1. Information We Collect

Information You Provide

• Account Information: Name, email address, phone number, farm location, acreage
• Payment Information: Credit card details (processed by Stripe)
• Farm Data: Crop types, irrigation schedules, soil moisture readings
• Uploaded Images: Field photos, well meter readings, gauge photos, and other images you upload through our platform for analysis or record-keeping
• Communications: Emails, support requests, feedback

Information Collected Automatically

• Sensor Data: Soil moisture, temperature, and other readings from connected devices
• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, IP address, device identifiers

2. How We Use Your Information

For all users, we use information to:

• Provide and improve our irrigation management services
• Send alerts, recommendations, and compliance reports
• Process payments and manage your subscription
• Respond to your inquiries and provide customer support
• Comply with legal obligations

3. Data Aggregation and Commercial Use

As a condition of Pro/Premium subscription, we anonymize and aggregate your sensor data with data from other subscribers to create "Aggregated Data" products. This is how we keep costs low while improving AI accuracy for everyone.

Our Aggregation Standards:

• Minimum 7 farms: Data is always combined from at least 7 unaffiliated farming operations
• No GPS coordinates shared: Your field locations are used internally only and are NEVER included in sold data products
• Regional geography only: Aggregated products contain only county-level or basin-level geography
• Cannot identify you: Individual farms and farmers cannot be identified in Aggregated Data

What We Sell (Aggregated Data Products):

• ORACLE Basin Indices: Regional water stress signals for financial institutions
• Supply Chain Verification: Aggregate sustainability metrics for food processors
• Compliance Intelligence: Basin-level usage patterns for water agencies

What We Never Sell:

• Your Raw Data (individual sensor readings, pump logs, etc.)
• Your GPS coordinates or field boundaries
• Any data that could identify your specific farm operation

Note: Anonymized data contribution is a condition of Pro/Premium service per our Terms of Service. This enables us to provide accurate AI predictions at affordable prices. If you prefer not to contribute data, our free SGMA Calculator tools remain available with no data collection.

4. Information Sharing

We may share your information with:

• Service Providers: Payment processors (Stripe), cloud hosting (Vercel, Google Cloud), AI processing services (Google Cloud AI), analytics providers
• Partners: AgWaterAI field service partners
• Institutional Clients: Aggregated, anonymized data only (with your consent)
• Legal Requirements: When required by law or to protect our rights

We do not sell your personally identifiable farm data to third parties.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure.

5a. Security Logging and Form Submission Metadata

When you submit a form on our website, request a demo, verify your email, or book a consultation (including the SGMA Calculator, Interest Form, Penalty Calculator, Contact Form, demo booking, trial signup, or similar), we automatically log a small set of submission metadata for the limited purpose of preventing fraud, abuse, and automated form spam. Specifically, we log:

• IP address of the submitting device
• Browser type and version (User-Agent string)
• Submission timestamp
• Approximate geographic region (country, state, and city) derived from the IP address

Purpose: this metadata is used solely to detect and prevent fraudulent submissions, duplicate or automated submissions, form-fuzzing or bot abuse, and to investigate suspected misuse of our services. It is also used internally to assess lead quality (e.g., flagging submissions whose location is inconsistent with the farm location entered) so we can prioritize legitimate inquiries and follow up appropriately.

Internal use only: this submission metadata is accessible only to AgWaterAI's principals and authorized staff. It is not shared with third parties, not used for advertising or behavioral targeting, and not sold or licensed in any aggregated product. It is a routine security and customer-quality logging function.

Retention: submission metadata is retained for up to 24 months from the date of submission, after which it is deleted or anonymized. We retain it for this period to support investigation of fraud patterns, dispute resolution, and analysis of recurring abuse from the same source.

If you submit a form on our website, you consent to this routine security logging. California residents retain all rights under Section 7 below (including the right to request deletion of identifiable metadata, subject to legitimate-interest exceptions for ongoing fraud investigation).

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We retain sensor and irrigation data to improve our models and provide historical reporting. You may request deletion of your data at any time, subject to legal retention requirements.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request information about what personal data we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, contact us at privacy@agwaterai.com. We will respond within 45 days as required by law.

7a. Partner Program Data (Tier A / Tier B / Tier C)

If you apply to or participate in our Partner Program (channel partners, individual advisors, or customer referrals at agwaterai.com/partners or agwaterai.com/customers/refer), we collect and process additional data beyond what we collect from product users:

• Identity and contact: legal name, business name, email, phone, country, state, county.
• Business eligibility: entity type (LLC / S-Corp / C-Corp / partnership / sole proprietor / individual), primary employment type, primary employer name (used to screen Cal. Penal Code § 641.3 distributor-employed conflicts), AgWaterAI revenue concentration estimate, expected hours per week, NRCS TSP touchpoint indicator.
• Credentials: CCA / PCA / NRCS TSP IDs and license numbers (advisor tier only; used to verify you can lawfully advise California growers).
• Tax forms: Form W-9 (US), Form W-8BEN (foreign individual), or Form W-8BEN-E (foreign entity), as required for any cash compensation tier under IRS Reg. § 1.6041-1.
• Payout details: ACH routing (US partners), Wise account (international), or Stripe customer-balance credit (Tier C). Bank routing data is held by our payment processor (Stripe / Mercury); we hold only the metadata needed to reconcile payments.
• FTC endorsement attestations and Customer Referral Terms acceptance click-through: stored as immutable audit records.

Who we share Partner Program data with:

• Track1099: for issuing Form 1099-NEC at year end (cash-paid partners only).
• Stripe: for processing customer-balance credits (Tier C) and ACH payouts (Tier A / Tier B). Stripe acts as our payment processor and is bound by its own privacy policy.
• Postmark: for transactional notification and confirmation emails. Postmark is bound by its own privacy policy.
• Mercury / Wise: for ACH and international wire payouts.
• The California Employment Development Department (EDD): solely if served with a subpoena or audit request under CUIC §§ 1126-1135. We have no affirmative duty to share this data outside an audit.
• The Internal Revenue Service (IRS): solely as required by Form 1099-NEC information returns and any audit response.
• NRCS California State Office: solely for partners with an NRCS TSP touchpoint, where written conflict-of-interest disclosure is required under 7 CFR § 652.39 (mitigating factor) and 2 CFR § 200.318(c) (procurement standards). See our TSP Filing Playbook for the disclosure flow.
• Counsel: for routine compliance review.

Retention: Partner Program records are retained for eight (8) years from the later of (a) the last referral submitted, (b) the last 1099-NEC issued, or (c) the last credit applied. The 8-year period is calibrated to the outer EDD limitations period under CUIC § 1132 for unfiled returns. After this period, identifying data is deleted or anonymized.

Your rights: California residents who participate in the Partner Program have all of the CCPA / CPRA rights described in Section 7 above, including the right to request deletion. Note that we may retain redacted records of payments made to you to satisfy our IRS / EDD recordkeeping obligations even after a deletion request, as permitted by Cal. Civ. Code § 1798.105(d)(7).

Notice of Financial Incentive (CCPA § 1798.125(b)): Partners receive cash or non-cash compensation tied to referrals. The full Notice of Financial Incentive is published at agwaterai.com/legal/notice-of-financial-incentive.

8. Cookies and Tracking

We use cookies and similar technologies to improve your experience, analyze usage, and remember your preferences. You can control cookies through your browser settings.

9. Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our platform. Your continued use after changes constitutes acceptance.

11. Contact Us