Privacy Policy

1. Information We Collect

Information You Provide

• Buyer accounts: Email address and password, used for authentication and communication.
• Farm accounts: Phone number, used for SMS-based one-time-password (OTP) authentication.
• Farm profiles: Farm name, location, crops grown, certifications, and other agricultural information you choose to share.
• Payment information: Buyer subscription billing is processed by Stripe. We do not store credit card numbers directly.
• Communications: Messages sent through the Platform between buyers and farms.

Information Collected Automatically

• Usage data: Pages visited, features used, and interactions with the Platform.
• Device information: Browser type, operating system, and screen size.
• Cookies: Essential cookies for authentication and session management. See our Cookie Policy for details.

Voice and SMS Interactions

We use AI-powered voice agents (via Vapi.ai) and SMS (via Twilio) to communicate with farms for onboarding, check-ins, and data verification. Call transcripts and SMS logs are stored to maintain accurate farm data. All AI-initiated calls identify themselves as automated assistants at the start of the conversation.

2. How We Use Your Information

• Platform operation: Authenticating users, processing searches, facilitating buyer-farm connections.
• AI processing: We use AI services (Anthropic Claude API) to process farm data, generate summaries, and power search features. Your data may be sent to these services for processing.
• Farm outreach: Conducting AI-assisted voice calls and SMS messages to verify and update farm information.
• Billing: Processing buyer subscription payments through Stripe.
• Transactional email: Sending account confirmations, password resets, and platform notifications via Resend.
• Improvement: Analyzing usage patterns to improve the Platform.

3. How We Share Your Information

We do not sell your personal information. We share information with the following service providers who process data on our behalf:

• Supabase: Database hosting and user authentication.
• Stripe: Payment processing for buyer subscriptions.
• Twilio: SMS messaging for farm communication and phone verification.
• Vapi.ai: AI-powered voice calling for farm outreach.
• Anthropic: AI text processing and analysis.
• Resend: Transactional email delivery.
• Vercel: Website hosting and deployment.

We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

4. Data Storage and Security

Your data is stored in Supabase-managed PostgreSQL databases with row-level security enabled. All data is encrypted in transit (TLS) and at rest. We implement industry-standard security measures to protect your information, but no method of transmission or storage is 100% secure.

5. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Opt out of non-essential communications.
• Request that farms be placed on our Do Not Call list for voice outreach.

To exercise these rights, contact us at the address below. Massachusetts residents may have additional rights under state law.

6. Children’s Privacy

The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last Updated” date. Your continued use of the Platform after changes constitutes acceptance.

8. Contact Us

If you have questions about this Privacy Policy, contact us at: privacy@ripecrate.com