Privacy Policy
Last updated: May 2026
1. Data Controller
This Privacy Policy covers both the Harvest Mate marketing website (harvest-mate.com) and the Harvest Mate application (app.harvest-mate.com). The data controller for both is PRIME SCALE SOLUTIONS SRL (CUI RO 53222130), with its registered office at Str. Constructorilor 7, Sfântu Gheorghe, Covasna, 520077, Romania. For any privacy-related question, contact us at contact@harvest-mate.com.
2. Marketing Website — Data Collected
On harvest-mate.com we collect only data you actively provide or that is generated by standard web traffic. The contact form collects your name, email address, optional farm size, subject and message so we can respond to your inquiry. If you consent to analytics cookies, Google Analytics 4 processes anonymised usage data such as page views and approximate location. No other personal data is collected on the marketing website.
3. Application — Data Collected
When you use the Harvest Mate application, we process the following data to provide the service: your name and email address; login credentials (stored in hashed form) or, if you use Sign in with Google, your Google identity; an optional profile photo you choose to upload; your farm name and location; GPS coordinates of field boundaries that you draw, upload or import from APIA; operational records you enter (field jobs, inventory movements, equipment events and invoices); billing address and subscription plan details; and IP address and device information collected for security purposes.
4. Legal Bases
Contact-form data is processed on the basis of our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR). Analytics on the marketing website are processed only with your consent (Art. 6(1)(a) GDPR). Application account data, field data and operational records are processed to perform the contract with you (Art. 6(1)(b) GDPR). Payment data is processed to execute the subscription agreement (Art. 6(1)(b) GDPR). Security records are processed on the basis of our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).
5. Third-Party Processors
We share data with the following processors only to the extent necessary to provide the service. Hetzner Online GmbH (Germany, EU) hosts our servers and all application data; no transfer outside the EU takes place. Stripe, Inc. (USA) processes subscription payments and receives the billing information you provide; no card or bank data is stored by us — Stripe handles all payment instrument data directly. Resend, Inc. (USA) delivers transactional emails such as account verification and password-reset messages; it receives your email address for delivery purposes only. Google LLC (USA) powers Sign in with Google and the interactive maps used for field drawing; Google receives your IP address and map-interaction data when you use these features. The Copernicus Data Space service operated by the European Space Agency (EU) provides satellite imagery; your field boundary coordinates are transmitted to retrieve imagery relevant to your fields. We do not sell your data or share it for advertising purposes.
6. International Transfers
Stripe, Resend and Google are headquartered in the United States. Transfers to these processors are conducted under Standard Contractual Clauses approved by the European Commission, in compliance with Chapter V of the GDPR.
7. Retention
Account and farm data is retained for as long as your account is active. Following account deletion, personal data is removed within 30 days, except where retention is required by law — financial records are retained for 10 years under Romanian accounting legislation. Security records are retained for 12 months. Marketing-site analytics data is subject to Google Analytics 4 retention settings (13 months by default).
8. Your Rights
Under the GDPR you have the right to access the personal data we hold about you, to request its correction or deletion, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent for analytics at any time. You may also lodge a complaint with the Romanian data protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro. To exercise any of these rights, contact us at contact@harvest-mate.com.
9. Contact
Data controller: PRIME SCALE SOLUTIONS SRL, Str. Constructorilor 7, Sfântu Gheorghe, Covasna, 520077, Romania. Email: contact@harvest-mate.com.