AgricIQ Privacy Policy

Effective date: 9 October 2026.

1. Who we are

AgricIQ, also branded AgricIQ+, provides farm management, record keeping and agricultural decision-support services at https://www.agriciq.com.

The operator and controller of account, security, billing and support information is St. Cyril’s Farms Limited. Business address: 7, Mbari Street, Ikenegbu, Owerri, Imo State, Nigeria. Contact us at info@agriciq.com, with the subject “AgricIQ privacy request”.

Where a farm business uploads information about its employees, guarantors, customers or other people, that business determines why it uses those records. AgricIQ processes those records to provide the service under the applicable agreement. The farm business must give affected people appropriate information and have a lawful basis for uploading their data.

2. Information we process

Depending on the features you use, we process:

• Account information: email address, account identifiers, sign-in and verification records, role approvals, consent records and authentication information managed by our sign-in provider.
• Google sign-in information: your Google account identifier, email address and verification status, and basic profile information Google supplies, such as your name and profile image. Our authentication service may retain those profile fields even if AgricIQ does not display them. Google does not give AgricIQ your Google password.
• Farm and business information: farm and manager names, contact details, business registration details, farm addresses, verification photographs and location coordinates you choose to provide or capture using your device.
• Operational records: farm locations, livestock and flock details, production, stock, feed, health observations, expenses, sales, investigations, reports and related notes. Some records may identify individuals or sole traders.
• Uploaded content: photographs, videos where supported, survey responses, documents and other material you submit. Content may include information about people or locations visible in the material.
• Personnel records: employer, employee and guarantor contact details, addresses, job and pay information, and information supplied to prepare staff-agreement drafts. Please do not upload unnecessary identity documents or sensitive personal information.
• Payments and service usage: subscription choices, payment references, transaction status, bank-transfer evidence where supplied, credit balances and usage records. Payment providers process payment credentials through their own services; AgricIQ uses transaction information to reconcile payments and manage entitlements.
• Technical and support information: device identifiers, session cookies, network information such as IP addresses, security events, diagnostic logs, browser storage, referral codes and messages you send us. The exact records depend on the services used.

3. How and why we use information

We use information to create and secure accounts, verify farm access, deliver farm tools and reports, store your records, manage staff permissions, provide requested analysis, administer subscriptions and credits, respond to support requests, investigate misuse and maintain the service.

Depending on the purpose and applicable circumstances, our legal bases are performance of a contract for requested services, compliance with legal obligations, consent for optional activities where required, and legitimate interests in security, fraud prevention, support and service reliability where those interests do not override your rights. We explain an optional use and obtain consent when required. Withdrawing consent does not invalidate processing that was lawful before withdrawal.

Optional newsletters, farming tips and offers are sent only when you opt in. You can withdraw this choice at any time through Email preferences on the homepage. Essential account, security and service messages are not marketing subscriptions. We record the policy version, time, account identity and your choices, including later changes.

4. Google account information

AgricIQ manages email/password authentication directly in Cloudflare D1 and supports Google sign-in. The following Google disclosures apply when you use that option. We use Google account information to authenticate you, create or link your AgricIQ account, maintain your session and help protect against account misuse. Google sign-in does not request access to your Gmail messages, Drive files, contacts or calendar.

We use and transfer information received from Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements where applicable. We do not sell Google account information, use it for personalised advertising, or use it to train general-purpose AI models.

You can remove AgricIQ’s connection through your Google Account’s third-party connections settings. This prevents future access through that connection; it does not automatically delete previously stored AgricIQ records. To request deletion of those records, contact us using the address above.

5. AI-assisted features

When you request AI-assisted analysis, relevant observations, images, clinical context or other submitted material may be sent to an AI provider to generate a response. The current application contains an OpenAI integration for this purpose. Do not include unnecessary personal information in images or prompts.

AgricIQ stores analysis results and associated usage information to provide your investigation history and administer credits. AI outputs can be inaccurate and require human review. They are decision support, not a veterinary diagnosis or prescription. Staff-agreement drafts do not decide hiring, dismissal, pay deductions or guarantor liability.

AI-provider retention and processing depend on the service configuration and applicable provider terms. We do not represent that all AI requests have zero retention. Contact us for information about the provider arrangement relevant to your request. Google sign-in information is not supplied as training data for general-purpose AI models.

6. Who receives information

Access depends on the task and permissions. Recipients may include authorised farm account users, AgricIQ personnel who need access for support or administration, and professional reviewers where you request or authorise their involvement. Personnel and other restricted records remain subject to their specific access controls.

The current service is hosted through OpenAI’s ChatGPT Sites, which supplies hosting and sign-in infrastructure. During the move to the independent service, providers include Cloudflare for hosting, authentication and farm data/file storage, and Google when you choose Google sign-in. The application also contains integrations with OpenAI for requested AI analysis, Resend for service emails, and Paystack for payments. Those integrations receive information only when the relevant feature is configured and used. Authentication email delivery will use the provider configured for that feature when it is made available.

We may disclose information when required by law, to respond to valid legal requests, or where lawfully necessary to protect rights and prevent fraud. We do not sell identifiable farm information.

7. Cookies and browser storage

We use cookies and similar storage for sign-in, session protection, device access and service functionality. The application stores a device identifier and may remember a referral code. The device-session cookie can last up to one year unless cleared, replaced or revoked; authentication storage follows the configured session settings.

You can clear browser storage or block cookies, but sign-in and some features may stop working. Clearing browser storage does not delete records held on our servers. We will explain any additional optional tracking and obtain consent where required before enabling it.

8. International processing and safeguards

Our providers may process information outside Nigeria. Cloudflare hosting and other provider processing may take place in additional countries. International processing is subject to applicable data-protection requirements. We restrict access according to role and use secure connections. Contact us for details of the safeguards applicable to your information; provider processing locations may differ from the selected database region.

No system is completely secure. Protect your sign-in credentials and contact us promptly if you suspect unauthorised access.

9. Retention and deletion

We retain information only for as long as needed for the purpose for which it was collected, including providing your account and requested history, resolving disputes, protecting the service and meeting applicable record-keeping obligations.

When you request account closure or deletion, we verify your authority, identify records that must be retained, and delete or de-identify eligible information. Backups and service-provider systems may require additional time to expire; restricted retained information is not used for unrelated purposes. Removing an uploaded object may not remove information already included in a saved report or a copy another authorised recipient has downloaded.

Retention and deletion targets:

• Account and farm records, including uploaded files: while the account remains active; delete eligible records within 90 days of verified account closure, unless retention is lawfully required.
• Staff and guarantor records: farm owners review necessity annually and remove records no longer needed, subject to applicable employment, dispute and record-keeping obligations. Contact the farm employer or AgricIQ to clarify the period applicable to a particular personnel record.
• Authentication and security logs: 90 days, with a documented extension for an active security investigation or legal obligation.
• Support messages: 12 months after resolution, unless needed for an ongoing dispute or legal obligation.
• Payment and accounting records: a six-year record-keeping target, with the applicable starting point and any shorter or longer period determined by the relevant legal obligation and record category.
• Backups: expire within 90 days after deletion from active systems; deleted information must not be returned to active use through routine restoration.
• AI-provider copies: retention and deletion follow the applicable provider configuration and contract; contact us for the arrangement applicable to your request.

For verified deletion requests, our service target is acknowledgement within three business days and completion in active systems within 30 days, subject to applicable law and explained exceptions. A verified deletion request takes priority over the general 90-day account-closure cleanup window. Backup expiry remains a separate period as described above. If technical or provider restrictions affect a request, we will explain the reason, the applicable safeguards and the expected completion time, subject to legal requirements.

These are operational targets, not a claim that every provider applies automated deletion or that these periods are statutory minimums. Documented legal holds and other lawful exceptions may require longer retention.

10. Your choices and rights

Subject to applicable law, you may request access to your personal information, correction, deletion, restriction or objection to processing, portability where applicable, and withdrawal of consent for consent-based processing. Contact info@agriciq.com and describe your request. We may ask for proportionate information to verify your identity or authority. Do not email passwords or unnecessary identification documents.

Some farm information can be exported through the application by authorised users. That export is not a complete copy of all personal data, files or security records; contact us for a broader access request. If your information was supplied by a farm employer or another account holder, we may need to coordinate with that organisation.

You may also complain to the Nigeria Data Protection Commission at https://ndpc.gov.ng. We aim to handle requests within the applicable legal time limits and explain any lawful limitation.

11. Children and policy changes

AgricIQ accounts are intended for adults managing agricultural activities. Do not create an account for a child or submit a child’s personal information through personnel workflows. Contact us if you believe such information has been submitted so we can investigate and take appropriate action.

We will publish the effective date and update this policy when our practices change. Where required, we will notify users of material changes and obtain consent for a new consent-based purpose.