in responding to such requests where appropriate.
9.11 Exercising Your Rights
Privacy requests may be submitted by contacting: Privacy Team Email: privacy@farmroute.ag We may request additional information to verify your identity before processing privacy requests. Verification procedures help protect your information from unauthorized disclosure.
9.12 Limitations
Certain privacy rights may be limited by: Applicable Law; contractual obligations; the rights of other individuals; technical limitations; legal privilege; security requirements; fraud prevention obligations; or Farmroute's role as a service provider or processor acting on behalf of an Organization. Where Farmroute cannot fulfill a request, we will generally explain the basis for our decision unless prohibited by Applicable Law.
9.13 No Sale of Personal Information
Farmroute does not sell personal information. Farmroute does not rent personal information. Farmroute does not share personal information with advertising networks for targeted advertising. Farmroute does not use customer content—including uploaded documents, employee records, payroll information, messages, or files—to train general-purpose artificial intelligence models. Customer information is processed solely to provide, maintain, secure, support, and improve the Services as described in this Privacy Policy.
10. Children's Privacy
Farmroute is intended primarily for businesses, farms, organizations, and individuals involved in lawful workforce management and related operations.
10.1 Minimum Age
Farmroute Accounts may only be created by individuals who are at least thirteen (13) years of age. Individuals under the age of eighteen (18) may only use the Services where permitted by Applicable Law and, where required, under the authorization or supervision of a parent, legal guardian, employer, or other legally responsible party. Only individuals who are at least eighteen (18) years of age may create or administer Farm Profiles or other Organizations within the Services.
10.2 Information About Children
Farmroute does not knowingly permit children under thirteen (13) years of age to create Accounts or use the Services. If Farmroute becomes aware that personal information has been collected directly from a child under thirteen (13) years of age in violation of this Privacy Policy or Applicable Law, we will take reasonable steps to delete such information as soon as reasonably practicable, unless retention is required by Applicable Law.
10.3 Workforce Information
Farmroute is workforce management software. Organizations using the Services may lawfully maintain employment records relating to individuals under eighteen (18) years of age where permitted by Applicable Law. Farmroute processes such information solely on behalf of the Organization using the Services and does not independently determine the lawfulness of the employment relationship or the Organization's collection of such information. Organizations are solely responsible for ensuring that their collection, processing, and storage of information relating to minors complies with all applicable employment, labor, education, privacy, and child protection laws.
10.4 Parent or Guardian Requests
If you are a parent or legal guardian and believe that a child under thirteen (13) has provided personal information directly to Farmroute in violation of this Privacy Policy, please contact us using the information provided below. After verifying the request where appropriate, Farmroute will investigate and take reasonable action consistent with Applicable Law.
11. Changes to This Privacy Policy
Farmroute may update this Privacy Policy from time to time to reflect changes in our Services, legal obligations, business practices, technology, security measures, or other operational requirements.
11.1 Material Changes
If we make material changes to this Privacy Policy, we will generally provide at least thirty (30) days' advance notice before the updated Privacy Policy becomes effective, unless a shorter period is necessary to: comply with Applicable Law; respond to regulatory requirements; address security vulnerabilities; prevent fraud or abuse; protect the Services or our Users; or respond to operational emergencies. Notice may be provided through: the Farmroute website; the Farmroute mobile applications; email; in-app notifications; or another reasonable method of communication.
11.2 Minor Changes
We may make non-material, administrative, formatting, or clarifying updates to this Privacy Policy without prior notice where permitted by Applicable Law. Such updates become effective upon publication unless otherwise stated.
11.3 Continued Use
Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised Privacy Policy. Where Applicable Law requires additional consent before certain processing activities occur, Farmroute will obtain such consent before relying upon the updated processing activity.
11.4 Historical Versions
Farmroute may maintain previous versions of this Privacy Policy for historical, legal, regulatory, or compliance purposes.
12. Contact Information
If you have questions about this Privacy Policy or Farmroute's privacy practices, you may contact us using the information below. Farmroute LLC Website: https://farmroute.ag General Inquiries: contact@farmroute.ag Privacy: privacy@farmroute.ag Support: support@farmroute.ag Legal: legal@farmroute.ag Security: security@farmroute.ag
Business Address: 519 West 22nd Street Suite 100, Sioux Falls, SD, 57105
Privacy Requests Requests regarding access, correction, deletion, data portability, or other privacy matters may be submitted to: privacy@farmroute.ag To help protect customer information, Farmroute may request additional information to verify your identity before responding to privacy-related requests.
Security Reports Suspected security vulnerabilities should be reported responsibly to: security@farmroute.ag Please do not publicly disclose security vulnerabilities before providing Farmroute with a reasonable opportunity to investigate and address the issue.
Legal Notices Formal legal notices, subpoenas, and other legal correspondence should be directed to: legal@farmroute.ag Additional contact information may be provided on the Farmroute website as the business grows and operational requirements evolve.