Privacy & Data Security

1. Data Collection & Usage

We collect specific telemetry data (CSV uploads) regarding temperature, humidity (VPD), substrate moisture, and crop mass. This data is collected strictly for the purpose of:

• Running thermodynamic calculations (e.g., Latent Heat of Vaporization).
• Generating AI-driven optimization directives.
• Providing historical analysis within your private dashboard.

2. Encryption & Storage

We employ a defense-in-depth security strategy to protect your sensitive logs:

3. Tenant Isolation

We utilize PostgreSQL Row Level Security (RLS). This acts as a database-level firewall that physically prevents any user (including other clients) from querying data that is not explicitly stamped with your Facility ID. Even if a software bug occurred in the dashboard, the database itself would reject the unauthorized request.

4. Third-Party Processors

To provide our service, we utilize the following trusted infrastructure partners:

• Google Cloud (Gemini API): Used for thermodynamic reasoning. Data is sent ephemerally and is NOT used to train Google's public models.
• Supabase: Provides the encrypted database infrastructure (AWS/PostgreSQL).
• Clerk: Handles secure identity verification and session management.
• Vercel: Hosts the application logic and API routes.

5. Data Deletion

You retain the right to request full deletion of your facility's data. Upon request to our Data Protection Officer, or upon account termination, all associated cultivation logs and reports will be permanently expunged from our servers within 30 days.