Legal

Privacy Policy

Effective date: 22 July 2026 Last updated: 22 July 2026

1. Controller and contact

Milkimiks d.o.o., OIB 77035239791, with its registered address at Ul. Petra Biškupa Vene 47, 43000 Bjelovar, Croatia, is the controller of personal data processed through Agroconda.

For privacy questions or to exercise your rights, contact support@agroconda.com.

2. Personal data we process

Depending on how you use Agroconda, we process:

  • account and profile data, including name, username, email address, password hash, language preference, and profile image;
  • workspace and collaboration data, including membership, invitations, roles, and activity relevant to shared work;
  • agricultural work data, including parcel boundaries and coordinates, crops, tasks, notes, attachments, and photographs you or your workspace submit;
  • device and notification data, including an Expo push token and installation identifier when you enable push notifications;
  • support, custom-plan, and account-deletion request information submitted through public forms; and
  • security and operational data, including IP address, authentication events, error records, audit events, and rate-limit records.

3. Why we use data

We use personal data to provide and secure the Service, manage workspaces, host and display User Content according to permissions, provide maps and notifications, respond to support and deletion requests, prevent fraud and abuse, meet legal obligations, and enforce our Terms.

Our legal bases are performance of a contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required for an optional activity.

4. Location, notifications, photos, and AI analytics

Agroconda requests your current device location only when you choose to centre the parcel map. That current location is used locally to centre the map and is not sent to or stored by Agroconda's API for that purpose.

Push notifications are optional and can be disabled in device or app settings. Photos and attachments you choose to upload are stored to provide the Service.

When you request AI analytics, relevant parcel, note, and image inputs may be sent to OpenAI to generate an analytics report.

5. Service providers and sharing

We use service providers where necessary to operate the Service, including:

  • Hetzner-hosted infrastructure in Germany for our website and service infrastructure, including database, object storage, and backups;
  • Mapbox for map display and geocoding;
  • Expo for push-notification delivery;
  • Resend for transactional email delivery;
  • Cloudflare Turnstile for bot protection on public forms;
  • OpenAI for requested AI analytics;
  • Copernicus and related data providers for satellite observations; and
  • RevenueCat for subscription and purchase infrastructure where an in-app purchase is offered.

We do not sell personal data or use it for advertising.

6. International transfers

Some providers may process data outside the European Economic Area. When this occurs, we use the transfer mechanisms and safeguards required by applicable data-protection law.

7. Retention

We retain personal data only for as long as necessary for the purposes described in this Policy:

  • account data, workspace data, and uploaded files are retained while the relevant account or workspace remains active, then deleted through the applicable deletion process;
  • support requests, custom-plan inquiries, and account-deletion request records are retained for up to 24 months after resolution or request;
  • structured security and audit logs are retained for 7 days;
  • protected PostgreSQL and object-storage backups are retained for up to 14 days; and
  • data may be retained longer where necessary for a legal obligation, fraud prevention, or the establishment, exercise, or defence of legal claims.

8. Account deletion

You can request deletion from within Agroconda or at https://agroconda.com/delete-account. On deletion, we remove the account, associated owned data, and associated stored files. Shared workspaces remain available to their other members, subject to their own data and permissions. Deleted data may remain in protected backups for up to 14 days before expiry.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where processing is based on consent. You may also complain to the competent data-protection authority, including the Croatian Personal Data Protection Agency (AZOP) where applicable.

10. Security

We use organisational and technical measures designed to protect personal data. No service can guarantee absolute security; please protect your credentials and contact us promptly about suspected unauthorised access.

11. Children

Agroconda is intended for professional and business use and is not directed to children.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The current version and effective date will be published at https://agroconda.com/privacy. Where appropriate, we will notify you of material changes.

13. Contact

For privacy questions, contact support@agroconda.com.