DRAFT, not yet in effect
This page is a DRAFT summary and is not yet in effect. Commitments described here, including the model-training opt-out in principle 6, are not granted by the current Terms of Service until this draft is adopted after review by California ag and privacy counsel. Until this banner is removed, the controlling documents are the general Privacy Policy and the data terms in your signed agreement (LOI, MSA or Terms of Service).
Last updated: September 16, 2026 (DRAFT summary)
Your data. Your land.
Our job is to keep it that way.
Your sensor readings, pump records and field boundaries belong to you, not to us and not to whoever is paying us this quarter. This draft states the principles we intend to adopt, in plain English.
Ten principles
You own the raw readings.
Soil moisture, temperature, salinity and pump events are facts about your land. We hold them for you and license them only as you direct. We own the derived analytics: model weights, outputs, benchmarks and dashboards.
No one outside our service providers sees identifiable data without your written authorization.
Not your lender, insurer, buyer or packing house. Our service providers (cloud hosting, payments, and AI processing by Google and Anthropic) process it under contract and only to run the service for you. Any aggregated product would combine at least seven unaffiliated farms at county level or broader, with no GPS, APNs or field boundaries.
Sensor manufacturers stay off the critical path.
In BYOS you hold the manufacturer's account and we are the analytics layer; in Managed our field team holds it as your custodian under the signed agreement. Our commitments apply equally on both plans. We are seeking written confirmation of customer data ownership from the maker of IrriMAX and building direct probe-to-cloud ingestion.
You can export everything and leave.
Raw sensor data, pump records, dashboard inputs and generated outputs, in CSV, Parquet or JSON, within 30 days of a written request. Trained model weights stay with us; individual readings cannot be reconstructed from them.
You can delete your account and data.
On written request we delete your account, raw readings, GPS, APNs, field boundaries and contact details, with three exceptions: de-identified metrics already inside trained model weights, submission metadata needed for an active fraud investigation, and payment or contract records that tax law requires us to keep.
Model training, and the proposed opt-out.
Paid subscribers' sensor data trains the models behind our decision systems (three trained AI models are live in the irrigation decision today: SENTRY, WATCHDOG, PULSE; more are trained and staged behind promotion gates). This draft proposes an opt-out that keeps your dashboard and reports working while your data never feeds retraining or aggregated products. That opt-out is not granted by the current Terms of Service. Until this draft is adopted, the data license in Section 4 of the Terms applies. Free tools never train models.
No academic publication without consent for the specific study.
Each study names the researcher, dataset scope, venue and destruction date. Shared data is k-anonymized to k of at least 5 at the county-and-crop level, with GPS truncated and acreages bucketed.
We do not volunteer your data to regulators.
Not to a GSA, the State Water Resources Control Board, CDFA, USDA or county enforcement. We comply with a valid subpoena, warrant or court order, notify you unless legally barred, and require legal process rather than informal requests. Your SGMA reporting duty runs from you to your GSA; we prepare that data at your direction and never send it without your sign-off.
You hear about a breach within 72 hours.
Written notice within 72 hours of confirming an incident affecting your sensor data, credentials or personal information; root-cause follow-up within 7 days; post-incident review on request at 30 days.
The security basics behind the promises.
TLS in transit, AES-256 at rest, role-based access with client data isolation, multi-factor authentication on admin accounts, secrets in a managed vault, US-based Google Cloud infrastructure, daily backups, and logged admin changes.
What we don't do
- ✗Sell your raw farm data to lenders, insurers, processors, packing houses, advertisers or anyone else.
- ✗Share your GPS coordinates, APNs or field boundaries in any product we sell or license.
- ✗Act as an extension of any regulator. We are not a GSA reporting tool and no agency pays us to watch our customers.
- ✗Publish your data in academic work without separate written authorization.
Your rights under this draft
Know what data we hold (45 days), export it (30 days), correct it (45 days), delete it (45 days), opt out of model training or aggregated products (10 business days, once adopted), opt out of any sale or sharing of personal information (on receipt, including via a Global Privacy Control browser signal), and authorize a specific third-party share on request. Exercising any right never costs you more, degrades your service or ends your account.
Your rights under the CCPA and CPRA exist today regardless of this draft and are described in the Privacy Policy.
Contact
Email: info@agwaterai.com
Postal: AgWaterAI Inc., Bakersfield, California
You also have the right to file a complaint with the California Privacy Protection Agency (cppa.ca.gov).
This draft complements and does not replace the operative Privacy Policy or your signed agreement. Where this page and a signed contract appear to conflict, the signed contract controls until we reconcile in writing.