Your farm. Your data. Your rules.

Data ownership

You own every record you enter. We hold it to run the service you asked for, and for nothing else.

• Field boundaries, soil tests, yields, applications, costs, and buyer contracts belong to your farm, not to us.
• We never sell, rent, or license farm-level data to seed companies, equipment vendors, lenders, insurers, ad networks, or government agencies.
• Aggregated regional benchmarks are published only from public USDA, NOAA, and extension datasets — never from customer records.
• If we ever want to use your farm's data for something outside running your account, we ask first, in writing, and a 'no' costs you nothing.

Encryption in transit and at rest

Traffic is TLS-encrypted end to end, and stored data sits on encrypted managed infrastructure.

• All site, app, and API traffic is served over HTTPS/TLS. Plain HTTP requests are redirected.
• The application database, file storage (soil-test uploads, contracts, exports), and backups are encrypted at rest by the managed cloud platform we run on.
• Passwords are salted and hashed by the managed authentication service — we never see or store them. Sign-in with Apple and Google are supported so you can avoid a password entirely.
• Payment card numbers never reach our systems: card entry is handled by Stripe and, on iOS, by Apple.
• Secrets (API keys, signing keys) live in the platform secret store, not in application code or the repository.

Backups and recovery

The database is backed up automatically by the managed platform, and your own copy is one click away.

• Automated daily backups of the application database are taken and retained by the managed cloud platform, with point-in-time recovery available on the production database.
• Schema changes ship as reviewed migrations, so a bad change can be traced and rolled forward deliberately rather than patched live.
• Your independent safety net is the CSV export — a copy you hold that does not depend on us existing.

Data deletion

Ask and we delete — within 7 days, with written confirmation.

• Email privacy@baufarmintelligence.com from your account address and we delete your account and its farm records within 7 days.
• You can also delete individual records — fields, soil tests, application logs, scenarios — from inside the app at any time.
• Deletion covers the live database and file storage. Encrypted backups age out on the platform's rolling retention schedule, after which the data is gone from those too.
• We keep the minimum required for law and accounting: invoices, tax records, and signed agreements. Those are retained separately and are not used to rebuild your farm profile.

How AI models use your data

We send only what a request needs, we do not train models on your farm, and every AI answer is labeled.

• AI is used in three narrow places: reading an uploaded soil-test report, answering questions in the advisor chat, and drafting summaries you explicitly ask for.
• Requests run through our server against Google Gemini models via the Lovable AI Gateway. We send the specific content needed for that request — not your full farm history.
• Your farm records are not used to train, fine-tune, or improve any third-party model, and we do not sell data to model providers.
• Nothing is sent to a model unless you take an action that asks for it. The calculators, benchmarks, planners, and record-keeping tools are ordinary arithmetic on published datasets, with no model in the loop.

Subprocessors

The short list of vendors that can touch customer data, and what each one is for.

• We keep this list short on purpose. Adding a subprocessor that handles farm data is a decision we publish here before it goes live.

Public data we read but send nothing to: USDA NASS, USDA AMS, NOAA, U.S. Department of Labor, Congress.gov, and land-grant extension publications. These are read-only public sources — we send them nothing about you.

What our recommendations can and cannot do

Every number is a projection built from stated assumptions, not a promise about your season.

• Yield, price, cost, and ROI figures are modeled from USDA NASS, USDA AMS, NOAA, DOL, and land-grant extension budgets — sources cited on the page where the number appears.
• Regional averages are not your farm. Your soil, water, labor, variety, and management will move the result, sometimes a long way.
• Prices and weather are forecasts. Nobody, including us, can tell you what a market or a season will do.
• Soil-test interpretation follows Southeast extension thresholds and is a starting point for a conversation with your agronomist or extension agent, not a replacement for one.

Human override

The farmer decides. The software never acts on its own.

• Nothing the platform generates is applied automatically. Fertilizer drafts, scenario plans, and zone recommendations all sit as drafts until you accept them.
• Every recommendation can be edited, overridden, or dismissed, and your override is what gets saved to the record — we do not quietly re-apply our version.
• You can enter and keep records the platform disagrees with. The validation warnings are advisory, and none of them block you from recording what you actually did.
• The full history of what was suggested versus what you did stays in your records, so an override is auditable rather than invisible.

Security incident process

Report it to us and you get a human, fast. If your data is involved, you hear it from us directly.

• Report a suspected vulnerability or incident to security@baufarmintelligence.com. We acknowledge reports within 2 business days.
• Good-faith security research is welcome: report it privately, do not access or modify other customers' data, and we will not pursue legal action.
• On confirming an incident we contain it first, then determine what data was involved and who is affected.
• We notify affected customers directly, in plain language: what happened, what data was involved, what we have done, and what you should do. We do not wait for a press cycle or bury it in a changelog line.
• After the fact we post what changed. Silent rollbacks are not how we operate.

CSV export and account portability

Leaving should be as easy as joining. Your records export in formats other tools can read.

• Field records, soil tests, application logs, irrigation, yields, scenarios, and farm reports export as CSV.
• Field boundaries and management zones export as GeoJSON, so they load into other GIS and precision-ag tools.
• Farm Intelligence Reports export as PDF, charts included, for lenders, buyers, and your own files.
• Export works while your account is active and during the wind-down after you cancel — we do not lock exports behind an upgrade or hold records hostage during a billing dispute.