Privacy Policy

This Privacy Policy is a template provided for informational purposes only and does not constitute legal advice. It should be reviewed and customized by a qualified attorney licensed in your jurisdiction before being published or relied upon.

This Privacy Policy describes how Quality Plus Systems Inc ("we," "us," or "our") collects, uses, stores, and shares your personal information when you use QualityHerd ("Service"). We are committed to protecting your privacy and the security of your agricultural data. By using the Service, you consent to the practices described in this policy.

We collect the following categories of information: **Account Information:** When you create an account, we collect your name, email address, farm name, country, and unit preferences. If you sign up via a third-party provider (e.g., Google OAuth), we receive basic profile information from that provider. **Herd and Farm Data:** The livestock records you input into the Service, including animal details (tag, breed, weight, health events, breeding records), financial transactions, and farm operational data. **Payment Information:** When you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number or payment details on our servers. Stripe processes your payment subject to their privacy policy. We retain a record of your subscription tier, billing status, and transaction history. **Usage Data:** We automatically collect information about how you interact with the Service, including IP address, browser type, device type, operating system, pages visited, actions taken, timestamps, and referring URLs. **Communications:** If you contact us via email or our support channels, we retain the content of your messages and your contact information to respond to your inquiry.

We use your information for the following purposes: - **To provide and maintain the Service**, including hosting your data, processing transactions, and delivering features. - **To personalize your experience**, such as formatting weights, dates, and currencies according to your country settings. - **To communicate with you**, including sending service-related emails (e.g., account confirmations, billing receipts, security alerts), and, with your consent, marketing communications. - **To improve the Service**, by analyzing usage patterns, diagnosing technical issues, and developing new features. - **To ensure security and prevent fraud**, by monitoring for unauthorized access, abuse, and violations of our Terms of Service. - **To comply with legal obligations**, where required by law, regulation, or legal process.

Your data is stored on secure cloud infrastructure provided by Supabase, which uses industry-standard encryption (TLS 1.2+ in transit, AES-256 at rest). Access to your data is restricted through Row Level Security (RLS) policies that isolate each farm's data. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We share information with the following third-party processors, solely for the purposes of providing and improving the Service: - **Stripe** , Payment processing. Subject to [Stripe's Privacy Policy](https://stripe.com/privacy). - **Supabase** , Database hosting, authentication, and real-time sync. Subject to [Supabase's Privacy Policy](https://supabase.com/privacy). - **Mailchimp (Intuit)** , Email marketing and transactional emails. Subject to [Mailchimp's Privacy Policy](https://intuit.com/privacy). - **Buffer** , Social media management. Subject to [Buffer's Privacy Policy](https://buffer.com/privacy). - **Zapier** , Workflow automation integrations. Subject to [Zapier's Privacy Policy](https://zapier.com/privacy). We require all third-party processors to maintain appropriate security and privacy protections for your data.

We do not sell, trade, or rent your personal information or farm data to third parties. We may share your information only in the following circumstances: - **With your consent**, such as when you share your herd snapshot publicly or generate a vet sharing link. - **With service providers** who assist us in operating the Service (as described in Section 5). - **For legal compliance**, if required by law, subpoena, court order, or governmental regulation. - **In connection with a business transfer**, such as a merger, acquisition, or sale of assets, with notice to you. - **To protect our rights**, including enforcing our Terms of Service and protecting the safety of our users.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR): - **Right of Access** , You can request a copy of the personal data we hold about you. - **Right to Rectification** , You can request correction of inaccurate or incomplete data. - **Right to Erasure ("Right to Be Forgotten")** , You can request deletion of your personal data, subject to legal retention obligations. - **Right to Restrict Processing** , You can request that we limit how we use your data. - **Right to Data Portability** , You can request your data in a structured, commonly used, machine-readable format. - **Right to Object** , You can object to processing of your data for certain purposes, including direct marketing. - **Right to Withdraw Consent** , Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at [email protected]. We will respond to your request within thirty (30) days.

Depending on your US state of residence, you may have additional rights under applicable state privacy laws (e.g., California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA)). These may include: - The right to know what personal information we collect, use, and disclose. - The right to request deletion of your personal information. - The right to opt out of the sale of personal information (we do not sell your data). - The right to non-discrimination for exercising your privacy rights. To exercise these rights, contact us at [email protected].

We retain your account information and farm data for as long as your account is active. If you delete your account, we will remove your personal data within thirty (30) days, except where retention is required for legal, regulatory, or legitimate business purposes (e.g., billing records, which we retain for seven (7) years for tax and accounting compliance).

The Service uses essential cookies to maintain your session, remember your preferences, and ensure security. We do not use third-party advertising cookies or tracking pixels. Usage data is collected via server-side logging and does not rely on browser cookies. You can control cookie settings through your browser preferences, though disabling essential cookies may impair Service functionality.

The Service is not intended for use by children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

Your data may be processed in the United States or other countries where our service providers operate. For transfers of data from the EEA, UK, or Switzerland to the United States, we rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards to ensure your data is protected in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of the Service after such changes constitutes acceptance of the revised policy.

To exercise your privacy rights, submit a data request, or ask questions about this Privacy Policy, please contact us at [email protected]. For GDPR-related inquiries, our Data Protection Officer can be reached at the same address.