Privacy policy

Effective 2026-10-17

This policy covers FarmHelper’s website, accounts, dashboard, and hosted public farm pages. It explains the reviewed application’s data flows and choices. Farm owners decide what information to enter about their farm and what to publish; a farm may have its own privacy responsibilities.

Backup handling disclosure updated October 18, 2026.

Information collected

• Account information: email address, display name, account identifier, authentication records, farm memberships, and submitted eligibility/policy acknowledgements with their time and version. Passwords are handled by Supabase Auth rather than stored as plain text in farm records.
• Farm records: farm name and settings; optional contact and location details; animals, milk, feed, tasks, medical and breeding records; garden plans; notes, photos, and uploaded files. Animal health records concern animals, but free-text fields and attachments may contain personal information you enter.
• Billing information: selected plan, subscription status, renewal dates, and Stripe customer/subscription identifiers. Payment details entered in Stripe checkout or its portal are handled by Stripe. FarmHelper does not request full card numbers in its own forms.
• Technical information: cookies, request times, IP addresses, browser/request metadata, and errors may be processed by hosting, authentication, and other service providers to deliver and protect the service.
• Support correspondence: information you choose to send by email or through Feedback & support, including report type, subject, message, account email, reference and receipt time. Reports are saved privately and sent through Resend to Workflow Forge’s support inbox. No screenshots or farm records are attached automatically.

How information is used

Information is used to sign you in, authorize farm access, save and display your records, manage trials and subscriptions, provide requested tools, send configured service notices, troubleshoot faults, prevent abuse, and handle support or legal requests.

Public profile and gallery content is displayed when a farm is configured to publish it. Review farm settings and visibility choices before adding personal contact details or photos. Shared-farm members can access records within their assigned permissions.

Providers and optional integrations

• Supabase: authentication, database records, file storage, and configured server functions.
• Vercel: application hosting and web request delivery.
• Cloudflare R2: private, encrypted offsite copies of uploaded files and recovery material used to recover the service.
• GitHub Actions: scheduled backup jobs and operational monitoring. Backup jobs process uploaded files to encrypt them before transfer to offsite storage. Customer file names and file contents are excluded from backup job logs.
• Stripe: checkout, billing portal, and subscription processing. Stripe handles payment details and calculates applicable taxes when live billing is enabled.
• Email providers: Supabase Auth sends account emails through Resend. Configured farm alert functions also use Resend; those messages can include relevant farm reminders. Workflow Forge receives support correspondence through Hostinger Mail.
• Location and weather lookups: a full address entered into the zone finder is sent to the US Census geocoder; a ZIP code is sent to phzmapi.org for zone lookup. A ZIP code can also be used by configured weather-alert functions to obtain local forecasts. You can choose a zone manually instead.

The AI assistant is disabled for the initial release. Any future AI feature requires a privacy review and updated disclosures before it is enabled.

Providers operate under their own terms and privacy policies, and processing locations depend on their configuration. We do not promise a particular data residency location. External links and published farm contact links can take you to services outside FarmHelper.

Public information and other disclosures

Anyone may view content published on a public farm page. Photos hosted in public storage can also be accessible by their URLs. Search engines and visitors may retain copies after you change a visibility setting or remove a page.

Information may need to be disclosed to comply with valid legal requirements, protect people or the service from harm, or handle a business transfer, subject to applicable law and appropriate notice. Workflow Forge uses customer information only to operate and support FarmHelper. We do not sell it or use it for advertising.

Cookies and tracking choices

FarmHelper uses essential authentication cookies and a cookie that remembers the selected farm. See the cookie notice. The reviewed application does not load marketing analytics, advertising pixels, or cross-site behavioral tracking scripts. It does not change its essential-cookie behavior in response to a browser’s Do Not Track signal.

Hosting and payment providers may process requests and use their own security or service cookies. Any future optional tracking must be disclosed and appropriate choices added before it is enabled.

Access, correction, and deletion

You can edit farm records and visibility settings available to your role in the dashboard. For account information, a copy of personal information, deletion, or another privacy request, contact the privacy address below. We may verify your identity and authority over shared farm data before acting.

The current application does not provide a complete self-service account deletion or account export workflow. Requesting deletion does not automatically cancel a Stripe subscription, and canceling a subscription does not delete records. Shared farm records may belong to the farm and require its owner’s involvement.

Your applicable rights depend on your location and the operator’s obligations. Where applicable, they may include access, correction, deletion, portability, objection or restriction, and a complaint to a privacy regulator. Contact us to exercise applicable rights or ask about the information retained for your account.

Retention and security

Records remain available while stored for the farm until removed through supported controls or an authorized request. Authentication, billing, logs, and backup copies can have separate retention requirements. Some information may need to be retained for legal obligations, fraud prevention, or dispute resolution. Removing a record does not necessarily remove an attachment or a provider backup immediately.

Routine daily offsite file snapshots are configured to expire after 30 days. Separate encrypted disaster-recovery snapshots may be retained longer for recovery purposes. Deleted information can therefore remain in a protected backup until that copy expires or is retired.

We handle verified export and deletion requests through support. Shared ownership, billing, legal obligations, provider copies and public copies can affect what can be removed. Support reports are retained while needed to respond, troubleshoot, protect the service, or meet legal obligations; contact us to request deletion. Copies sent to the support mailbox follow the same purposes and may have separate provider retention. Resolved application monitoring metadata is retained for up to 30 days; unresolved faults or incidents may be kept while needed for investigation. Provider-managed logs and backups follow their configured retention. We do not promise immediate removal from backups or copies held by others.

FarmHelper uses authentication and access controls intended to limit access to authorized farms. No online service is completely secure. Report a suspected exposure through the contact below and avoid putting secrets or highly sensitive personal information into farm notes or files.

Children and updates

Account creation is available only to adults aged 18 or older in the United States during the initial launch. Signup asks you to confirm this eligibility; that confirmation does not independently verify age or location. The service is not directed to children under 13. Do not enter children’s personal information. If you believe a child has provided it, contact the operator so the issue can be reviewed and addressed.

Changes will be published here with an effective date. Material changes will also be communicated through the service or account email where appropriate before taking effect.

Privacy contact