Privacy Policy

This policy applies to the institutional website, account registration and administrative dashboard, digital product catalogs, Bio Link pages, and related software tools offered under the AgroPage brand. Personal data comprises any information identifying or rendering identifiable a natural person.

AgroPage determines the purposes and technical means of data processing required for account management, software delivery, and system security. For these activities, AgroPage acts as a data controller.

The merchant managing an individual catalog independently conducts commercial relationships with prospective buyers. When processing inquiry data on behalf of that merchant, AgroPage functions as a data processor pursuant to legitimate merchant instructions.

The data processed depends on the specific features utilized. Merely browsing the public marketing website does not require submitting the data necessary to register an account or initiate a catalog inquiry.

• Account and authentication: full name, corporate email, cryptographically hashed credentials, session identifiers, company association, and team permission tiers.
• Company and catalog information: business trade name, agricultural segment, telephone contacts, logos, product photos, technical specifications, and pricing entered into the software.
• Product inquiries: customer name and telephone number provided by visitors, selected items, quantities, delivery notes, and calculated quote totals.
• Customer support and billing: messages sent to support staff, business proposal requirements, invoicing details, and records of commercial transactions.
• Technical and security logs: connection timestamps, IP addresses, browser user-agents, and diagnostic audit logs required for platform security and incident investigation.

All personal data processing corresponds to a defined business purpose supported by a valid legal basis under applicable data protection laws.

• Creating and authenticating user accounts, administering services, and fulfilling pre-contractual requests: performance of a contract or preliminary procedures.
• Complying with tax rules, court orders, and mandatory application access logging: compliance with legal or regulatory obligations.
• Securing user accounts, preventing fraudulent abuse, and diagnosing software defects: legitimate interests balanced against data subject rights.
• Retaining records for legal defense in judicial or administrative disputes: regular exercise of legal rights.
• Optional marketing subscriptions or non-essential features: specific, informed, and revocable consent.

When an online catalog or Bio Link is published, the business details selected for public display—including store name, WhatsApp contact numbers, product images, descriptions, and links—can be viewed and shared by visitors and indexed by web search engines.

Account administrators must review all published content before sharing and ensure no sensitive personal documents, confidential customer files, or unauthorized third-party information is included.

Unpublishing or altering a catalog page in AgroPage does not instantly delete external search engine caches or third-party web captures. Updating third-party indexes requires contacting the respective external search services.

Upon completing an inquiry in the catalog, the submitted customer contact details and selected products may be recorded in the merchant's private admin dashboard before routing to WhatsApp.

The redirect function prepares a pre-filled message with the merchant's business telephone number. The message is transmitted inside the WhatsApp application by direct user action. AgroPage does not receive or monitor subsequent chat histories.

Admin dashboard reports summarize store operations and performance indicators (such as inquiry counts and top-viewed items). Granular permissions limit which team members can view customer order records.

For questions regarding how the selling merchant handles your personal information, contact the merchant directly using the contact details provided in the storefront.

Authentication routines employ secure session cookies to enable authenticated access to the dashboard and prevent CSRF attacks. Disabling these cookies will prevent access to restricted admin zones.

The public catalog utilizes browser localStorage to persist customer cart selections across page views. This storage contains no advertising trackers and can be cleared in your web browser preferences at any time.

The public website does not embed behavioral advertising trackers or third-party ad network pixels.

Browser settings allow users to view, block, or delete cookies and site storage at their discretion.

Platform operations rely on cloud infrastructure, managed relational databases (Neon PostgreSQL), and object storage providers (Cloudflare R2). These vendors process technical data strictly to deliver platform functionality under contractual data protection terms.

Inquiry data is shared with the merchant chosen by the shopper to fulfill the requested commercial interaction.

AgroPage never sells or rents personal data. Information is disclosed to public authorities only upon receipt of legally binding regulatory or court orders.

Cloud hosting facilities and distributed storage may involve data processing outside Brazil. Data centers are selected adhering to high availability, SOC compliance, and encryption standards.

International transfers of personal data are conducted in accordance with statutory safeguards provided under Brazilian General Data Protection Law (LGPD).

Users may request information regarding international cloud providers and transfer mechanisms through our support team.

Personal data is retained only as long as necessary to fulfill the intended purposes or comply with statutory retention requirements (such as the 6-month application access logs mandated by the Brazilian Civil Rights Framework for the Internet).

Upon termination of the service or expiry of the statutory retention period, personal data is permanently deleted or irreversibly anonymized.

When closing an account, users may request detailed information regarding which records are deleted immediately and which must be retained under statutory obligations.

The platform employs encrypted communications (TLS/HTTPS), strong password hashing algorithms, and tenant-isolated access controls.

Users are advised to keep credentials confidential, implement multi-user roles for employees, and refrain from pasting sensitive payment credentials into open text fields.

Any verifiable security incidents carrying significant risk to individuals will be reported to affected users and the National Data Protection Authority (ANPD) in accordance with statutory timelines.

Under Brazilian General Data Protection Law (LGPD), individuals retain the following statutory rights regarding their personal data:

• Confirmation of data processing activities and direct access to stored personal data.
• Rectification of incomplete, inaccurate, or outdated records.
• Anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data.
• Portability of personal data to an alternative service provider upon explicit request.
• Disclosure of third parties with whom data has been shared.
• Revocation of consent and deletion of consent-based processing records.
• Review of automated decisions significantly affecting user interests.

To submit a data protection inquiry or request, reach out via the support contact link located at the bottom of this page, specifying that your request pertains to personal privacy.

In accordance with statutory timelines under LGPD, basic access requests are handled promptly, with comprehensive reports provided within 15 (fifteen) business days.

To prevent unauthorized disclosures to third parties, AgroPage may request identity verification proportionate to the nature of the request.

AgroPage business services are designed strictly for individuals with legal contracting capacity representing commercial enterprises.

The platform does not intentionally request or require sensitive personal data (such as health, biometric, religious, or political data) for standard catalog operations. If inadvertent submission occurs, notify support for review and deletion.

Essential transactional notices regarding account status, terms changes, and security alerts are separate from promotional mailings.

This Privacy Policy may be revised from time to time. The latest update date is reflected in the header. Substantive updates affecting customer agreements will be communicated via primary contact channels.