What we collect
- Account details. Your email address and, if you provide them, a display name, bio, and growing location (country and city only — never a street address).
- Plant photos. The images you upload to scan, plus the identification and care plan generated from them.
- Content you post. Crop reports, comments, and reviews you choose to submit.
- Messages. Anything you send through the contact form.
- Aggregate usage. Page-level analytics with no cookies and no cross-site tracking.
Location data is stripped from your photos
Cameras embed GPS coordinates in photo metadata by default. Before any image is stored, we re-encode it and discard that metadata, so a photo taken in your garden does not carry your home's coordinates. This happens on our server, on upload, every time.
Who can see your scans
Your scan images live in a private storage bucket. They are not publicly addressable and are served only through short-lived signed links generated for your session. Database access is enforced with row-level security, so another signed-in user cannot read your rows even if they try to request them directly.
Content you deliberately publish — a crop report, a comment, an approved review — is visible to others. That is the point of it, and it is always your choice.
Processors we use
- Supabase — database, authentication, and file storage.
- OpenAI — plant identification and assistant replies. Images and questions are sent for processing. We do not send your email address or account identifiers along with them.
- Vercel — hosting and privacy-friendly analytics that set no cookies.
- Resend — transactional email, where enabled.
How long we keep things
Scans and care plans are kept until you delete them or close your account. Deleting a scan removes its stored image as well. Contact messages are kept for two years. Closing your account removes your profile, scans, and images.
Artificial intelligence and your data
Your photo is sent to PlantNet and OpenAI to produce an identification and care plan. We do not send your email address or account identifiers with it, so those providers receive an image, not a person.
Nothing on AgriAdvisor makes an automated decision with a legal or similarly significant effect on you. An identification is information, not a decision about you.
We do not use your photos to train AI models, and we do not sell them.
Your rights
You can access, correct, export, or delete your data at any time — most of it directly from your settings. For anything you cannot do yourself, email hello@agriadvisor.bio and we will respond within 24 hours.
Children
AgriAdvisor is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Changes
If this policy changes materially we will say so on this page and update the date above before the change takes effect.