Back to RFA Autopilot

Legal

Privacy Policy

Effective Date: 5 June 2026

This Privacy Policy describes how REGENERATIVE FARMS AND AGRITECH PRIVATE LIMITED and its affiliates, group entities, and authorised representatives, where applicable, collectively referred to as “REGENERATIVE FARMS AND AGRITECH PRIVATE LIMITED,” “RFA,” “we,” “our,” or “us,” collect, use, store, disclose, protect, and otherwise process personal data through the RFA Autopilot Platform, including our website, mobile applications, dashboards, WhatsApp/SMS flows, field-agent tools, APIs, IoT/sensor integrations, and related tools, products, services, and features collectively referred to as the “Platform.”

For the purposes of applicable Indian data protection laws, REGENERATIVE FARMS AND AGRITECH PRIVATE LIMITED acts as the Data Fiduciary for personal data collected through the Platform, except where we process personal data on behalf of another entity under a separate written arrangement.

By accessing or using the Platform, creating an account, submitting information, or using any product or service offered through the Platform, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will seek your consent for the collection and processing of your personal data.

We offer the Platform only in India. Your personal data is stored and processed in India. We do not intentionally transfer or process your personal data outside India.

If you do not agree with this Privacy Policy, please do not access or use the Platform.

1. Information We Collect

We collect personal data when you access or use the Platform, create an account, interact with us, communicate with our team, use our services, or otherwise provide information to us.

Depending on your use of the Platform, the personal data we collect may include the following:

1.1 Account and Identity Information

We may collect information such as:

  • name;
  • address;
  • mobile number;
  • email address;
  • user ID, login credentials, and account details;
  • information required to create, verify, maintain, or support your account.

1.2 Contact and Communication Information

We may collect information relating to your interactions with us, including:

  • customer support requests;
  • emails, calls, messages, WhatsApp communications, SMS communications, or in-app communications;
  • feedback, survey responses, and grievance submissions;
  • records of communication preferences and consent.

1.3 Farm, Land, Sensor, and Agritech Information

Because the Platform is an agritech platform, we collect information relating to farms, land parcels, agricultural activity, and connected systems, including:

  • land parcel details;
  • farm location and field-level information connected with land parcel records;
  • sensor and IoT data generated through devices, equipment, or integrations connected with the Platform;
  • farm activity records and operational information generated through use of the Platform;
  • advisory preferences, alerts, recommendations, and usage history relating to agritech services.

Where such information identifies or relates to an identifiable individual, we treat it as personal data.

1.4 Location Data and Health Data

The Platform may access, collect, and process Location Data where required for Platform functionality. Location Data may include:

  • approximate location;
  • precise location;
  • GPS coordinates;
  • farm location;
  • land parcel location;
  • field boundaries;
  • geotagged farm activity records;
  • location information generated through mobile devices, sensors, IoT devices, field-agent tools, APIs, or other Platform integrations.

We use Location Data to provide and improve Platform features, including:

  • land parcel mapping;
  • farm monitoring;
  • sensor and IoT-based services;
  • field operations;
  • logistics coordination;
  • automation;
  • agritech recommendations;
  • alerts;
  • service delivery;
  • fraud prevention;
  • security;
  • compliance;
  • customer support.

The Platform does not intentionally collect Health Data, such as medical records, health conditions, fitness data, biometric health measurements, or other information relating to a user’s physical or mental health.

If any health-related information is incidentally submitted by a user through support messages, forms, uploads, or communications, we will process it only as necessary to respond to the request, comply with law, protect our rights, or delete it where appropriate.

1.5 Financial and Transaction Information

Where relevant to the services you use, we may process payment and transaction-related information through our authorised payment gateway provider, PhonePe.

Such information may include:

  • payment status;
  • transaction reference numbers;
  • invoice details;
  • billing records;
  • subscription or service payment history;
  • refund or settlement information, where applicable.

We do not ask you to disclose sensitive authentication credentials such as card PINs, net-banking passwords, UPI PINs, OTPs, or mobile banking passwords.

1.6 Device, Technical, and Usage Information

When you access or use the Platform, we may automatically collect technical and usage information, including:

  • IP address;
  • device identifiers;
  • browser type and version;
  • operating system;
  • app version;
  • access dates and times;
  • pages, screens, or features viewed;
  • clicks, navigation paths, and interaction logs;
  • crash reports, diagnostics, and performance data;
  • cookies and similar technologies, where applicable.

We may use analytics tools, including Microsoft Clarity, to understand how users interact with the Platform and to improve usability, performance, and product experience.

1.7 Information from Third Parties

We may receive personal data from third parties where permitted by law, including:

  • cloud infrastructure providers such as Google Cloud Platform;
  • payment gateway providers such as PhonePe;
  • analytics providers such as Microsoft Clarity;
  • WhatsApp/SMS communication providers such as 2Factor;
  • logistics providers such as Uber;
  • authorised business, technology, or service partners;
  • authorised representatives or field agents who interact with users on behalf of RFA.

Where a third party collects personal data directly from you, their own privacy policy may apply. We encourage you to review their privacy practices before sharing information with them.

2. How We Use Personal Data

We process personal data for lawful and specified purposes connected with operating, providing, improving, securing, and supporting the Platform.

We may use personal data for the following purposes:

2.1 Platform Access and Account Management

We use personal data to:

  • create and manage user accounts;
  • verify user identity where required;
  • authenticate logins;
  • provide access to Platform features;
  • maintain user profiles and preferences;
  • enable account recovery and customer support.

2.2 Agritech Services, Automation, and Farm Advisory

We use personal data, Location Data, land parcel information, sensor data, and IoT data to:

  • provide agritech services and farm-related insights;
  • operate automation and advisory features of the RFA Autopilot Platform;
  • generate alerts, recommendations, predictions, and decision-support outputs;
  • support farm planning, monitoring, and operational decision-making;
  • customise Platform features based on user needs, land parcel data, sensor data, Location Data, and Platform usage;
  • improve the accuracy, reliability, and usefulness of the Platform.

2.3 Transactions, Payments, and Commercial Operations

We use personal data to:

  • process payments through PhonePe;
  • maintain transaction records;
  • generate invoices, billing records, and receipts;
  • process refunds or settlements, where applicable;
  • provide payment-related support;
  • comply with tax, accounting, financial, and legal obligations.

2.4 Communication and Support

We use personal data to:

  • respond to queries, complaints, support requests, and grievances;
  • send service-related communications;
  • provide updates about your account, transactions, or Platform usage;
  • notify you about changes to our services, policies, or terms;
  • contact you through WhatsApp, phone calls, push notifications, SMS, email, or other communication channels, where permitted by law and your preferences.

2.5 Personalisation, Analytics, and Improvement

We use personal data to:

  • understand Platform usage;
  • improve Platform design, performance, and reliability;
  • analyse user behaviour and preferences;
  • conduct research, surveys, and product development;
  • develop new features, services, and analytics;
  • generate aggregated or anonymised insights.

2.6 Marketing and Promotional Communications

Where permitted by law and subject to your consent or preferences, we may contact you through WhatsApp, phone calls, and push notifications to provide information about products, services, offers, updates, training, events, surveys, or features that may be relevant to you.

You may opt out of marketing communications by following the opt-out mechanism in our communications, adjusting available Platform settings, or contacting us using the details provided in this Privacy Policy. Service-related and transactional communications may still be sent where necessary.

2.7 Security, Fraud Prevention, and Legal Compliance

We use personal data to:

  • detect, prevent, and investigate fraud, unauthorised access, misuse, security incidents, or illegal activity;
  • enforce our Terms of Use, agreements, and policies;
  • protect the rights, property, and safety of users, RFA, partners, and the public;
  • comply with applicable laws, regulations, court orders, government requests, and legal processes;
  • maintain audit, compliance, and security records.

3. Automated Processing and AI-Based Features

The Platform uses automated tools, algorithms, artificial intelligence systems, analytics models, and decision-support systems to generate farm insights, alerts, predictions, recommendations, and operational suggestions.

Such outputs may relate to land parcel monitoring, sensor-based insights, IoT-based alerts, farm operations, crop-related decisions, resource use, risk detection, automation, and other agritech matters.

These outputs are intended to support decision-making and may depend on the accuracy, completeness, timeliness, and quality of the data provided by users or collected through connected systems. Users should evaluate recommendations carefully before acting on them. RFA does not guarantee that automated outputs will be error-free, complete, or suitable for every farm condition.

4. Cookies and Similar Technologies

We may use cookies, pixels, tags, local storage, software development kits, analytics tools, and similar technologies to operate, secure, personalise, analyse, and improve the Platform.

These technologies may help us:

  • keep you signed in;
  • remember preferences;
  • improve Platform performance;
  • understand usage patterns;
  • detect security risks;
  • measure the effectiveness of communications and campaigns;
  • improve usability through tools such as Microsoft Clarity.

You may be able to manage cookies through your browser or device settings. Disabling certain cookies may affect the functionality of the Platform.

5. Sharing and Disclosure of Personal Data

We do not sell your personal data. We may share personal data only where necessary for lawful purposes described in this Privacy Policy.

We may disclose personal data to the following categories of recipients:

5.1 Affiliates and Group Entities

We may share personal data with our affiliates, group entities, or corporate entities for service delivery, customer support, technology operations, analytics, compliance, internal administration, and business purposes.

These entities may contact you for relevant services or communications, subject to applicable law and your communication preferences.

5.2 Cloud Hosting and Infrastructure Providers

We use Google Cloud Platform for cloud hosting, infrastructure, storage, and related technical services. Personal data processed through the Platform may be hosted or stored on infrastructure provided by Google Cloud Platform within India.

5.3 Payment Gateway Provider

We use PhonePe to process payments, payment confirmations, transaction references, refunds, and related payment services.

Payment processing may be subject to PhonePe’s own terms and privacy practices where PhonePe directly collects or processes your information.

5.4 Analytics Provider

We use Microsoft Clarity and related analytics tools to understand user behaviour, Platform performance, usability, and feature engagement.

Analytics data helps us improve the Platform, detect usability issues, and enhance user experience.

5.5 WhatsApp and SMS Communication Provider

We use 2Factor for WhatsApp and SMS-related communication services, including service updates, transactional messages, authentication messages, support communications, and permitted promotional communications.

5.6 Logistics Provider

We may use Uber as a logistics provider where logistics, transport, delivery, field movement, or related services are required in connection with Platform operations or user-requested services.

5.7 Business, Technology, and Service Partners

We may share relevant data with authorised business partners, technology partners, service providers, field agents, or other operational partners where necessary to provide services, integrations, support, training, benefits, or Platform functionality requested by you or made available through the Platform.

5.8 Legal, Regulatory, and Safety Disclosures

We may disclose personal data to government authorities, law enforcement agencies, courts, regulators, or other authorised persons where required by law or where we have a good faith belief that disclosure is reasonably necessary to:

  • comply with applicable law or legal process;
  • respond to subpoenas, court orders, regulatory requests, or government directions;
  • enforce our Terms of Use, agreements, or policies;
  • investigate fraud, security incidents, or unlawful activity;
  • protect the rights, property, or safety of RFA, users, partners, or the public;
  • respond to claims that content, postings, advertisements, or activities violate third-party rights.

5.9 Business Transfers

If RFA is involved in a merger, acquisition, restructuring, financing, sale of assets, insolvency, or similar transaction, personal data may be transferred or disclosed as part of that transaction, subject to applicable law and appropriate safeguards.

6. Data Storage and Location

Your personal data is stored and processed in India.

We do not intentionally transfer or process your personal data outside India. Where any future processing outside India becomes necessary, we will update this Privacy Policy and take steps required under applicable Indian data protection laws before such processing occurs.

7. Security Safeguards

We adopt reasonable security practices and procedures designed to protect personal data from unauthorised access, disclosure, alteration, loss, misuse, or destruction.

These safeguards may include, where appropriate:

  • access controls and role-based permissions;
  • password and authentication controls;
  • encryption or secure transmission protocols;
  • secure servers and hosting environments;
  • monitoring, logging, and audit controls;
  • employee and contractor confidentiality obligations;
  • vendor and service-provider security controls;
  • backup, recovery, and incident-response processes;
  • periodic review of security measures.

However, no method of transmission over the internet or electronic storage is completely secure. Users are responsible for maintaining the confidentiality of their account credentials, passwords, OTPs, and devices used to access the Platform.

RFA will never ask you to disclose debit or credit card PINs, UPI PINs, OTPs, net-banking passwords, or mobile banking passwords. If you receive any email, call, message, or communication from someone claiming to represent RFA and asking for such information, do not share it. If you have already shared such information, you should immediately report the matter to the appropriate bank, payment provider, and law enforcement agency.

8. Personal Data Breach

If we become aware of a personal data breach, we will take reasonable steps to contain, investigate, and remediate the breach.

Where required under applicable law, we will notify affected users and relevant authorities in the manner and within the timelines prescribed by applicable law.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or for such longer period as may be required or permitted under applicable law.

Retention periods may vary depending on the type of data and purpose of processing. For example:

  • account information may be retained while your account remains active;
  • transaction, tax, accounting, and payment records may be retained for legally required periods;
  • support, grievance, security, and compliance records may be retained as necessary for legal, regulatory, fraud-prevention, or dispute-resolution purposes;
  • land parcel data, sensor data, IoT data, Location Data, analytics data, and Platform usage data may be retained where necessary to provide services, improve the Platform, maintain continuity of advisory features, or support automation functionality;
  • anonymised or aggregated data may be retained for analytics, research, product improvement, and statistical purposes, provided it does not identify you.

We may retain certain data after account deletion where necessary to prevent fraud or misuse, comply with legal obligations, resolve disputes, enforce agreements, or protect our legitimate interests.

10. Account Deletion and Data Deletion

You may request deletion of your account or personal data by writing to us at:

support@regenfarms.in

Please mention “Account deletion request” or “Personal data deletion request” in the subject line of your communication.

Deleting your account may result in loss of access to your account, Platform services, records, preferences, land parcel data, sensor data, IoT data, Location Data, advisory history, automation history, and other information associated with your account.

We may verify your identity before processing a deletion request.

We may refuse, restrict, or delay deletion where retention is necessary for:

  • pending transactions, services, or support requests;
  • unresolved grievances, claims, or disputes;
  • fraud prevention, security, or misuse investigation;
  • legal, tax, accounting, regulatory, or compliance obligations;
  • enforcement of our agreements or policies.

Once deletion is completed, we may retain anonymised or aggregated data for analytics, research, reporting, and product-improvement purposes.

11. Your Rights

Subject to applicable law, you may have the right to:

  • access your personal data;
  • correct inaccurate or incomplete personal data;
  • update your personal data;
  • request deletion or erasure of personal data;
  • withdraw consent where processing is based on consent;
  • nominate another person to exercise your rights in the event of death or incapacity, where applicable under law;
  • raise a grievance regarding the processing of your personal data.

You may exercise these rights by contacting us at:

support@regenfarms.in

Please include sufficient information for us to verify your identity and understand your request.

We may verify your identity before acting on your request. We may also refuse or limit a request where permitted or required by applicable law.

Withdrawal of consent will not affect processing carried out before such withdrawal. If you withdraw consent for data that is necessary to provide a service, we may restrict, suspend, or discontinue the relevant service or feature.

12. Children’s Personal Data

The Platform is intended only for users who are 18 years of age or older.

We do not knowingly collect, process, store, or use personal data of children below 18 years of age.

If we become aware that we have collected personal data of a child below 18 years of age, we will take reasonable steps to delete such data, unless retention is required under applicable law.

If you believe that a child below 18 years of age has provided personal data to us, please contact us at support@regenfarms.in.

13. Third-Party Links, Services, and Integrations

The Platform may contain links to third-party websites, applications, services, payment gateways, partner platforms, integrations, or tools.

This Privacy Policy does not apply to third-party platforms or services that we do not control. If you interact with third-party services or provide information directly to them, their privacy policies and terms will govern their use of your information.

We are not responsible for the privacy practices, security practices, or content of third-party websites, applications, or services. We encourage you to review their privacy policies before sharing personal data.

14. Communications and Consent to Contact

By providing your contact details, you agree that we may contact you for purposes connected with the Platform, including account management, service delivery, support, transactions, training, product updates, security notices, and other communications described in this Privacy Policy.

Where permitted by law and subject to your preferences, we may contact you through:

  • WhatsApp;
  • phone calls;
  • push notifications;
  • SMS;
  • email;
  • in-app notifications or other Platform-based communication channels.

You may opt out of marketing or promotional communications by using the available unsubscribe or opt-out mechanism, adjusting available Platform settings, or contacting us at support@regenfarms.in.

However, we may continue to send service-related, transactional, security, legal, or account-related communications where necessary.

15. Withdrawal of Consent

Where we process your personal data based on consent, you may withdraw consent by writing to us at:

support@regenfarms.in

Please mention “Withdrawal of consent for processing personal data” in the subject line of your communication.

We may verify your request before acting on it. Withdrawal of consent will not be retrospective and will not affect processing already carried out before withdrawal. If you withdraw consent for data that is necessary to provide the Platform or a specific service, we may restrict, suspend, or discontinue access to the relevant service or feature.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Platform features, legal requirements, or business operations.

The updated Privacy Policy will be posted on the Platform with a revised effective date. Where required by applicable law, we may notify you of material changes through the Platform, email, SMS, WhatsApp, push notification, in-app notification, or other appropriate means.

We encourage you to review this Privacy Policy periodically.

17. Grievance Officer / Data Protection Contact

For questions, complaints, grievances, rights requests, consent withdrawal, account deletion requests, or privacy-related concerns, you may contact:

Grievance Officer: Avinash Kumar
Company: REGENERATIVE FARMS AND AGRITECH PRIVATE LIMITED
Address: Panch Gonpura, Tola Babhanpura, Gonpura, Alampur, Patna Sadar, Patna, Bihar – 801505, India

Email: support@regenfarms.in
Phone: +91 96678 61210
Working Hours: Monday to Friday, 09:00 to 18:00 IST

We will review and respond to privacy-related grievances in accordance with applicable law.