Privacy policy

01Data controller

Owner

Kunz Pazer Stanley

Business name

Kunz Global

RUT

220451740014

Registered tax address

Ruta 1 km 51, Departamento de San José, República Oriental del Uruguay

Product / brand

Agralon

Business unit

Kunz Agrotech (Kunz Global)

Country

Uruguay

Email

contact@agralon.com

02Scope

This policy applies to:

• the public website agralon.com, which provides information about Agralon;
• the web application app.agralon.com and the mobile app for pilots, which customer companies use to run their operations;
• the public demo demo.agralon.com, a sample company for exploring the application without creating an account.

The two process data very differently: the public website hardly processes any personal data, while the application stores the information each company enters to do its work. We therefore describe them separately where relevant.

03Data we process

Public website (agralon.com)

• Technical data the server logs when delivering pages, such as IP address, date and time, requested page and browser type.
• The data you send us if you email us, such as your name, company, email address and the content of your message.

The website has no forms, creates no accounts and uses no cookies or browser local storage.

Public demo (demo.agralon.com)

• The demo works without an account and without a connection to the application's database: there is no sign-up or sign-in, and the company, customers, pilots and figures it shows are fictitious.
• Changes you make in the demo are saved only in your browser's local storage. They are not sent to Agralon or to other users and disappear when you reset the demo or clear your browser data.
• As on the public website, the server logs technical access data such as IP address, date and time, requested page and browser type.
• For weather, place search and sample PDFs, the demo calls our server with the coordinates, the search text or the sample data. The server uses them only to answer and does not link them to any account.

Application (app.agralon.com and mobile app)

• Account: email address, password (stored by the authentication service only as a hash), role in the company and sign-in dates. The account profile also keeps the last places you searched in Weather (up to 8, with name and coordinates) and the date of the latest AGRALON news you have seen, so the app and the web do not show them again. If you arrived through a campaign link (for example from WhatsApp or Instagram), we keep only that campaign's source (for example “whatsapp”) at sign-up, to learn through which channels companies arrive; we do not keep which pages you visited.
• Company: name, country, language, currency and time zone and, if filled in, address, tax ID, phone, email, bank details and logo for documents.
• Customers and fields: customer name, phone, email and language; farm and field names, crops, geographic boundaries, areas, markers and access notes.
• Pilots and team: name, phone, linked user, absences, licences or certificates with number, issuer and expiry date, and pay terms where the company records them.
• Jobs: dates, assignments, statuses, field events (start, pauses, refills, finish), areas, products, observations with location, incidents, reports and signatures with the signer's name.
• Photos and documents: evidence photos and signatures uploaded from the app, and generated PDF documents.
• Fleet: machines, batteries and equipment with serial numbers, maintenance and usage.
• Finance: quotes, invoices, payments and expenses, visible only to users with finance access.
• Weather: forecasts saved per field and who requested them.
• Activity: records of which user performed each action and when, and in-app notifications.

We do not ask for sensitive data within the meaning of Law No. 18,331, such as health data or racial origin. Please do not enter such data in free-text fields.

04Purposes

• Creating and managing accounts, signing in and recovering passwords.
• Providing Agralon's features: customers, fields, jobs, pilots, fleet, weather, reports, quotes and invoices.
• Storing and synchronising data between the web application and the pilot app, including when working offline.
• Generating PDF documents and preparing messages the user chooses to share, for example via WhatsApp.
• Answering questions and providing support.
• Protecting the platform: access control, abuse prevention and fixing errors.
• Complying with legal obligations.

We do not use the data for advertising, we do not sell it and we do not build marketing profiles.

05Legal basis

Under Law No. 18,331 we process data:

• to perform the contractual relationship with the customer company and provide the requested service;
• with the person's consent where required, for example when creating an account or writing to us;
• to comply with legal obligations.

If we provide the service to people located in the European Economic Area, the General Data Protection Regulation (GDPR) may also apply. In that case the legal bases are performance of a contract (Art. 6(1)(b)), compliance with a legal obligation (Art. 6(1)(c)), legitimate interest in the security and operation of the platform (Art. 6(1)(f)) and, where requested, consent (Art. 6(1)(a)).

06Processors and providers

We use the following providers to deliver the service. Each receives only the data needed for its function.

When a user chooses to open a WhatsApp or Google Maps link from the application, those services process data under their own policies.

07International transfers

Some providers process data outside Uruguay: the application database is hosted in Brazil, and hosting, maps and email may process data in the United States, Switzerland or other countries. We therefore cannot guarantee that all data stays in Uruguay.

International transfers of personal data are governed by Article 23 of Law No. 18,331 and the rules of the Unidad Reguladora y de Control de Datos Personales (URCDP). Where the destination country does not offer an adequate level of protection under those rules, a transfer only takes place in the cases the law allows, such as the person's consent, performance of the contract or sufficient contractual safeguards. A contract with a provider does not by itself legitimise every transfer; each case is assessed against those rules.

For questions about these transfers, write to contact@agralon.com.

08Retention

We keep data for as long as it is needed to provide the service, maintain the relationship with the customer company or comply with legal obligations; the rest of the data is kept for as long as your account or workspace exists. We also set specific time limits: backups are overwritten or deleted after 30 days; security and platform logs are kept for 12 months; a workspace closed because it ran out of members can be restored for up to 30 days, after which it is permanently deleted; and the hash of your email address that enables that restoration is also kept for only 30 days.

When a record is deleted in the application it is marked as deleted and no longer shown, but it remains in the database so that jobs and documents stay traceable. You can delete your personal account yourself from the app or the web application, as explained in "Deleting your account"; for other company records, permanent deletion can be requested by email.

Team invitations expire after 7 days, and links to view photos and signatures are temporary (10 minutes). Signing out of the mobile app deletes the local copy of the data and the sync queue from the phone; photos taken remain in the app's internal storage.

We make backups of the database, kept on equipment controlled by the controller for 30 days; after that they are overwritten or deleted. Until then, a backup may still contain data you have already deleted in the application.

09Security

• Encrypted connections (HTTPS) between the browser or app and our services.
• Access control per company and role (owner, admin, pilot) enforced in the database itself: each user sees only their company's data, and pilots see only the jobs assigned to them, without access to customers or finance.
• Photos, signatures and logos in private storage, accessible only through temporary links.
• Team invitations are stored only as a cryptographic hash and are tied to the invited email address.
• In the mobile app, the session is kept in the device's secure storage.

No measure is infallible. If we detect a security incident affecting personal data, we will act in accordance with applicable law.

10Your rights

Under Law No. 18,331 you have the right to:

• Access: know which of your data we process.
• Rectification and updating: correct inaccurate or outdated data.
• Inclusion: ask for missing data to be added.
• Erasure: ask for your data to be deleted where applicable.
• Challenge: contest personal assessments based solely on automated processing.

You can exercise these rights by writing to contact@agralon.com. We will ask for what is needed to verify your identity and reply within the legal time limits. If you receive no reply or disagree with it, you can turn to Uruguay's Unidad Reguladora y de Control de Datos Personales (URCDP) or bring a habeas data action.

Where the GDPR applies, you also have the right to restriction of processing, data portability, to object to processing based on legitimate interest, to withdraw consent at any time and to lodge a complaint with the competent supervisory authority.

If your data was entered by a company that uses Agralon (for example because you are its customer or pilot), the quickest route is to contact that company. You can also write to us and we will get in touch with them.

11Deleting your account

You can delete your personal account at any time from the app or from app.agralon.com. Deletion is immediate and signs you out on every device. If you own a company with other active members, you must first transfer ownership to another member; if you are its only member, your workspace closes together with your account.

We delete your sign-in data, your account name and profile picture, your recent Weather places, your community profile, your notifications, your own Market listings with their photos and contact details, and your Agralon titles or badges. Data the company keeps as a business (jobs, reports, customers, invoices) stays in its workspace; there your account appears only as an anonymous reference ("deleted account"), and the company is responsible for that data.

A workspace closed because it ran out of members can be restored on request within 30 days, only with a new account using the same email address; after that its contents are permanently deleted.

Database backups are overwritten or deleted after 30 days (see "Retention"). Security and platform logs that record that an account was deleted, without the email address, are kept for 12 months. To be able to restore a closed workspace during those 30 days, we keep only a cryptographic hash of your email address for that same period; your email address is replaced everywhere it was stored (account, invitations, logs).

If you cannot access your account, first try resetting your password at app.agralon.com; if that is not possible, write to support@agralon.com from your account's email address and we will confirm your identity that way. The full steps are in Delete your account.

12Third-party data entered by customers

Companies that use Agralon enter data about their own customers, pilots, employees and contacts, and decide which data they record and why. For that data the customer company normally acts as the controller and must make sure it may record the data and inform the people concerned. Agralon processes the data to provide the service.

The specific allocation of responsibilities between Agralon and each customer company may be set out in the relevant contract.

13Community: Knowledge and Market

In the Knowledge and Market areas, the questions, answers and listings you publish are visible to all Agralon users with an active workspace, including users of other companies. Next to each post we show your account name or the name you choose for the community and, where applicable, a badge (for example “Agralon Pioneer”); never your email address.In Market we only show the contact ways (WhatsApp, phone or email) you enter in each listing; they are not taken from your profile or from pilot records. Listing photos are kept in private storage and shown only to signed-in users; when you upload them, the app downsizes them and removes their metadata (including GPS location).Agralon is not a party to purchases and sales: communication and payment happen directly between the people involved. To prevent abuse we keep reports and moderation measures (hiding, archiving, blocking) together with the affected post. You can edit your posts, withdraw your listings and ask us to delete your content through the channels listed under “Contact”.If you reach Agralon through a referral link, we store the link code and associate it with your account when you sign up, to know who recommended Agralon. The referrer only sees aggregate numbers, never who signed up.

14Cookies and local storage

Public website

The public website uses Vercel Web Analytics to count visits in aggregate: it sets no cookies, builds no profiles and does not follow the same person across visits or devices; Vercel identifies each visit with a hash of the request that changes every day. Beyond this, the public Agralon website uses no advertising cookies and no tracking tools for marketing purposes, no technical cookies and no browser local storage; only when you arrive through a campaign link does the site keep the campaign's source (agralon-utm, session storage, deleted when the tab closes) and add it to its links into the application. Fonts are served from our own domain without requests to third parties.

Web application (app.agralon.com)

The application uses no cookies. It keeps only what it needs to work in the browser:

Demo (demo.agralon.com)

The demo uses no cookies and no sign-in session. It keeps the sample data and your changes (agralon-demo-…) in the browser's local storage, together with the same preferences as the web application, such as language, theme, rules already seen, the last forecast and recent Weather places. Everything stays in your browser until you reset the demo or clear your browser data.

Mobile app for pilots

The app keeps the session in the phone's secure storage, together with a local copy of assigned jobs, the queue of events waiting to sync and the photos and signatures taken. The local copy and the queue are deleted on sign-out. The app also keeps a copy of your recent Weather places and of the date of the latest news you have seen on the phone, to use them offline, and a local log of the app's last technical errors (up to 5, without names, emails, numbers or identifiers; never sent automatically). From version 1.0.1 the app looks for updates at start: it asks Expo whether there is a new version of the app code and app.agralon.com which app version is current. The app asks for camera permission (evidence photos and profile picture) and for photo library permission (only to choose a profile picture). It asks for location permission only while you are using it, to centre the map, start a field at your location and show the weather there; it does not access location in the background. Your coordinates only reach our servers when you use those features (weather, place search, saved fields and observations). The app sends no push notifications, shows no advertising, does not track your activity and shares no data with advertising networks.

Because we use no cookies or tracking technologies that require consent, we do not show a cookie banner.

15Children

Agralon is intended for companies and professional users. It is not designed for minors and we do not knowingly collect data from minors.

16Changes to this policy

We may update this policy when the service, providers or regulations change. We will publish the new version on this page with its update date and, if the changes are significant, inform customer companies.

17Contact

For privacy questions or to exercise your rights, write to contact@agralon.com.

The supervisory authority in Uruguay is the Unidad Reguladora y de Control de Datos Personales (URCDP). The operator's identification details are in the Legal notice.