Privacy policy
Last updated: 2026-06-22
Agri Cultural is committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR). This policy explains what data we collect, why, and how you can exercise your rights.
Data collected
We collect only the data necessary to operate the platform:
- Email address and name (account creation, authentication)
- Approximate locality (displayed on your public showcase, if you choose to add it)
- Produce, gardens, placements (content you create yourself)
- Exchanges and reviews (interactions with other users)
- Payment data (if you subscribe to premium — processed by Stripe, never stored by us)
Purposes of processing
- Operating and improving the platform
- Authenticating you securely
- Displaying your public showcase according to your visibility preferences
- Managing your premium subscription (via Stripe)
- Sending you in-app notifications related to your activity
Your data is never sold to third parties. No targeted advertising.
Legal basis
- Performance of contract: processing necessary to provide the service you signed up for.
- Consent: for optional profile data (locality, organic flag, public visibility).
- Legitimate interest: service improvement, security, fraud prevention.
Retention period
Your data is retained for as long as your account is active. Upon account deletion, your personal data is erased within 30 days, except where legal obligations apply (billing data retained for 10 years).
Your rights
Under the GDPR, you have the following rights:
- Right of access: obtain a copy of your data.
- Right of rectification: correct inaccurate data.
- Right to erasure: delete your account and your data.
- Right to data portability: receive your data in a readable format.
- Right to object: object to certain types of processing.
To exercise your rights: [TO BE COMPLETED — email address]
You may also lodge a complaint with your national data protection authority.
Cookies
We use only cookies strictly necessary for the service to function: an Auth.js session cookie (authentication). No advertising cookies, no third-party trackers, no behavioural analytics.
Sub-processors
We work with the following service providers, who process data on our behalf:
- OVHcloudServer hosting (France)https://www.ovhcloud.com/en/personal-data-protection/
- StripePayment processing (premium subscription)https://stripe.com/en/privacy