Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Register for an account: Username, email address, full name, phone number, company affiliation
• Use the Service: Customer data, farm information, field locations, blend formulations, quotes, orders
• Communicate with us: Support requests, feedback, correspondence
• Update your profile: Preferences, timezone, language settings

1.2 Information Collected Automatically

When you access the Service, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent, actions taken
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, API calls
• Location Data: General geographic location based on IP address

1.3 Business Data

The Service stores business-related data you input, including:

• Customer records and contact information
• Farm and field geographic data
• Fertilizer blend formulations and ingredient specifications
• Chemical inventory and regulatory information (EPA registrations, RUP licenses)
• Quote and pricing information
• Production records and blendsheets
• Delivery schedules and calendar events

2. How We Use Your Information

2.1 Service Provision

We use your information to:

• Provide, maintain, and improve the Service
• Process blend calculations and optimize formulations
• Generate quotes, blendsheets, and reports
• Manage customer relationships and farm data
• Integrate with third-party services (Google Calendar, Mapbox)
• Track regulatory compliance requirements

2.2 Communication

We use your contact information to:

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send important security or policy updates
• Provide technical support

2.3 Analytics and Improvement

We analyze usage patterns to:

• Understand how users interact with the Service
• Identify and fix technical issues
• Develop new features and improvements
• Optimize performance and user experience

2.4 Legal Compliance

We may use your information to:

• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service
• Protect our rights, property, and safety
• Prevent fraud and abuse

3. How We Share Your Information

3.1 No Sale of Personal Information

We do not sell your personal information to third parties.

3.2 Service Providers

We may share information with trusted service providers who assist us in operating the Service:

• Cloud Infrastructure: Hosting and data storage providers
• Email Services: Transactional email delivery
• Mapping Services: Mapbox for field mapping features
• Calendar Integration: Google Calendar API for delivery scheduling
• Analytics: Usage analytics and monitoring tools

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.3 Business Transfers

If SurBlend LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

3.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Requests from law enforcement or government agencies
• Protection of our legal rights or safety
• Investigation of potential violations of our Terms of Service

3.5 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Security

4.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: Data transmission secured via HTTPS/TLS
• Authentication: Password hashing using bcrypt
• Access Controls: Role-based permissions and authentication
• Database Security: Encrypted connections and access restrictions
• Regular Backups: Automated backup procedures
• Monitoring: Security logging and incident detection

4.2 Your Responsibility

You are responsible for:

• Maintaining the confidentiality of your account credentials
• Using strong, unique passwords
• Logging out after each session on shared devices
• Reporting any suspected security breaches

4.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

5. Data Retention

5.1 Retention Period

We retain your information for as long as:

• Your account is active
• Necessary to provide the Service
• Required by law or for legitimate business purposes
• Needed to resolve disputes or enforce agreements

5.2 Deletion of Data

Upon account termination or deletion request:

• We will delete or anonymize your personal information within 90 days
• Some information may be retained in backup systems for up to 180 days
• We may retain certain data as required by law or for legitimate business purposes
• Aggregated, anonymized data may be retained indefinitely for analytics

6. Your Privacy Rights

6.1 Access and Portability

You have the right to:

• Access your personal information
• Request a copy of your data in a portable format
• Receive information about how we process your data

6.2 Correction and Update

You can:

• Update your profile information at any time through the Service
• Request correction of inaccurate information
• Contact us to update information you cannot change yourself

6.3 Deletion

You have the right to:

• Request deletion of your account and associated data
• Remove specific information from your profile

Note: Some information may need to be retained for legal compliance or legitimate business purposes even after deletion request.

6.4 Objection and Restriction

You can:

• Object to certain processing of your information
• Request restriction of processing in certain circumstances
• Opt-out of non-essential communications

6.5 Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

7. Third-Party Services

7.1 Integrated Services

The Service integrates with third-party services that have their own privacy policies:

• Google Calendar: For delivery scheduling and calendar integration
• Mapbox: For field mapping and geographic visualization

Your use of these integrated services is subject to their respective privacy policies. We encourage you to review them.

7.2 Links to Other Sites

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

8. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where we or our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at [email protected].

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on the Service
• Updating the "Last Updated" date
• Sending an email notification to your registered email address
• Requiring re-acceptance upon your next login for significant changes

Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

12. Data Processing Summary

Data Category	Purpose	Legal Basis	Retention
Account Information	Service provision, authentication	Contract performance	Duration of account + 90 days
Business Data	Service functionality	Contract performance	Duration of account + 180 days
Usage Data	Analytics, improvement	Legitimate interest	18 months
Communication Data	Support, notifications	Contract performance	3 years
Legal/Compliance Data	Legal obligations	Legal requirement	As required by law