Your data

Privacy Policy

This policy explains what data FarmLoop processes, why it is needed, and the choices that remain in your hands.

Last updated: September 26, 2026
Pre-launch version

This policy prepares the FarmLoop public release. The operator’s complete legal identity and final retention periods must be confirmed before public launch.

1. Data controller

FarmLoop is operated and published by Tozemoon Labs, a French microenterprise. The proprietor's full legal name, business registration number and professional address must be added before public launch. Questions and privacy requests can be sent to contact@tozemoonlabs.com or through the support form. Email does not require an account or Google reCAPTCHA.

2. Data we may process

  • Account: email address, account identifier, buyer or producer role, and language preferences.
  • Producer profile: public name, description, business details, listings, availability, images, image metadata, and pickup points.
  • Relay application: your account identifier, city and country, proposed pickup windows, capacity, declared storage equipment, application status and the version and time of accepted commitments. Do not put your home address or private documents in the application's free-text fields.
  • Orders: products, amounts, status, pickup window, invoices, refund requests, and support communications.
  • Location: approximate or precise location only when you allow it, so FarmLoop can show nearby offers.
  • Wallet: public Solana address, transaction identifiers, and settlement status. FarmLoop does not receive your private key.
  • Technical and security: device information, access logs, errors, and fraud-prevention signals.
  • Privacy requests: your account identifier, the right requested, receipt date, response deadline, review status and response. These records stay off-chain and are accessible to your authenticated account and authorized staff.

3. Why we use this data

We use it to create and protect your account, display local offers, execute programmable orders, coordinate pickup, settle producer payouts, answer support requests, and meet legal obligations.

Uploaded images may be inspected for file safety and content moderation, then resized or recompressed for reliable display and storage.

When you ask to become a relay, we use your application to evaluate that request and prepare any later onboarding. Applications are not published on the map or written to Solana. The application API exposes your dossier only to your authenticated account; authorized staff may review it for onboarding. Withdrawing stops your candidacy but does not itself erase the record; deletion can be requested through support.

Precise location relies on your consent. You can disable it in Android settings, although nearby discovery may become less accurate. Processing required for an order supports delivery of the requested service, while security and service improvement rely on our legitimate interests.

4. Services we use

FarmLoop may share only the information required with the following categories of providers:

  • Privy for authentication and embedded wallet infrastructure;
  • Solana infrastructure providers, including Helius, to query and submit transactions;
  • Google reCAPTCHA, only after you enable it, for the website form's anti-spam check;
  • Resend to deliver website support and privacy requests by email, and Vercel to host the website;
  • hosting, database, and media-storage providers selected for production;
  • technical monitoring and support tools when they are enabled.

reCAPTCHA may process technical and interaction signals and set cookies under Google's Privacy Policy and Terms. It is not loaded before your explicit choice. You can use email instead, or withdraw that choice using the form's reload button. FarmLoop does not store that choice between visits. Reloading stops the current page's Google integration; you can manage previously set Google cookies in your browser.

We do not sell personal data.

5. Blockchain and public records

A transaction confirmed on Solana is written to a public ledger that FarmLoop cannot alter or delete. We limit on-chain data to what the protocol needs and avoid placing direct personal identifiers such as your name or email address on-chain.

A public wallet address can still identify a person when linked to other information. An account deletion request cannot remove confirmed public transactions. Please never put private information in transaction memos or public listings.

6. Retention

We retain account data while you use FarmLoop, then only as long as needed for security, disputes, accounting, and legal obligations. Content with no retention requirement is deleted or anonymized after a valid request.

7. Your rights

Depending on where you live, you may request access, correction, portability, restriction, objection, or deletion. You may withdraw consent without affecting processing already performed.

In the Android app, open Profile → Account → Your data and account to request a copy of your data or account deletion, and check the reference, status and response. These requests are free and require no Solana transaction. A receipt confirms that a request was recorded; it does not confirm that deletion or export is complete. You can also visit Delete my account or use email. We may verify your identity to prevent fraudulent deletion.

For requests under the GDPR, the response deadline is normally one month. A justified extension of up to two further months may apply to complex or numerous requests; you will be informed within the first month. You may also complain to the CNIL or your local supervisory authority. Exercising these rights does not require accepting Google or marketing.

8. Security and transfers

The production deployment is being prepared with access controls, encryption in transit and separate environments. Provider contracts, processing locations and safeguards for transfers outside the EEA must be verified and documented before public launch. Choosing a French backend host alone does not keep all authentication, blockchain, email or website data in France.

9. Children

FarmLoop is not intended for people who cannot legally enter into an order or use the payment services offered. If you believe a child submitted data without appropriate authorization, contact us.

10. Changes and contact

We may update this policy as FarmLoop evolves. The revision date appears at the top of the page. Contact FarmLoop through the support form.