Privacy Policy

01Purpose of this policy

At AgroEngine we handle your personal data responsibly and transparently. This policy explains what we collect, for what purposes, on what legal basis and what rights you have. We are built for Latin America and we start in Paraguay.

02Who is responsible

AgroEngine is operated by EchoSistema S.A. We act as the controller of the data we collect on the platform, and as a processor when we handle data on behalf of cooperatives, companies or accredited providers. We comply with the GDPR, the LGPD and the ISO/IEC 27000 and 27001 family of standards.

03Information you give us

Your account details: name, email, phone, language and channel preferences. Your fiscal identity, the RUC, at the point where you close a sale. Your operation as you declare it: farm, plots, crop cycles, management, inputs and harvest. What you publish: offers, buy requests, volumes, prices and quality specifications. What you attach as evidence of a lot: photographs and video. What you write to a counterparty inside the platform.

04Information the trade records

A trade leaves a record we never ask you for, and that record is the product: the match and the frozen pickup requisition, every custody transfer, the field conference and its result, discarded volumes with their catalogue reason, deliveries, acceptances, escrow movements, disputes and their decision, and whether a notice reached you. We also keep technical logs, such as IP address, device and session, for security and for diagnosing failures.

05How we use your information

We use your data to:

• Run the trade and its two gates: without knowing who holds what, at what volume and against what evidence, there is no custody chain.
• Prove what happened when a dispute is opened, so that a person at the back office decides on record and not on memory.
• Hold and release the escrow, and pay the right party the right amount.
• Reach you through the channel you chose, with the notices your own trades generate.
• Comply with legal, fiscal and anti-money-laundering obligations.
• Give producers an anonymous regional comparison and a harvest forecast that improves with every season recorded.

06Legal bases for processing

We process your data on one or more of these legal bases:

• Performance of the contract and delivery of the service you asked for.
• Your consent, for specific purposes such as commercial communications.
• Compliance with legal obligations, including fiscal duties and anti-money-laundering rules.
• Our legitimate interest in security, fraud prevention and improving the service.

07Who sees what

Your counterparty sees what the trade requires and no more. The public market showcase is anonymised by contract: it shows crop, available volume, price, region, country and delivery window, and withholds the parties, the farm, the cycle, the city and the pickup point. A transport agent, processor or warehouse sees the lot they hold, while they hold it. A certifier audits a processor's processes and never sees a lot or a negotiation. The payment hub sees the amounts it holds and releases. The back office sees what deciding a dispute requires. Authorities see what a valid legal order requires.

08Aggregates and forecasts

The regional comparison is anonymous by construction: a cell is published only with at least five producers, no single producer may dominate it, the geographic level is always labelled and there is always a national floor. Your forecast uses your own declared history plus that aggregate. No other user ever sees your individual figures, and there is no remote sensing of any kind: every field figure is one you declared.

09Third-party services

AgroEngine integrates services from its own group, such as Pigeons for WhatsApp, SMS and email delivery, and third-party services such as payment processors and hosting providers. We share only the data needed to fulfil your request. Each provider processes the data under its own policies and under agreements that require adequate levels of security and confidentiality.

10WhatsApp, SMS and email

Notices about your own trades reach you through the channel you chose, and you set the preferred channel, the hours and the frequency. Optional messages can be switched off at any time. Messages that belong to a running trade cannot, because they are how the other side reaches you and how a pickup gets confirmed.

11Cookies and preferences

AgroEngine uses cookies and similar technologies to keep your session, remember your preferences and understand how the platform is used:

• Necessary: essential for the site to work and to keep you signed in, including the token that protects forms against cross-site request forgery. They cannot be disabled.
• Preferences: remember your language and whether you chose the light or the dark theme.
• Analytics: help us understand platform usage in aggregate in order to improve it. Panel activity is excluded from the marketing funnel by design.

12Your rights

Under the GDPR and the LGPD, you have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Request the erasure of your data, the right to be forgotten, where applicable.
• Restrict or object to certain processing.
• Request the portability of your data to another provider.
• Withdraw your consent and lodge a complaint with the supervisory authority.

13Data retention

We keep your data while your account is active and for as long as the purposes described here require. One honest limit: closing your account does not erase the record of a closed trade. Its custody chain, its evidence and its payments are kept for the periods commercial and fiscal law requires, because that record is the proof of what happened and the counterparty has the same right to it that you do. After that, data is securely deleted or anonymised.

14International transfers

AgroEngine is built for Latin America and starts in Paraguay. Because hosting and some service providers sit outside the country, and because the platform will reach new markets, your data may be processed or stored outside your country of residence. Every international transfer is carried out with adequate safeguards, meaning contractual clauses, security measures and valid legal bases, in accordance with the GDPR and the LGPD.

15Compliance and information security

Three frameworks govern how we protect what you give us:

• GDPR (General Data Protection Regulation, EU 2016/679): the European framework. It sets principles such as minimisation and purpose limitation, requires a legal basis for each processing activity, and recognises rights such as access, rectification and erasure. We apply it to users in the European Economic Area and as a best-practice standard.
• LGPD (Lei Geral de Proteção de Dados, Brazil, Law 13.709/2018): the Brazilian data protection law, inspired by the GDPR. It defines legal bases, data-subject rights and the supervisory authority, the ANPD. We apply it in our operation in Brazil.
• ISO/IEC 27000 and 27001: the international family of information-security standards. 27001 specifies the requirements of an Information Security Management System: risk assessment, controls and continual improvement. They guide how we technically protect your data, complementing the legal duties of the GDPR and the LGPD.

16Minors

AgroEngine is for people of legal age acting in a commercial capacity. We do not knowingly open accounts for minors, and an account found to belong to one is closed.

17Contact and data protection officer

To exercise your rights or ask about the processing of your data, contact us through the official channels of the platform. We answer within the periods the applicable law sets. We have a data protection officer, and if you believe your rights were not addressed you may lodge a complaint with the competent supervisory authority.