Privacy Policy
Version 1.1.0 · Last updated: 25 August 2026
AGRISAFE TECNOLOGIA LTDA., enrolled with the Brazilian corporate taxpayer registry (CNPJ/ME) under No. 39.291.628/0001-29, with its registered office at Rua Gomes de Carvalho, 911, Sala 209, Vila OlÃmpia, São Paulo/SP, CEP 04547-003, Brazil ("AgriSafe", "we"), respects your privacy and is committed to protecting the personal data it processes, in accordance with Brazilian Law No. 13,709/2018 — the General Data Protection Law (LGPD) and with the Brazilian Internet Civil Framework (Law No. 12,965/2014).
This Policy explains what personal data we collect, why, on which legal bases, with whom we share it and how you can exercise your rights. It applies to our institutional websites, the AgriSafe Platform (web), the App AgriSafe and App noCampo applications, the MktHub portal and our contact channels (the "Services").
1. Who controls your data
For registration and browsing data of users and visitors, AgriSafe acts as Controller. For personal data of rural producers entered into the Platform directly by a Contracting Company (cooperative, dealer, financial institution) for the analysis of its own operations, the Contracting Company is the Controller and AgriSafe acts as Processor, handling that data only in accordance with the instructions and the legal basis provided by the Contracting Company.
2. What data we collect
- Website visitors: browsing data — IP address, device identifiers, pages visited, date and time, and cookies (see Section 7). In contact or newsletter forms: name, e-mail and the message sent.
- Newsletter subscribers: the name and e-mail provided on sign-up, the source of the sign-up (page and campaign/UTM parameters), the date and time of consent, and the delivery and engagement records of the e-mails sent (see Section 7).
- Operator users (Platform / App AgriSafe / MktHub): full name, CPF (individual taxpayer number), corporate e-mail, telephone, employer, job title and access and usage logs.
- App noCampo users: registration and authentication data, application usage data, records you choose to reveal, and location only where necessary to the functionality and with appropriate signalling.
- Rural producers (entered by the Contracting Company or from public sources): name, CPF, e-mail, telephone, address, declared income, financial statements, land certificates, property registry records, CAR (Rural Environmental Registry) number, geographic coordinates and property shapes.
- Public and third-party sources: the Brazilian Federal Revenue Service, land registries (INCRA, SNCR, CNIR, CAFIR), environmental registries (SICAR), authorised receivables registrars (CERC, B3) and aggregate credit bureau scores.
3. Purposes and legal bases
| Purpose | Legal basis (LGPD) |
|---|---|
| Operating the website, measuring audience and ensuring security | Legitimate interest (Art. 7, IX) |
| Responding to enquiries and sending the newsletter (when requested) | Consent (I) / preliminary procedures (V) |
| Measuring newsletter delivery and engagement (opens and clicks) | Legitimate interest (Art. 7, IX), with a right to object |
| Authentication, access control and security | Performance of a contract (V) and legitimate interest (IX) |
| Credit analysis, risk modelling and the AgriSafe Score | Credit protection (Art. 7, X) |
| Fraud prevention and validation of land ownership identity | Fraud prevention / data subject security (Art. 11, II, g) |
| Compliance with regulatory obligations (e.g. CMN Resolution 4,966) | Legal/regulatory obligation (Art. 7, II) |
| Model calibration and statistical enrichment | Legitimate interest (IX), with anonymisation (Art. 12) |
4. Automated decisions
Some Services employ automated processing to generate risk scores and classifications (Score AGSF, Score Lavoura, ICS). Under Art. 20 of the LGPD, the data subject may request a review of those decisions and clear information about the criteria used, subject to AgriSafe's commercial and industrial secrets.
5. Data sharing
We share data only as strictly necessary, with: companies within the same economic group; cloud infrastructure providers; e-mail delivery providers, which process the address and delivery events strictly on our behalf and on our instructions; authorised receivables registrars (e.g. CERC, B3); and public authorities and regulators. AgriSafe does not sell personal data of rural producers or users to advertisers, marketing bureaus or third parties.
6. International transfers
Some data may be processed on servers outside Brazil, operated by cloud providers engaged by AgriSafe, observing the mechanisms of Art. 33 of the LGPD (specific contractual clauses, encryption in transit and at rest, and security certifications).
7. Cookies and e-mail metrics
We use essential cookies (authentication, security, operation) and analytical cookies (audience measurement). You can manage non-essential cookies in your browser or in the consent banner. Refusing analytical cookies does not prevent you from using the essential functionality.
E-mail metrics. In our newsletter e-mails we use a tracking pixel (a 1×1 pixel image) and redirect links, which allow us to record whether the message was delivered, whether it was opened and whether any link was clicked, together with the date and time. We use those records to measure the performance of each edition, to understand which topics are most relevant to our audience and to adjust the content and frequency of our mailings. We do not use them for third-party behavioural advertising and we do not sell them. The legal basis is legitimate interest (Art. 7, IX). You may object at any time: by blocking image loading in your e-mail client, which prevents the open from being recorded, or by unsubscribing via the link in the footer of every message. Engagement records are retained for up to 24 months.
8. Your rights as a data subject (Art. 18)
You may, at any time and free of charge, request: confirmation that processing exists; access; correction; anonymisation, blocking or deletion of unnecessary data; portability; deletion of data processed on the basis of consent; information about data sharing; withdrawal of consent; and review of automated decisions (Section 4). To exercise any right, contact the Data Protection Officer (Section 10). We will respond within 15 days, subject to the periods set by the ANPD.
9. Retention and security
Security. We adopt technical and organisational measures such as encryption in transit (TLS) and at rest, role-based access control with least privilege (RBAC), audit trails and encrypted backups. In the event of an incident involving material risk, we will notify the ANPD and the affected data subjects within the periods recommended by the authority.
Retention. User registration data for up to 5 years after the account is closed; access logs for a minimum of 6 months (Art. 15 of the Internet Civil Framework); tax and financial data for 5 to 10 years; anonymised data indefinitely for statistical purposes.
10. Data Protection Officer (DPO)
- Data Protection Officer (DPO): Clovis Ikeda
- E-mail: dpo@agrisafe.agr.br
- General channels: privacidade@agrisafe.agr.br · seguranca@agrisafe.agr.br
- Address: Rua Gomes de Carvalho, 911, Sala 209, Vila OlÃmpia, São Paulo/SP, CEP 04547-003, Brazil
11. Minimum age
The Services are intended for persons aged 18 or over who are professionals in the agribusiness chain. We do not intentionally collect data from minors.
12. Changes to this Policy
We may update this Policy from time to time. The version in force will always be available on this page, together with the date it was last updated. Material changes will be communicated through official channels.
13. Governing law and venue
This Policy is governed by the laws of Brazil, in particular the LGPD. The courts of the Judicial District of São Paulo/SP are elected to settle any disputes, with waiver of any other venue.