Privacy Policy
The short version
- Your farm data is yours. You are the originator, you keep control, and you can take it with you.
- We never sell it. Not to seed companies, not to input suppliers, not to data brokers.
- We never hand it to your landlord, your buyer, your lender or your insurer. Nobody sees your fields unless you say so.
- Nothing is shared by default. All sharing is off by default.
- A dedicated data processor runs our models. Field data goes there to get an answer back, and nothing else.
- Leaving is not a punishment. Export everything, you get to keep it and we will delete the data we hold on you.
This summary is here to be read. The sections below are the binding detail, and they say the same thing at greater length.
1. Introduction
This policy explains how AgriHub360 (operated by Ereyna Labs Ltd) collects, uses and protects information in connection with the website at agrihub360.com (the “Site”), the dashboard and mobile app at app.agrihub360.com, the sensors and gateways you install, and any related correspondence. We have tried to keep it plain English. If anything is unclear, email hello@agrihub360.com and we will explain it.
We write this policy against the four Farm Data Principles: your data is your data, data is made easy to work with, data is kept safe, and the value of sharing it is explained honestly. Where this policy and those principles could be read differently, read them whichever way gives you more control.
2. Who we are
AgriHub360 is a product of Ereyna Labs Ltd. For the purposes of UK data protection law, the data controller is:
Ereyna Labs Ltd
Registered in England and Wales, Company No. 14603041
3 Aldonvale, Middle Street, Shepton Beauchamp, United Kingdom, TA19 0LB
hello@agrihub360.com
We do not currently appoint a Data Protection Officer, because we are below the legal threshold that requires one. The email address above reaches the person responsible for data protection.
3. Farm data and personal data are not the same thing
UK data protection law protects personal data: information about an identifiable person. Most of what a farm business generates, such as yields, soil readings, applications and margins, is commercially sensitive without being personal data, so the law says less about it than you might expect.
We treat both to the same standard. In this policy:
- Farm data means readings, field boundaries, crop and variety records, applications, scout photographs, harvest results, financial records you import, and anything else generated by your operation. You are the originator of that data. As between you and us, it is yours. We hold it to run the service for you.
- Personal data means information about you and your team, such as names, email addresses, phone numbers, roles and sign-in records.
Where a member of your team is also a person under the law, both sets of rules apply, and the stricter one wins.
4. What we collect
- What you tell us directly when you join the launch list, apply for a pilot, contact us, or set up an account. Typically a name, an email address, the farm or business you represent, and the content of your message.
- Sensor readings from AgriHub360 hardware you operate: soil moisture, nitrogen, phosphorus, potassium, pH, soil temperature and ambient humidity, with the time and the location of the node that sent them.
- Field records you create: field boundaries and zones, crops and varieties, nutrient plans, spray and fertiliser applications, compliance evidence, and notes.
- Scout photographs you take of a crop, and the diagnosis returned for them.
- Financial records you choose to import, such as a ledger CSV, so the app can show costs and revenue against a field. Nothing you import is posted anywhere automatically.
- Device telemetry: battery, signal, gateway health and firmware version, so we can tell you when a node has stopped reporting.
- How you use the app: pages opened, features used and errors hit, so we can fix what is broken.
- Standard web log data when you visit the Site: IP address, browser and operating system, pages visited and time of visit.
We do not collect special category data such as health, race, sexual orientation or religion.
5. What we do with it
- Run the service you signed up for: readings, alerts, nutrient plans, timing windows, compliance records and recommendations.
- Keep your kit working, and tell you when a node or gateway needs attention.
- Answer your enquiry, onboard you into a pilot, and send updates you asked for.
- Bill you, keep accounts, and meet our own legal obligations.
- Find and fix faults, and keep the service secure.
- Improve the models and recommendations, on the terms in section 8.
6. What we will never do
These are commitments. If we ever needed to change one, we would tell you before it took effect, and you could leave and take your data with you.
- We do not sell personal information or farm data. There is no price at which your field records are for sale.
- We do not let third parties train their own AI models on your data.
- We do not give your data to a landlord, a lender, an insurer, a buyer, a merchant or a levy body because they asked. If any of them want it, they can ask you.
- We do not hand your records to a regulator or an enforcement body except where the law actually compels us, and we will tell you when that happens unless we are legally forbidden from doing so.
- We do not use your data to price you differently from other growers.
- We do not sell advertising, and we do not run third-party advertising or tracking cookies.
7. Sharing, and only on your say-so
Three switches in the app control everything we do beyond running the service for you. All three start off. The first two are set per field, so one field opting in says nothing about the rest of the farm.
- Scout photos for model training. Photographs from that field help train AgriHub360’s own disease models. Photographs only. No yield and no financial data.
- Harvest results for variety rankings. Results from that field count towards the variety rankings other growers see on similar soil. Always anonymised, and never shown unless several farms back the same figure.
- Marketplace demand. What you browse and add to a basket feeds anonymised demand reports for seed sellers. Never your name, and never shown unless at least five farms sit behind the number.
Turning marketplace sharing off deletes the browsing events we hold. Harvest results work differently: withdrawing stops that field counting towards future rankings, but your own harvest records stay in your account, because they are your agronomic history rather than something we collected for analytics.
If we ever share revenue with growers whose anonymised data supports a paid product, the terms will be published before the product goes on sale, and joining will be a separate opt-in.
8. AI, and what it is allowed to touch
Parts of the service use machine learning: the field health review, the crop scout diagnosis, and the in-app assistant. Being straight about how that works matters more to us than sounding clever about it.
- We use a third-party inference provider to run the models. Today that is Ollama Cloud. Field context, scout photographs and assistant messages are sent there to get an answer back.
- That is inference only. Our contract with them covers returning our answer and excludes training on what we send.
- Training on your data happens only where you switched on scout photo sharing, and it trains our disease model.
- Model output is advice, not instruction. Every quantitative claim carries a confidence label, and the app is built to say it does not know rather than invent a number.
- No decision with a legal or similarly significant effect on you is made by automated processing alone.
9. Who else touches the data
We keep the list of processors short, and here it is in full. Each one is bound by a written contract to process data only on our instructions.
| Processor | What it does | What it sees |
|---|---|---|
| Ollama Cloud | Runs the language and vision models | Field context, scout photographs, assistant messages |
| Stripe | Takes subscription payments | Billing details. We never see or store your card number |
| Resend | Sends transactional email | Name and email address |
| Sentry | Reports crashes and errors | Technical diagnostics, and the account id involved |
| Open-Meteo | Supplies weather and forecast | Field coordinates. No farm identity |
| Copernicus and Sentinel Hub | Supplies satellite imagery for NDVI | Field boundaries. No farm identity |
| OpenStreetMap | Supplies map tiles | Map view coordinates |
| Our hosting provider | Runs the servers and the database | Everything, encrypted at rest |
We also share information with professional advisers such as accountants, lawyers and insurers where we have to, and with authorities where the law compels us. If this list changes, the changed version is published here.
10. Who inside your business sees what
Access follows the role you give someone: owner, manager, operator or read-only guest. If you invite an agronomist or an advisor, they see the farms you invite them to and nothing else, and you can withdraw that access at any time. Sign-in supports two-factor authentication, and we recommend turning it on for every account with write access.
11. Lawful bases for processing
- Contract: running the service you subscribed to, including readings, recommendations, records and support.
- Consent: the launch list, marketing email, and each of the three sharing switches. You can withdraw consent at any time, in the app or by email.
- Legitimate interests: keeping the service secure and operational, fixing faults, preventing abuse, and replying to a business enquiry. We have weighed these against your interests and kept them narrow.
- Legal obligation: accounting records, and anything a regulator can legally compel.
12. How long we keep things
| What | How long |
|---|---|
| Sensor readings and field records | For as long as your account is open, then exportable for 30 days and deleted on request |
| NVZ nitrogen records | Five years, because that is what the rules require of you |
| SFI evidence packs | For the length of your agreement, and after it for the period the scheme requires. We state the current period in the app rather than in this policy, so it tracks the scheme |
| Spray and application logs | Three years minimum, longer if your assurance scheme demands it |
| Invoices and accounting records | Seven years, because HMRC requires it |
| Scout photographs | With the field record, unless you delete them |
| Launch list and pilot enquiries | Until you unsubscribe, or 24 months of silence |
| Web and server logs | 30 days |
| Backups | 35 days, after which deleted data ages out of the backup set too |
13. Leaving, and taking your data with you
You can export your farm data at any time, in a structured, machine-readable format, without asking us and without a fee. If you close your account we keep it available to export for 30 days, then delete everything we are not legally required to keep. Compliance records with a statutory retention period stay for that period and nothing longer, and they stay available to you.
We do not hold data hostage against an unpaid invoice, and we do not degrade an export to make leaving harder.
14. Security
Data is encrypted in transit and at rest. Access inside our team is limited to the people who need it to do their job and is logged. Sensors talk to the gateway over LoRa with device-level keys, and a device that is not registered to your farm cannot inject readings into it. If a breach affects you, we will tell you and the ICO within the timescales the law sets, and we will tell you what we know rather than waiting until the picture is tidy.
15. International transfers
Most processing takes place in the United Kingdom or the European Economic Area. Some processors are outside it. Where personal data goes to a country without a UK adequacy decision, we rely on the UK International Data Transfer Agreement or Standard Contractual Clauses, plus our own checks on the provider.
16. Your rights
Under UK data protection law you have the following rights, free of charge: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise any of them, email hello@agrihub360.com. We may need to verify your identity. We will respond within one month, or tell you why we need longer.
17. Cookies
This site does not set cookies. Our analytics are self-hosted and cookieless, so nothing is stored on your device and no analytics company receives a copy of your visit. That is why there is no consent banner here to dismiss.
Two things to be straight about. Signing in to an account sets a session cookie, which is strictly necessary and expires after twelve hours. And our typefaces are served by Google Fonts today, so Google sees the IP address your browser connects from when the page loads.
18. Complaints
If you are unhappy with how we have handled your data, tell us first so we can put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk, helpline 0303 123 1113.
19. Changes to this policy
We may update this policy. The current version is always the one on this page, with the date at the top. If a change reduces your control over your data, we will tell affected customers before it takes effect.
20. Contact
Any privacy question: hello@agrihub360.com, or write to the registered office above.