FarmBizAfrica

Privacy Policy

Last updated: 27 April 2026

1. Who we are

FarmBizAfrica is the data controller for personal data processed through the Platform. We comply with Kenya's Data Protection Act, 2019 and applicable data-protection rules in the jurisdictions we serve.

2. What we collect

  • Account info: name, email, phone number, county, sub-county, language preference.
  • Farm data: acreage, primary crops, livestock types, field coordinates, farm boundary geometry, planting and harvest dates, input use, field diary entries.
  • Imagery: photos you upload to Crop Doctor; satellite NDVI tiles fetched from Copernicus Sentinel-2 for your fields (cached on our servers).
  • Transaction info: wallet top-ups, orders, escrow holds, payouts, M-PESA reference numbers (we never store your M-PESA PIN).
  • Device & usage: browser type, IP address, pages viewed, errors. Used to keep the service secure and to debug issues.

3. Why we collect it

  • To deliver the tools and services you ask for (forecasts for your county, NDVI for your field, matching to local partners).
  • To process payments and hold escrow.
  • To send service updates, request status notifications, and (with consent) periodic agronomic alerts.
  • To prevent fraud and abuse.
  • To analyse aggregated usage to improve the platform — this analysis does not identify individual farmers.

4. Who we share it with

  • Partners: when you submit a request (e.g. tractor booking), we share the minimum data the Partner needs to fulfil it: your name, phone, county, field location and request details.
  • Payments processor: IntaSend (Daraja / M-PESA) — for processing top-ups and payouts.
  • Infrastructure providers: Lovable Cloud (Supabase) for database and storage; Cloudflare for hosting; Open-Meteo for weather; Copernicus Sentinel-2 for satellite imagery; KAMIS (kilimo.go.ke) for market prices.
  • We do not sell your data to advertisers or third-party brokers.

5. How long we keep it

Account & farm data — for as long as your account is active. Transaction records — 7 years (Kenyan tax law). Satellite NDVI cache — 30 days. Field diary & scan history — until you delete them or your account.

6. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct it (most fields are editable from your Profile).
  • Delete your account and data (Profile → Delete account; transaction records are retained per law).
  • Object to processing or withdraw consent for optional uses.
  • Lodge a complaint with the Office of the Data Protection Commissioner (Kenya) at odpc.go.ke.

7. Security

Data is encrypted in transit (HTTPS) and at rest. Access is governed by row-level security in the database — staff and partners can only see the data they are explicitly authorised to see.

8. Cookies

We use a single first-party preference cookie (in your browser's localStorage) to remember that you have accepted the consent banner and to remember your language. We do not run advertising trackers.

9. Contact

For data-protection enquiries, email privacy@farmbizafrica.com.