Privacy policy

Last updated [date]

Draft. Parts marked [like this] still need your business details, and this policy should be reviewed by a lawyer before you rely on it.

GraziMap is run by [business name] (ABN [ABN]), “we”. This policy explains what information GraziMap keeps, why, and what you can do about it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

The short version

• Your farm’s records are yours. We keep them so the app can sync them between your phones, and for nothing else.
• We don’t sell your information, show advertising or share your records with anyone, except the service providers listed below that the app needs to work.
• You can export everything at any time, and ask us to delete it.

What we keep

• Your farm records — paddocks, boundaries, mobs and head counts, moves, treatments, sales (including NVD numbers, buyer PICs and prices if you enter them), rainfall, water checks, breeding and weight records, jobs, notes and photos.
• Account details — the farm name, the name and login of each person added to it, and their role. Passwords are stored only as a one-way scrambled form (a hash); we can’t see them.
• Sign-in and device records — when someone logs in: the time, the internet (IP) address and the type of browser or phone. Each device gets a random identifier so you can see and sign out devices. This helps keep your farm secure.
• Subscription details — whether a farm is on a trial or subscribed. Card details are handled by Stripe and never reach us.
• Questions to “Ask GraziMap” — see below.

The app also keeps a copy of your farm on each phone so it works with no signal. That copy stays on the phone until you log out.

Where it’s kept

Your records are stored on our server, a virtual private server hosted by [Hostinger International Ltd — confirm, and the data centre location], and backed up daily. Daily backups are kept for 45 days. [If you keep off-site backups, say where, e.g. “an encrypted copy is also kept on a computer in our office in Australia”.] Information sent between the app and our server is encrypted (HTTPS).

Service providers

• Anthropic (USA) — answers questions asked in “Ask GraziMap”. Only when someone asks a question, we send Anthropic the question, the conversation so far and a short summary of the farm made on the phone (paddock and mob names, rest days, stocking, recent rain, water and jobs). Anthropic processes this to produce the answer under its commercial terms, which do not allow it to use this information to train its models. If you’d rather nothing is sent, don’t use Ask GraziMap: the built-in help guide works on the phone without sending anything.
• Stripe (USA and Australia) — takes subscription payments. Stripe’s own privacy policy covers card and billing details.
• Map picture providers — the map pictures are loaded from the Queensland and NSW governments, Esri or OpenTopoMap. Like any website, they see the IP address of the phone asking for map pictures and which area is being viewed. They don’t receive your farm records.

Because Anthropic and Stripe are overseas, some information may be processed outside Australia. We take reasonable steps to make sure they protect it.

Who can see your farm

People you add to the farm, and visitor logins you create, can see the farm’s records according to their role. Owners can see the sign-in records for their farm. We look at a farm’s records only to keep the service running, to fix a problem you’ve asked us about, or if the law requires it.

Your choices

• Get a copy — Profile → Export saves everything; Records → Registers & exports gives spreadsheets.
• Correct it — change any record in the app, or ask us to correct account details.
• Delete it — ask us to close the farm’s account. We delete its records within 30 days; backups age out within 45 days after that.
• Remove a person — owners can remove people and sign out devices in Profile → People.

The demo farm

“Try the Demo” makes a sample farm just for that device. Nothing you enter there is shared with other devices, and demo farms are deleted after 3 days.

Children

GraziMap is for people running a farm business and isn’t directed at children.

Questions or complaints

Contact [name] at [email] or [phone / postal address]. We’ll reply within 30 days. If you’re not happy with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy we’ll update the date above, and tell owners in the app about any significant change.