Last updated: 30 December 2025
1. Data controller
AGS – Agriculture Global Solutions OÜ
- Registered address: Sakala tn 7-2, Kesklinna linnaosa, 10141 Tallinn, Harju maakond, Estonia
- Email: contact@agriglobalsolutions.com
- Phone: +49 15163105462
2. Scope
This policy covers personal data processing on www.cropdrive.ai and related app pages.
3. Legal framework followed
This website follows EU data protection rules.
GDPR applies to personal data processing.
EU ePrivacy rules apply to device storage and similar technologies, see the separate Cookie Policy.
4. Personal data collected
A. Account and login data
- Email address.
- Authentication status and security tokens handled through Firebase Authentication.
B. Service usage data
- Basic device and browser data.
- Page views and feature usage data collected through Vercel Web Analytics.
C. Customer support and contact data
Name, email, phone number, message content, when you contact AGS through forms, email, or messaging.
D. Payment flow data
Subscription purchase is handled on Stripe hosted checkout pages on stripe.com.
Payment data is processed by Stripe on Stripe pages.
5. Purposes and legal basis
A. Providing the service
Purpose: create accounts, sign in, deliver app functions, provide requested outputs.
Legal basis: performance of a contract or steps before a contract under GDPR Article 6(1)(b).
B. Security and fraud prevention
Purpose: protect accounts, prevent abuse, keep the service stable.
Legal basis: legitimate interests under GDPR Article 6(1)(f).
C. Product improvement and basic analytics
Purpose: understand aggregated usage patterns, improve pages and features.
Legal basis: legitimate interests under GDPR Article 6(1)(f), limited to privacy focused analytics described in this policy.
D. Payments and billing administration
Purpose: enable subscriptions, handle payment confirmation, manage billing records required for business operations.
Legal basis: performance of a contract under GDPR Article 6(1)(b), plus legal obligation under GDPR Article 6(1)(c) where bookkeeping or tax rules require recordkeeping.
E. Marketing communications
Purpose: send marketing messages only when you opt in.
Legal basis: consent under GDPR Article 6(1)(a), with withdrawal available at any time.
6. Sharing and service providers
AGS shares personal data with service providers only for the purposes listed above.
A. Hosting and analytics
Vercel, for hosting and Vercel Web Analytics.
B. Authentication
Google Firebase, for sign in and account authentication.
C. Payments
Stripe, for hosted checkout and payment processing on stripe.com.
Each provider processes data under contractual terms for data protection and security.
7. International data transfers
Some service providers process data outside the EEA.
AGS uses EU transfer safeguards where required, including EU Standard Contractual Clauses under Commission Implementing Decision (EU) 2021/914.
8. Retention
AGS keeps personal data only for as long as needed for the purposes in section 5.
Operational data
Account data is stored while an account remains active. Deletion follows a verified request or account removal flow.
Support communications
Support messages are stored for case handling and business records, then deleted or anonymised based on internal retention rules.
Billing records
Billing and invoice related records are stored for statutory retention periods where required by law.
Stripe
Payment card data is handled by Stripe on Stripe pages, under Stripe retention rules.
9. Your rights under GDPR
- Access.
- Rectification.
- Erasure.
- Restriction.
- Data portability.
- Objection to processing based on legitimate interests.
- Withdrawal of consent, where processing is based on consent.
Rights are exercised by emailing contact@agriglobalsolutions.com.
AGS verifies identity before releasing or deleting account data.
10. Complaints
A complaint can be filed with a supervisory authority in the EU.
A complaint can be filed in the EU Member State of habitual residence, place of work, or place of the alleged infringement, under GDPR Article 77.
11. Automated decision making
CropDrive generates agronomic outputs for decision support.
No solely automated decision with legal or similarly significant effect is used for access, pricing, or eligibility.
12. Security
- Transport encryption is used for website traffic.
- Access to internal systems is restricted to authorised personnel.
- Service providers apply security controls for hosting, authentication, and payments.
13. Children
The service is intended for adults.
AGS does not knowingly collect personal data from children under 16.
14. Changes
Updates are posted on this page with a revised "Last updated" date.