Privacy policy

CropPlan is a product of Kapta, operated by ABSOLUTEPIXEL UNIPESSOAL, LDA. Our company privacy policy (Portuguese) provides the general framework. The information below specifies the data, purposes, legal bases and storage used by CropPlan and takes precedence for this product where the general policy differs. For privacy requests, you can also contact info@kapta.pt.

Account creation uses your name, email, a password hash, email-confirmation status and session records to provide and secure your account. Planning data in a free account stays in this browser. Pro synchronises plans, crops, preferences and catalogue content with our server to provide the contracted features. Contract performance and steps taken at your request before a contract are the legal bases for these functions.

With your consent, and only when configured, Google Analytics 4 processes website usage and technical connection data to help us improve the public website. Google receives connection data, including your IP address when a request is made. The signed-in app is excluded from this integration. We do not intentionally send names, email addresses or authentication tokens. You can decline or withdraw through “Cookie preferences” in the footer. See the cookies policy and Google privacy policy.

The contact form opens your email application with a draft. It does not submit your message to our server. If you send that email, we use its contents and your address to answer your request, based on pre-contractual steps or our legitimate interest in responding to support enquiries. Authentication and hosting logs, including IP addresses where recorded, help prevent abuse and investigate faults. We do not use the contact acknowledgement for marketing consent.

Stripe processes payments and manages subscriptions. We receive billing identifiers, payment status and subscription dates; the app does not store full card numbers. The hosting and email providers below process data for their respective services. The app loads fonts from Google Fonts, which receives technical connection data. Provider services may involve processing outside the EEA; applicable adequacy decisions or contractual safeguards must cover those transfers. Contact us for details. We do not sell your personal data. See Stripe’s privacy policy and Google’s privacy policy.

Hosting provider

To be configured before launch

Hosting region

To be configured before launch

Email provider

To be configured before launch

Email region

To be configured before launch

Account information and Pro data are kept while the account is active. Deleting your account removes its application records and local cache on this device; other browsers may retain local copies. Sign-out retains an account-specific local copy for your next sign-in. Clearing browser storage removes it. Sessions are configured to expire after 180 days without activity. We send account verification and password-reset emails. Only hashes of their one-use tokens are stored; links expire after 24 hours and 30 minutes respectively. Expired tokens and email-request rate-limit records older than one day are cleaned on subsequent email requests. Payment records held by providers and information needed for statutory obligations or disputes may be retained for the applicable legal period. Contact and hosting-log retention periods are listed below.

Contact retention

To be configured before launch

Log retention

To be configured before launch

You can request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. If a future feature relies on consent, you can withdraw it without affecting earlier lawful processing. Write to help@cropplan.app; we may need proportionate information to verify your identity. You may complain to your supervisory authority, including Portugal’s CNPD. There is no automated decision-making with legal or similarly significant effects. If you publish a Pro catalogue, the selected farm details, contacts and products become publicly accessible; publish only information you intend to share.