Privacy Policy

DAGI Limited is the entity responsible for the personal information we collect through the Service. We are the "agency" for the purposes of the Privacy Act 2020.

If you have any questions about this Privacy Policy, want to access or correct your personal information, or want to make a complaint, contact our Privacy Officer:

We collect personal information directly from you when you create an account and use the Service. We do not buy personal information from third parties, and we do not collect personal information about you from other sources without your knowledge.

The personal information we collect, and the reason we collect each item, is set out below:

Technical information. When you use the app, we automatically collect limited technical information necessary to deliver the Service: your device type, operating system version, app version, and the IP address used to connect. This information is used to provide and secure the Service, troubleshoot issues, and improve reliability.

Analytics and tracking. We do not currently use any third-party analytics, tracking, or advertising tools in the Service. If we add such tools in the future, we will update this Privacy Policy, notify you of the change, and where required obtain your consent before activating them.

Cookies. The DAGI website at dagi.nz uses only essential cookies necessary to operate the site (for example, to remember your login session). We do not use tracking, advertising, or analytics cookies at present.

Children. The Service is intended for use by farming businesses and their authorised personnel. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact our Privacy Officer and we will delete it.

We use personal information only for purposes connected with operating and improving the Service. Specifically, we use it to:

• —provide you with access to the Service and the features you have signed up for;
• —authenticate your login and protect your account;
• —communicate with you about your account, the Service, scheduled maintenance, and changes that affect you;
• —issue invoices and manage payment of fees;
• —provide customer support and respond to your queries;
• —improve the Service, develop new features, and conduct research on the underlying scientific models;
• —generate anonymised, aggregated analytical data that does not identify you or your farm;
• —comply with our legal obligations, including tax and accounting obligations; and
• —protect the security and integrity of the Service.

We do not use your personal information for any purpose unrelated to the Service without telling you first and, where required, obtaining your consent.

We share personal information only where necessary to operate the Service or to comply with our legal obligations. The third parties we share personal information with, and the reason for the sharing, are:

Xero (Xero Limited). We use Xero to manage billing and invoicing. Your name, email, phone, addresses, GST number (if provided), and the invoices we issue you are stored in Xero. Xero's privacy policy is available at xero.com/nz/legal/privacy-notice.

Supabase (Supabase Inc.). Supabase provides the database infrastructure that holds your account information, account status, and farm operational data. Supabase's privacy policy is available at supabase.com/privacy.

Cloud hosting providers. Our app and website are hosted on commercial cloud infrastructure providers. These providers process personal information only on our behalf and under our instructions.

Weather data providers. If the Service includes a weather feed for your farm, your farm location may be passed to a third-party weather data provider in order to retrieve the relevant forecast. Only the location is shared, not any personal information about you.

Scientific and research collaborators. We work with research partners (including BSI/AgResearch and the University of New England) on the scientific models that power the Service. Any data shared with research partners is anonymised and aggregated, and does not identify you or your farm.

Professional advisers. If you invite a professional adviser (such as your veterinarian or farm consultant) to access your farm's account as a Permitted User, they will be able to see your farm data. You control which advisers you invite and can remove their access at any time.

Legal and regulatory authorities. We may disclose personal information where we are required to do so by law, by court order, or to protect our legal rights.

Business successors. If we sell or restructure our business, personal information may be transferred to the new owner, subject to the new owner agreeing to be bound by privacy obligations no less protective than this Policy.

We do not sell your personal information to anyone. We do not share your personal information with advertisers.

Personal information collected through the Service may be stored on secure cloud infrastructure located outside New Zealand, including in North America, Europe, Asia, Oceania, and South America. The specific locations depend on the data centre regions used by our service providers (Xero, Supabase, and cloud hosting providers) at the time.

Where personal information is transferred outside New Zealand, we take steps to ensure it is protected by privacy safeguards comparable to those required under the New Zealand Privacy Act 2020.

We keep personal information for as long as is necessary to provide you with the Service, and after termination of your account for a period necessary to comply with our legal and tax obligations (typically 7 years for billing and tax records, as required by New Zealand tax law).

On termination of your account:

• —Within one month after termination, you may request a copy of your farm data and/or deletion of personal information held in the app, in accordance with the Terms of Use.
• —Billing information held in Xero is retained for the period required by tax law.
• —Anonymised, aggregated analytical data may be retained indefinitely. This data does not identify you or your farm.
• —Backups may contain residual copies of your data for a limited period until they are routinely overwritten.

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, modification, and disclosure. These include:

• —encrypting data in transit between your device and our servers;
• —storing passwords in hashed (one-way encrypted) form, so even we cannot read them;
• —restricting access to personal information to personnel who need it to perform their duties;
• —using reputable cloud service providers with strong security practices; and
• —reviewing our security practices from time to time.

No system can be guaranteed to be completely secure. You also have a role to play in protecting your information: keep your login credentials confidential, use a strong password, and notify us immediately if you suspect any unauthorised use of your account.

Privacy breaches. If a privacy breach occurs that is likely to cause serious harm, we will notify you and the Office of the Privacy Commissioner in accordance with our obligations under the Privacy Act 2020.

Under the Privacy Act 2020, you have the following rights in relation to personal information we hold about you:

Right to access. You may ask us to confirm what personal information we hold about you and to provide you with a copy of it.

Right to correction. If any personal information we hold about you is incorrect, you may ask us to correct it. If we do not agree to make the correction, you can ask us to attach a statement of correction to the information.

Right to complain. If you are unhappy with how we have handled your personal information, you can complain to our Privacy Officer at the contact details above. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

Most of the personal information we hold about you can also be viewed and updated by you directly within the DAGI app. To exercise any of the above rights formally, contact our Privacy Officer.

We will respond to access and correction requests within 20 working days of receipt, in accordance with the Privacy Act 2020.

From time to time we may send you information about new features of the Service, product updates, scientific developments relevant to your use of the Service, or other communications we think you may find useful.

You can opt out of marketing communications at any time by using the unsubscribe link in the email or by contacting our Privacy Officer. Opting out of marketing communications does not affect transactional communications about your account, the Service, or invoicing, which we will continue to send while you have an active account.

We may update this Privacy Policy from time to time — for example, if we introduce new features, change service providers, add analytics or other third-party tools, or to reflect changes in privacy law.

When we make material changes, we will:

• —update the version number and effective date at the top of this Policy;
• —notify you of the changes via the app, the website, or by email; and
• —where required by law, obtain your consent before the changes take effect.

Continued use of the Service after the effective date of any change constitutes acceptance of the updated Policy.

If you are accessing the Service from outside New Zealand, the privacy laws of the jurisdiction in which you are located may also apply to our handling of your personal information. We will comply with applicable privacy laws in addition to the New Zealand Privacy Act 2020.

In particular, if you are located in the United Kingdom or European Union and the UK GDPR or EU GDPR applies to our processing of your personal information, you have additional rights including the right to erasure ("right to be forgotten"), the right to data portability, the right to object to processing, and the right to lodge a complaint with the supervisory authority in your country. To exercise any of these rights, contact our Privacy Officer.

Apple App Store users. When you download the DAGI app from the Apple App Store, Apple may collect information about your download in accordance with its own privacy policy. Apple is not responsible for our handling of your personal information under this Policy. Any privacy concerns about the DAGI app itself should be directed to our Privacy Officer.

Google Play users. When you download the DAGI app from Google Play, Google may collect information about your download in accordance with its own privacy policy. Google is not responsible for our handling of your personal information under this Policy. Any privacy concerns about the DAGI app itself should be directed to our Privacy Officer.

App permissions. The DAGI app may request permission to access certain features of your device (for example, network access to communicate with our servers). We only request the permissions necessary to provide the Service. You can manage these permissions through your device settings.