Privacy policy

1. Controller

Data controller: Roberto Chavarría (Mi Finca), Costa Rica. Contact: soporte@mi-finca.com.

2. What data we process and why

We process two sets of data, for different purposes:

• Demo or trial form at mi-finca.com: name, e-mail, phone (optional), farm name and area, message, language and the date you accepted this policy. Purpose: to contact you to show the demo or open your trial. Basis: your consent.
• Use of the application: each user’s e-mail and name, the farm they belong to, and the operational records the farm enters (animals, production, sales, finance, photos). Purpose: to provide the contracted service. Basis: performance of the contract (the terms).
• Technical logs: IP address, browser and application errors, solely for security and fault diagnosis.

3. Who else processes the data

To run the service we use providers that process data on our behalf, under contracts that oblige them to protect it. Some are outside Costa Rica:

• Neon (United States): the database holding the farm’s records and the form submissions.
• Vercel (United States): hosting of the site, the dashboard and the console; photo storage; cookie-less web analytics.
• Render (United States): the API servers that process every operation.
• Kinde: user authentication (e-mail, name, encrypted password, sign-in).
• Brevo: transactional e-mail (invitations, notices, request confirmations).
• Anthropic (United States): the AI assistant and label scanning send the question and the data strictly needed to answer; Anthropic does not train models on that data.

4. How long we keep it

Form submissions: 12 months from submission; then deleted. Farm data: while the account exists and 90 days after cancellation, unless a legal obligation requires keeping something longer. Technical logs: 90 days.

5. Your rights

You can request access to your data, correct it, have it deleted or stop its processing (ARCO rights), and withdraw the form consent at any time. Write to soporte@mi-finca.com stating your request; we answer within 10 business days. If you are not satisfied, you can turn to the Agencia de Protección de Datos de los Habitantes (PRODHAB).

6. Cookies and analytics

The public site uses no tracking or advertising cookies. Vercel analytics counts visits without cookies or identifying people. The application stores a Kinde session cookie to keep you signed in and the theme preference (light or dark) in your browser.

7. Security

Data travels encrypted (HTTPS), is stored with providers that encrypt at rest, and each farm can only see its own data: the per-farm separation is built into the base of the system. Administrative access is recorded in an audit log.

8. Minors

The service is aimed at farms and adults. We do not knowingly collect data from minors.

9. Changes

If we change this policy, we will publish the new version here with its date and notify active farms by e-mail when the change is material.