Privacy Policy

1. Prior information required by law

Article 5.1 of Law 8968 requires us to inform you, expressly, precisely and unambiguously, of eight specific points before requesting personal data. We gather them here so you do not have to hunt through the document.

a) Existence of a database

Yes. Agripino maintains a personal database containing information about users and about the people they record.

b) Purpose of collection

To deliver the contracted farm management service: authenticate your access, store your production and financial records, calculate payroll and generate reports.

c) Recipients of the information

Users within your own organisation, according to the role you assign them, and the subprocessors listed in Annex A. Nobody else.

d) Mandatory or optional nature

Name, email address and password are mandatory: without them we cannot create the account. Everything else is optional.

e) Processing to be applied

Storage in an encrypted database, consultation by authorised people in your organisation, and automated processing to generate the platform's calculations and reports.

f) Consequences of refusal

If you do not provide the mandatory data, the account cannot be created and the service cannot be delivered. Refusing optional data only limits the features that depend on it.

g) Rights available to you

Access, rectification, suppression and withdrawal of consent, as set out in section 7.

h) Identity and address of the controller

PENDIENTE DE COMPLETAR (razón social registrada), Cédula jurídica PENDIENTE DE COMPLETAR (3-101-XXXXXX), with offices at PENDIENTE DE COMPLETAR (dirección exacta), PENDIENTE DE COMPLETAR, PENDIENTE DE COMPLETAR, PENDIENTE DE COMPLETAR, Costa Rica.

2. Two distinct relationships

• Your own data. As regards the name, email and account details of the person registering, Agripino is the data controller. This policy covers those in full.
• Data you record about third parties. As regards your staff, suppliers and clients, you are the controller and Agripino is the processor. That relationship is governed by the Data Processing Agreement, and it falls to you to inform those people and obtain their consent.

3. What data we process

4. On what basis we process your data

This distinction matters because it determines what you can withdraw and what you cannot.

• Performance of the contract. Processing your name, email, organisation details and farm records is indispensable to delivering the service you contracted. It is not based on your consent and therefore cannot be withdrawn in isolation: ceasing to process it is equivalent to terminating the contract and closing the account.
• Express consent. Processing for non-essential purposes — commercial communications, invitations to try new features, use of your testimonial — is based on your consent and you may withdraw it at any time without affecting the service.
• Legal compliance. Retaining proof of acceptance of the contractual documents responds to a legal obligation and to the defence of our rights.

5. What we use the data for

• Authenticate your access and keep your session open.
• Store, display and calculate the production and financial information you record.
• Send you email essential to the operation of the account: verification, password reset, invitations and service notices.
• Handle your support enquiries and complaints.
• Detect and prevent misuse, fraud and attacks on the infrastructure.
• Comply with legal and tax obligations.

What we do not do, and undertake not to do without telling you first:

• Sell, rent or assign your data to third parties.
• Build advertising profiles or commercial segments.
• Use your farm data to train artificial intelligence models.
• Publish or commercialise aggregated data that could identify your operation.

6. Cookies

Agripino uses strictly necessary cookies only. Two, specifically:

7. Your rights and how to exercise them

Under articles 7 and following of Law 8968, you may:

• Access the personal data we process about you and learn its origin and purpose.
• Rectify inaccurate or incomplete data.
• Delete your data when it is no longer necessary or when you withdraw consent where applicable.
• Withdraw consent through the same medium in which you gave it, without retroactive effect.
• Export your information in structured format from the platform.

To exercise any of these rights write to [email protected]. We may ask for additional documentation to verify your identity, in which case the period runs from when we receive it.

If you believe we did not handle your request properly, you may turn to Agencia de Protección de Datos de los Habitantes (PRODHAB) (https://www.prodhab.go.cr).

8. How long we keep the data

9. Security

The database is hosted on our own infrastructure located in Costa Rica. We apply encryption in transit and at rest, and strict separation between organisations through row-level security in the database itself.

The full detail, including measures we have not yet implemented, is in the Security Overview.

10. Who we share with

Only the subprocessors we need in order to operate, listed in Annex A to this policy. None is authorised to use the data for its own purposes.

We may be compelled to hand over information in compliance with a court order or a competent authority. In that case, and unless the order itself forbids it, we will tell you.

11. Minors

Agripino is aimed at adults managing an agricultural operation. We do not knowingly collect data from people under 18. If we detect that an account has been created by a minor without authorisation, we will delete it.

12. Changes to this policy

If we change this policy we will publish the new version with its number and effective date. Where the change materially affects the processing of your data, we will notify you by email and ask for a fresh express authorisation before applying it.

Earlier versions are retained and may be requested at any time.

13. Contact

Controller: PENDIENTE DE COMPLETAR (razón social registrada), Cédula jurídica PENDIENTE DE COMPLETAR (3-101-XXXXXX), PENDIENTE DE COMPLETAR (dirección exacta), PENDIENTE DE COMPLETAR, PENDIENTE DE COMPLETAR, PENDIENTE DE COMPLETAR, Costa Rica. Telephone PENDIENTE DE COMPLETAR (teléfono de contacto).

Privacy enquiries: [email protected]. Complaints: [email protected].