This Privacy Policy describes how Farmapper, LLC ("Farmapper," "we," "us," or "our") collects, uses, and protects your information when you use farmapper.com and the Farmapper application (collectively, the "Service"). We aim to be direct and plain about what we do — no dark patterns, no surprise data brokers.

1. Information We Collect

1.1 Account Information

When you create a Farmapper account, we collect your email address, a hashed password, and any optional profile information you provide (such as your name or organization). If you sign in with a third-party provider (Google), we receive only the profile fields you authorize — typically your email and display name.

1.2 Project and Map Data

Farmapper stores the maps, projects, tracts, and annotations you create. This data is stored on our behalf in Google Cloud Storage and Google Cloud SQL. It is accessible only to you and anyone you explicitly share a project with, plus authorized Farmapper personnel for support and troubleshooting.

1.3 Payment Information

If you upgrade to a paid plan, payments are processed by Stripe. Farmapper does not directly collect, store, or have access to your full credit card number. Stripe provides us with limited billing metadata (last four digits, card brand, billing ZIP) for record-keeping.

1.4 Automatically Collected Information

We automatically collect certain technical information when you visit farmapper.com, including your IP address, browser type, operating system, referring URL, and pages visited. This is used for operational purposes (serving pages, preventing abuse) and, in aggregate anonymized form, for analytics.

1.5 Analytics Data (Plausible)

We use Plausible Analytics to measure aggregate, anonymous website traffic on farmapper.com. Plausible is a privacy-first, cookieless analytics service. It does not use cookies, does not collect personal data, and does not track you across websites or devices. All data is aggregated and cannot be used to identify individual visitors.

Plausible collects only the following, in anonymized form: page URL visited, HTTP referrer, browser type and version, operating system, device type, and country (derived from IP address). Your IP address is not stored — it is used in-memory to derive a country and generate a rotating, one-way daily hash for deduplication of visits, then discarded. No persistent identifier is created for you, and no data is shared with third parties, advertisers, or data brokers. Plausible data is hosted in the European Union and is GDPR, CCPA, and PECR compliant. You can review Plausible's data policy at plausible.io/data-policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Creating and storing your maps, projects, and account.
• Processing Payments: Authorizing charges via Stripe for paid subscriptions and one-time purchases.
• Communications: Sending transactional emails (receipts, password resets) and — where you have opted in — marketing or product updates.
• Service Improvement: Analyzing usage patterns in aggregate to improve reliability and features.
• Legal Compliance: Complying with applicable legal obligations, resolving disputes, and enforcing our Terms of Service.

3. Third-Party Services

Farmapper uses the following third-party service providers:

• Google Cloud Platform (Cloud Storage, Cloud SQL, App Engine) — Hosting and backend infrastructure.
• Amazon Web Services (S3, CloudFront) — Static asset hosting and CDN for portions of the Service.
• Stripe — Payment processing. Stripe's privacy policy governs their handling of your payment data.
• SendGrid (Twilio) — Delivery of transactional and marketing emails.
• Mapbox — Map rendering and geospatial visualization.
• Google OAuth — Optional single-sign-on for account creation and login.
• Plausible Analytics — Cookieless, privacy-first website analytics. Does not collect personal data or track visitors across sites. EU-hosted.

These third-party providers have their own privacy policies. We encourage you to review them independently.

4. Data Retention

We retain your account and project data for as long as your account is active. If you close your account or request deletion, we will delete your personal data within 30 days, except where we are legally required to retain it (e.g., transaction records for tax and accounting purposes, typically retained for 7 years). Aggregate analytics data is retained indefinitely as it cannot be tied to you.

5. Security

We implement reasonable technical and organizational measures to protect your data:

• SSL/TLS Encryption: All traffic between your browser and farmapper.com is encrypted with industry-standard TLS.
• PCI Compliance: Payment processing is handled by Stripe, which is PCI DSS Level 1 certified.
• Access Controls: System and data access is restricted to authorized personnel on a need-to-know basis.
• Password Hashing: Passwords are stored using industry-standard cryptographic hashing (bcrypt).

While we take reasonable precautions, no method of data transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

6. Cookies

Farmapper uses minimal, functional cookies necessary for the operation of the Service — session management, authentication, and CSRF tokens. We do not use advertising cookies or third-party tracking cookies.

Our analytics provider, Plausible, is cookieless — it does not set any cookies in your browser and does not use localStorage or other persistent identifiers. Because our analytics does not require consent under GDPR, ePrivacy, or CCPA, farmapper.com does not display a cookie consent banner.

6.1 Your Choices — Analytics Opt-Out

Although Plausible does not identify you personally, you may still opt out of aggregate analytics if you prefer. You can:

• Enable Do Not Track or Global Privacy Control in your browser — Plausible honors both;
• Block plausible.io at the network level or via an extension (uBlock Origin, Privacy Badger, or your browser's tracking protection).

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data (subject to legal retention requirements).
• Portability: Request an export of your project data in a machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdrawal of Consent: Withdraw consent to marketing communications at any time via the unsubscribe link in every email.

To exercise any of these rights, contact us at support@farmapper.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.

9. International Users

Farmapper is operated from the United States. If you access the Service from outside the U.S., you understand that your data will be transferred to, stored in, and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or a notice on the Service, with a revised effective date at the top. Your continued use after the revised effective date constitutes acceptance of the updated policy.

11. Contact Information

Questions about this Privacy Policy or our data practices? Contact us:

Farmapper, LLC
PO Box 170063, Boise, ID 83717
Email: support@farmapper.com
Website: www.farmapper.com