Summary: ZeroFarm collects only the data needed to operate the platform. We do not sell your data. You can request deletion at any time by emailing
hello@gozerofarm.com.
1. Who We Are
ZeroFarm ("we," "our," or "us") is a cloud-based agricultural platform operated by CimpleO Group. The platform is accessible at gozerofarm.com and its sub-domains. Our service connects urban farmers, produce buyers (restaurants, retailers, and distributors), and agronomists on a single software platform.
For questions about this policy, contact our data team at hello@gozerofarm.com.
2. Information We Collect
2.1 Account Information
When you register, we collect:
- Email address and hashed password
- Display name and role (Farmer, Buyer, or Agronomist)
- Profile information you choose to provide (phone number, business name, address)
2.2 Platform Activity Data
As you use the platform, we collect:
- Farmers: Farm listings, crop inventory, growing recipes, order fulfillment records, planting calendar entries, revenue data
- Buyers: Orders placed, cart contents, standing order configurations, request-for-quote submissions, review content
- Agronomists: Consultation records, advice notes, client associations
2.3 Usage and Technical Data
We automatically collect:
- Browser type, operating system, and device type
- IP address (used for security and fraud prevention only)
- Pages visited, features used, and session duration
- Error logs and performance metrics
2.4 Cookies
We use the following cookies:
- Authentication cookies: Supabase session tokens that keep you logged in. Essential for platform operation.
- Preference cookies: Store UI preferences such as language and display settings.
We do not use advertising or cross-site tracking cookies. You can disable non-essential cookies in your browser settings; note this may affect platform functionality.
3. How We Use Your Information
We use your data solely to:
- Provide, maintain, and improve the ZeroFarm platform
- Process orders, payments, and transactions between platform participants
- Send transactional notifications (order updates, new requests, delivery confirmations)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
- Generate anonymised, aggregated analytics to improve our service
We do not use your data for advertising, profiling for third-party purposes, or automated individual decision-making that produces legal effects.
4. Legal Basis for Processing
We process your personal data under the following legal bases (GDPR Article 6):
- Contract performance: Processing necessary to provide the services you have signed up for
- Legitimate interests: Platform security, fraud prevention, and service improvement
- Legal obligation: Compliance with applicable laws and regulatory requirements
- Consent: Where you have explicitly agreed (e.g. marketing communications, if offered)
5. Data Sharing and Third Parties
We share data only as follows:
5.1 Service Providers
- Supabase Inc. — Database hosting, authentication, and real-time data infrastructure. Data is stored on servers in Seoul, South Korea (ap-northeast-2). Supabase is SOC 2 Type II certified.
- Vercel Inc. — Application hosting and content delivery. Servers are located in the United States and the European Union.
All service providers are bound by data processing agreements and may not use your data for their own purposes.
5.2 Platform Participants
Certain data is visible to other platform participants as required for the service to function:
- Farmers can see order details from the buyer who placed the order
- Buyers can see farm profiles, crop availability, and farm reviews
- Agronomists can see farm data for clients who have engaged them
5.3 Legal Requirements
We may disclose data if required by law, court order, or to protect the rights, property, or safety of ZeroFarm, our users, or the public.
5.4 We Never Sell Your Data
We do not sell, rent, or trade your personal information to any third party for commercial purposes.
6. Data Retention
We retain your data for as long as your account is active. If you close your account:
- Account credentials and profile information are deleted within 30 days
- Order and transaction records are retained for 7 years for legal and accounting compliance
- Anonymised usage analytics may be retained indefinitely
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your account and associated personal data ("right to be forgotten")
- Data portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
- Restriction: Request that we limit how we use your data while a dispute is resolved
To exercise any of these rights, email hello@gozerofarm.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
8. Data Security
We implement the following security measures:
- All data in transit is encrypted using TLS 1.2 or higher
- Database access is protected by Row-Level Security (RLS) policies ensuring users can only access their own data
- Passwords are hashed using bcrypt and never stored in plain text
- Authentication tokens expire and are rotated regularly
- Access to production infrastructure is restricted to authorised personnel only
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying affected users in the event of a breach.
9. Children's Privacy
ZeroFarm is a business-to-business platform not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered on our platform, please contact us immediately at hello@gozerofarm.com.
10. International Data Transfers
Your data may be stored and processed in South Korea, the United States, and/or the European Union, where our infrastructure providers operate. When data is transferred outside your country of residence, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.
11. Changes to This Policy
We may update this policy periodically. We will notify registered users of material changes via email or an in-platform notification at least 14 days before the change takes effect. The "last updated" date at the top of this page will always reflect the most recent version.
Continued use of the platform after a policy update constitutes acceptance of the revised terms.
12. Contact
For privacy-related questions, requests, or complaints:
If you are in the European Economic Area and believe your rights under GDPR have not been met, you have the right to lodge a complaint with your local supervisory authority.
