Privacy Policy

1. What we collect

When you create a tenant, we collect your business name, owner email, and the password you set (stored only as a salted hash, never in plain text). As you use Harvest OS, your tenant's data - inventory, orders, production records, and similar business records you enter - is stored on our behalf.

2. How we use it

We use this information to operate your tenant, authenticate your sign-ins, send transactional emails (password resets, account notices), and provide support when you request it. We do not sell your data.

3. Product usage analytics

We record which modules of Harvest OS your tenant's users open (a module name, a user/tenant id, and a timestamp) so we can understand which features are actually useful and improve the ones that aren't. This is self-hosted in the same database as your business records, under the same tenant-isolation rules described below - it is never sent to a third-party analytics vendor. We do not record page content, keystrokes, or the business figures you enter (stock levels, prices, financial data). This data feeds aggregate, cross-tenant reporting visible only to Harvest OS platform staff, never to another tenant.

4. Tenant isolation

Every tenant's data is isolated at the database level - row-level security policies enforce that one tenant can never read another tenant's records, even through a compromised application bug. Platform administrators can access tenant data only for support purposes, and every such access is logged.

5. Third parties

We use infrastructure providers (database hosting, email delivery, payment processors you connect) to operate the service. These providers process data only as needed to deliver their function to you and are bound by their own confidentiality obligations.

6. Data use for revenue operations

To facilitate transaction-based services (financing, payment processing, provenance verification), Harvest OS processes:

• Production cycle and order data - for financing risk scoring
• Payment data - for payment processing and reconciliation
• Batch and traceability records - for provenance verification

This processing is necessary to provide the services you request. Marketplace trades settle directly between the two farmers involved - Harvest OS never holds the funds, and only the trade value each side chooses to report is recorded.

7. Anonymized data products

Harvest OS may create and offer anonymized, aggregated data products (e.g. regional benchmarking reports) to third parties such as commodity buyers or development finance institutions. These products never identify an individual tenant. Cross-tenant benchmarking data specifically requires your tenant's opt-in, set from the Benchmarking page in your dashboard - you can opt out at any time, and opting out does not affect access to free core features.

8. Partner data access

White-label partners have access to aggregate analytics about their member tenants (e.g. total member count, activation and financing-eligibility rates, revenue their member base generated). Partners do not have access to an individual member tenant's underlying business records unless that tenant explicitly authorizes it.

9. Financial partner data sharing

When you apply for financing through Harvest OS, your operational data (production history, order and payment history, computed risk score) is shared with the relevant lending partner for underwriting purposes. This sharing is limited to what's necessary for that specific application and occurs when you submit it.

10. Data retention and deletion

We retain your data for as long as your tenant is active. If you close your tenant, you may request export or deletion of your data, subject to any legal retention requirements.

11. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. Contact your account owner or Harvest OS support to exercise these rights.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated date.