What we collect, what we don't, and how we keep your farm data safe.
Last updated: June 11, 2026.
Your farm data is yours
We host it, secure it, and export it on request. We do not sell it, share it, or train foundation models on it.
No cross-tenant leakage
Every query, export, and AI retrieval is filtered by farm_id at the data layer. The AI cannot see another farm's records.
No static keys
We use Vercel OIDC to authenticate to AWS. No long-lived secrets in environment files.
Append-only audit trail
Every write to money, inventory, and livestock is logged. Queryable. Exportable. Yours.
What we collect
Account data (name, email, hashed password), farm data you enter (production units, mortality logs, feed records, sales, expenses, notes, photos), and usage telemetry (page loads, AI runs, credit spend). We do not collect location beyond what you explicitly provide.
What we don't collect
We do not sell your data. We do not share it with advertisers. We do not train our base models on your farm records. We do not track you across the web.
How we use AI
The FarmOps Assistant uses Amazon Bedrock (Nova 2 Lite) on AWS us-east-1. Your data is sent to Bedrock only when an assistant run is in flight. We do not store prompts or completions on Bedrock; we store run metadata (id, cost, citations) in your farm.
Multi-tenant isolation
Your farm is a tenant. Every read and write is scoped by farm_id. The RAG retrieval pipeline applies the same filter at the SQL level. If you are an admin, you can only see farms you have been invited to.
AI training opt-out
We do not train foundation models on your records. If a future feature changes that, we will require an explicit opt-in. Right now, the answer is no — for every customer, on every plan.
Cookies and analytics
We use first-party cookies for session and theme. We use Vercel Analytics for aggregated, cookieless page-view metrics. We do not run third-party advertising or tracking pixels.
Data export
You can export your farm data at any time as a JSON bundle — every record, yours to keep. Exports are generated by you, for you, with no manual approval step from us.
Account deletion
You can delete your account from Settings. We soft-delete immediately, hard-delete within 30 days, and provide a 7-day grace window where you can recover. After hard-delete, your data is gone from primary, replicas, and backups.
Subprocessors
AWS (Aurora, S3, Bedrock) — primary compute, storage, and AI. Vercel — hosting and analytics. Both are bound by data processing agreements. We do not use any other subprocessors.
Contact
Privacy questions: hello@farmops.app. We read every message.
A note on AI training
We don't train models on your records. If we ever change that, you'll see a setting — and we'll ask before turning it on.
Read the AI deep-dive