Privacy Policy

This Privacy Policy describes how CortexForge ("we", "us", "our") collects, uses, and protects information when you use CortexForge Farm (the "Service") at farm.chemosi.com. By using the Service, you agree to the practices described in this policy.

We collect the following categories of information:

• Account data — email address, and (if you sign in with Google) your name and profile picture
• Farm data you enter — field geometry, crop selections, expense records, tasks, and any notes or messages you provide
• Location data — map interactions and field coordinates you save
• Usage telemetry — sign-up and sign-in events, feature interactions, page views, and timestamps
• Diagnostic data — crash reports, error stack traces, request identifiers, and performance metrics
• Device data — IP address, browser type, and operating system, collected automatically when you access the Service

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate AI-driven crop, soil, weather, and finance recommendations based on the farm data you enter
• Send transactional emails, including sign-in links and account notifications
• Monitor performance, debug errors, prevent abuse, and improve the Service
• Communicate with you about service updates and changes
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information. We do not use the farm data you enter to train AI models.

We rely on the following processors to operate the Service. Each is contractually obligated to protect your data and use it only for the purposes we direct:

• Supabase — authentication and database storage
• Mapbox — map rendering and geocoding
• Anthropic — AI recommendations and decision support
• Sentry — error monitoring
• Axiom — usage analytics
• Resend — transactional email delivery
• Google — OAuth sign-in (if you choose to sign in with Google)
• Vercel — hosting and content delivery

Some of these processors store and process data outside Kenya, including in the United States and the European Union. By using the Service you consent to these international transfers, which are carried out under the safeguards each processor provides.

We retain personal information only for as long as necessary to provide the Service and meet the purposes described in this policy:

• Account and farm data — for as long as your account is active
• Usage telemetry and diagnostic data — up to 90 days, after which it is automatically deleted or anonymised
• Backups — encrypted backups containing your data are retained for up to 30 days after deletion

When you delete your account, we permanently delete your personal data within 30 days, except where we are required by law to retain it. Anonymised, aggregated data that cannot be traced back to you may be retained indefinitely for analytics.

Under the Kenya Data Protection Act, 2019, and applicable data protection laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Receive a copy of your data in a portable format
• Lodge a complaint with the Office of the Data Protection Commissioner of Kenya

To exercise any of these rights, email us at hi@chemosi.com. We will respond within 30 days.

We protect your data using industry-standard practices: TLS encryption for data in transit, encryption at rest through Supabase, row-level security policies on the database, and the principle of least privilege for staff access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to the Service, please contact us at hi@chemosi.com and we will delete it promptly.

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated via email to active users at least 14 days before they take effect.

Questions or concerns about this policy or your personal data? Email us at hi@chemosi.com.