Privacy Policy
Last Updated: March 2026
Your privacy matters to us. This policy explains exactly what data we collect, how we use it, and the controls you have over your information.
Jump to Section
AgriFAAS Connect ("the Platform") is operated by Cure Technologies. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use our platform. By using AgriFAAS Connect, you agree to the practices described in this policy.
Account & Identity Data
- Full name, email address, and password (hashed — never stored in plain text)
- Profile photo (optional, uploaded by you)
- Phone number, job title, department, and location (optional profile fields)
- Timezone and language preferences
Workspace & Operational Data
- Farm records, field data, crop and livestock information you create
- Financial transactions, journal entries, invoices, purchase orders, payroll records
- Employee records, HR data, and timesheets
- Documents, photos, and attachments you upload to the Platform
- Service requests, tasks, and comments
- Farmer profiles and visit logs created by extension officers
Usage & Technical Data
- IP address, browser type, and device information
- Pages visited, features used, and session duration (analytics)
- Error logs and performance telemetry to improve the Platform
- Push notification tokens (if you enable browser/mobile push notifications)
Cookies & Local Storage
- Authentication session tokens (required for login)
- User preferences and UI customisations stored locally
- Offline data cache for Progressive Web App (PWA) functionality
To Provide & Operate the Platform
- Authenticate your identity and manage workspace access
- Process and store farm management, financial, and operational data
- Deliver push notifications and email alerts you have subscribed to
- Enable offline functionality and data synchronisation
To Improve & Develop the Platform
- Analyse aggregated, anonymised usage patterns to improve features
- Monitor performance and diagnose technical issues
- Conduct research to develop new capabilities relevant to agribusiness
To Communicate With You
- Send important account and security notices (cannot be opted out)
- Deliver product updates, new feature announcements, and release notes (can be opted out)
- Respond to support requests and inquiries
To Comply With Legal Obligations
- Retain records as required by applicable law
- Respond to lawful requests from regulators or law enforcement
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share data only in the following limited circumstances:
- Service Providers: Third-party infrastructure providers (cloud hosting, file storage, email delivery) who process data on our behalf under strict data processing agreements.
- Workspace Members: Data you create within a workspace is accessible to other members of that workspace according to their assigned roles and permissions.
- Legal Requirements: Where required by law, court order, or governmental authority — we will notify you unless legally prohibited.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will provide notice before data becomes subject to a different privacy policy.
- Consent: Any other sharing with your explicit prior consent.
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit using TLS/HTTPS.
- Data at rest is encrypted using AES-256 or equivalent standards.
- Passwords are hashed using bcrypt and never stored in plain text.
- Role-based access controls restrict data access within workspaces.
- Audit logs record all significant actions for accountability.
- Regular security assessments and vulnerability scanning.
No method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
We retain your data for as long as your account remains active or as needed to provide services. Specifically:
- Account data is retained until you delete your account.
- Workspace operational data (farm records, financial data) is retained for the life of the workspace.
- After account deletion, personal data is anonymised or deleted within 30 days, except where retention is required by law.
- Backups may retain copies for up to 90 days after deletion for disaster recovery purposes.
- Audit logs are retained for a minimum of 12 months.
Subject to applicable law, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ('right to be forgotten') — available via My Profile → Security → Delete Account.
- Portability: Request your data in a machine-readable format (CSV/JSON export available in most modules).
- Objection: Object to certain types of processing, such as marketing communications.
- Restriction: Request that we restrict processing of your data in certain circumstances.
- Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at support@curetechnologies.org. We will respond within 30 days.
Essential Cookies
- Authentication tokens — required to keep you logged in
- Security cookies — protect against cross-site request forgery (CSRF)
- Session preferences — remember UI settings like sidebar state
Functional Cookies & Local Storage
- PWA offline cache — stores recently accessed data for offline use
- Push notification tokens — required for browser/mobile notifications
- Dashboard customisations and user preferences
We do not use third-party advertising or cross-site tracking cookies. You can clear cookies and local storage through your browser settings, but this may log you out and disable offline functionality.
AgriFAAS Connect is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at support@curetechnologies.org and we will delete it promptly.
Cure Technologies is headquartered in Ghana. Your data may be processed and stored on servers located in other jurisdictions. We ensure that any cross-border transfers are made with appropriate safeguards, including contractual clauses, to protect your data in accordance with applicable data protection laws.
We may send you the following types of communications:
- Transactional emails (account confirmation, password reset, critical security notices) — these cannot be opted out as they are essential to account operation.
- Product update emails (new features, release notes) — you can opt out via My Profile → Notifications.
- Marketing communications (promotions, case studies, webinars) — only with your explicit consent, and you can unsubscribe at any time via the link in any email.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or prominent in-app notice at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the revised policy. The 'Last Updated' date at the top of this page always reflects the most recent revision.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: