Privacy Policy

We collect information you provide directly when creating an account, including your name, email address, phone number, company name, and role within the aquaculture industry. When you use our IoT devices, we collect sensor data such as water quality parameters (pH, dissolved oxygen, temperature, ammonia, salinity), GPS coordinates of your ponds, and device telemetry. We also collect usage data including pages visited, features used, interaction patterns, login timestamps, IP addresses, and device identifiers to improve our platform. We process this data on the legal basis of contract performance (to provide our services), legitimate interests (platform security and improvement), and consent (for marketing communications).

Your information is used to provide and improve CAMARON's aquaculture intelligence services, including real-time water quality monitoring, AI-powered disease prediction, growth forecasting, and market intelligence. We use aggregated, anonymized data to train and improve our machine learning models. We may use your contact information to send critical alerts about your pond conditions, platform updates, and relevant industry insights. We never sell your personal information to third parties.

We implement industry-standard security measures including TLS 1.3 encryption for all data in transit, AES-256 encryption for data at rest, and hosting on SOC 2 Type II certified cloud infrastructure (Supabase/AWS). Note: CAMARON itself has not completed an independent SOC 2 audit; this certification applies to our hosting providers. Access to production data is restricted through role-based access controls (RBAC) with row-level security (RLS) policies. All API endpoints are authenticated and rate-limited. We conduct regular security audits and vulnerability assessments. Our IoT devices use unique device keys for authentication with the cloud platform.

We share data only when necessary to provide our services: • Cloud infrastructure providers (AWS/Google Cloud) for hosting and data storage • Paddle.com (our Merchant of Record) for sale of the product, subscription management, payments, tax compliance, and invoicing. Payment card details are processed directly by Paddle and are not stored on our systems. • AI model providers (Google AI) for processing anonymized analysis requests — no personally identifiable information is transmitted • Email delivery providers (Resend) for transactional and notification emails • Analytics providers (PostHog) for anonymized usage analytics • Professional advisers (legal, accounting) as required • Authorities where required by law When you grant pond access to technicians, doctors, or lab technicians through our platform, they can view the specific pond data you authorize. We may disclose information when required by law or to protect our rights and the safety of our users.

You have the right to access, correct, or delete your personal data at any time through your account settings. You can export your crop data logs, growth snapshots, and IoT sensor readings in standard formats (JSON). You may opt out of non-essential communications while still receiving critical water quality alerts. You may also opt out of AI data contribution via Settings → Privacy. If you are located in the EU/UK, you have additional rights under GDPR including: data portability, the right to restrict processing, the right to object to processing, the right to withdraw consent, and the right to lodge a complaint with your supervisory authority. We will respond to rights requests within 1 month. To exercise any of these rights, contact us at privacy@robicrufarm.com.

We retain your account data for as long as your account is active. Sensor readings and crop data logs are retained indefinitely to support historical analysis and AI model accuracy, unless you request deletion. Cached weather data expires automatically after 2 hours. Email send logs are retained for 90 days. Upon account deletion, personal data is removed within 30 days, though anonymized, aggregated data used for model training may be retained. Data will be deleted or anonymized when no longer needed for the purposes for which it was collected.

CAMARON uses AI across 7 modules for disease detection, feed optimization, growth forecasting, and more. Your data is processed by AI in two ways: 1. Real-time Analysis: Your specific data (sensor readings, images, crop logs) is sent to the AI model during each analysis request. This data is not retained by the AI model provider after processing. 2. Model Improvement: Anonymized, aggregated data may be used to improve our AI models. You can opt out via Settings → Privacy → AI Data Contribution without affecting your access to AI features. For full details, see our AI Transparency Policy at /ai-policy.

CAMARON is committed to complying with data sovereignty laws in all operating regions. In India, we adhere to the Digital Personal Data Protection Act (DPDPA) 2023, ensuring consent-based processing. In Vietnam, we are working towards compliance with the Cybersecurity Law 2018 and Decree 13/2023. In Indonesia, we follow Government Regulation No. 71/2019 (GR 71) on electronic system operation and data protection. For EU/UK users, we maintain GDPR compliance with Data Processing Agreements (DPAs) and cross-border transfer safeguards via Standard Contractual Clauses (SCCs). IMPORTANT: All data is currently hosted on cloud infrastructure managed by Supabase (AWS) in the United States and EU regions. Regional data centers in India, Indonesia, and Vietnam are planned for future deployment but are not yet operational. For international data transfers, see our Data Processing Agreement at /dpa.

We use essential, analytics, and preference cookies. For full details, see our Cookie Policy at /cookie-policy. This Privacy Policy may be updated periodically to reflect changes in our practices or applicable laws. We will notify you of material changes via email or an in-app notification. For questions or concerns about this policy or your data, please contact our Data Protection Officer at privacy@robicrufarm.com or write to: Robic Rufarm India Private Limited, Hyderabad, Telangana, India.