Privacy Policy

Last Updated: March 25, 2026

At Farmstander, we care about your privacy. We believe in being transparent about how we handle your information, and we've written this policy in plain language so it's actually readable. This policy explains how Farmstander ("we", "our", "us") collects, uses, and protects your personal information when you use our app and related services. We aim to comply with applicable laws including the U.S. (e.g., CCPA/CPRA), the EU/EEA General Data Protection Regulation (GDPR), and the UK Data Protection Act/UK GDPR.

1. Who We Are

Farmstander is the data controller for your personal information. If you have any questions about this policy or how we handle your data, you can reach us at feedback@farmstander.com. We're a small team and we take these questions seriously — you'll hear back from a real person. In cases where a vendor uses our platform to collect information from their customers, that vendor is the controller for those specific activities.

2. Information We Collect

Here's what we collect and why: • Identification & Contact: your name, email address, and account identifiers — needed to create and manage your account. • Device & Technical: device model, operating system, app version, IP address, and crash or diagnostic data — used to keep the app running properly and fix bugs. • Usage: screens you visit, actions you take, and your preferences — helps us understand how the app is used and improve it over time. • Location (optional): approximate or precise location, only if you grant permission — used to show you nearby farmstands and markets. • Vendor Content (optional): information you submit about your farmstand or farmers market, including photos, descriptions, and hours. • Order Request Data: your name and email address when you place an Order Request — shared with the vendor receiving your request so they can follow up with you. • Communications: feedback, support requests, and any messages you send us.

3. How We Use Your Information

We use your information to: • Provide and operate the app (GDPR Art. 6(1)(b) — necessary to perform our contract with you). • Keep the app secure and prevent fraud or abuse (GDPR Art. 6(1)(f) — legitimate interests). • Analyze usage patterns to improve features (legitimate interests, or consent where required by law). • Send you account-related communications and support responses (contract and legitimate interests). • Comply with legal obligations (GDPR Art. 6(1)(c)). • Power optional features you've chosen to use, with your consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time.

4. Sharing & Disclosure

We do not sell your personal information. Here's who we may share it with and why: • Service providers: companies that help us run the app, including hosting, analytics, crash reporting, and email delivery. They access only what they need to do their job and are contractually bound to protect your information. • Vendors you interact with: if you submit an Order Request, the vendor receiving it will receive your name and email address. By submitting an Order Request, you consent to this sharing. This information may only be used to communicate with you about your request — vendors may not use it to send unsolicited messages, add you to mailing lists, or use it for any purpose unrelated to your order. We expect all vendors to respect your privacy, and misuse of this information is a violation of our Terms of Service. • Authorities: when required by law, court order, or to protect the rights and safety of our users or the public. • Other parties: only with your explicit consent.

5. International Transfers

Farmstander operates in the United States. If you're using the app from the EU, UK, or another country, your information may be transferred to and stored in the U.S. When we transfer data internationally, we use appropriate safeguards such as EU Standard Contractual Clauses and the UK Addendum, or rely on adequacy decisions where applicable.

6. Data Retention

We only keep your information for as long as we need it. Your account data is retained while your account is active. If you close your account, we delete your personal information subject to any legal obligations that require us to retain certain records. Order Request records are automatically deleted from our systems one year after they are archived.

7. Your Rights & Choices

Depending on where you live, you may have the right to: • Access the personal information we hold about you. • Correct inaccurate information. • Request deletion of your data. • Object to or restrict certain processing. • Receive a copy of your data in a portable format. • Withdraw consent at any time for consent-based processing. California residents have additional rights under the CCPA, including the right to know what categories of personal information we collect, the right to opt out of any "sale" of personal data (we don't sell your data), and the right not to be discriminated against for exercising your rights. To exercise any of these rights, email us at feedback@farmstander.com. We'll verify your identity and respond within a reasonable timeframe. We will not discriminate against you for making a request.

8. Categories of Information Collected (CCPA)

For California residents, here are the categories of personal information we have collected in the past 12 months: • Identifiers: name, email address, IP address, and account ID. • Device and internet activity: device model, OS, app version, pages visited, and interactions with the app. • Geolocation data: approximate or precise location, if you grant permission. • Commercial information: Order Requests submitted and vendor interactions. • User-submitted content: vendor profile information, photos, and descriptions. • Inferences: preferences and app usage patterns derived from the above. We collect this information for the business purposes described in Section 3 above. We do not sell this information to third parties.

9. Children's Privacy

Farmstander is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us at feedback@farmstander.com and we will delete it promptly.

10. Security

We take security seriously and use appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. That said, no method of transmission or storage is 100% secure, and we can't guarantee absolute security. If you have questions about security, reach out to us at feedback@farmstander.com.

11. Cookies & Tracking Technologies

Our app and any associated web services may use cookies, SDKs, or similar technologies for essential functionality, analytics, and preferences. Where required by law, we seek your consent before using non-essential tracking technologies. Do Not Track: some browsers transmit a "Do Not Track" signal. There is currently no industry-wide standard for how apps should respond to these signals, so we do not currently take action in response to them. If that changes, we will update this policy.

12. Automated Decision-Making

We don't use automated systems to make decisions about you that have legal or similarly significant effects. If we ever introduce features like that, we'll notify you and provide the required rights and safeguards.

13. Third-Party Links

The app may contain links to third-party websites or services. Their privacy practices are governed by their own policies — we encourage you to review them before sharing any personal information with those services.

14. Changes to This Policy

We may update this policy from time to time. When we do, we'll revise the "Last Updated" date at the top. If the changes are material, we'll let you know through the app or by email, as required by applicable law.

15. Contact Us

Questions, requests, or concerns about this policy? We'd love to hear from you. Email: feedback@farmstander.com If you're in the EU or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.