Privacy Policy

FarmAgent (web) & FieldAgent (mobile), operated by Automated Fruit Scouting, S. de R.L. de C.V. / FruitScout ("FruitScout", "we", "us").
Effective: [EFFECTIVE DATE] · Last updated: 2026-07-27 · Contact: privacy@fruitscout.ai

FruitScout provides agricultural-labor and crop-intelligence software to farm operators ("Customers"). FarmAgent is the web application Customers use to manage their operation; FieldAgent is the mobile application their field workers use to sign in, receive tasks, and record work. This policy explains what personal data we process, why, and the choices you have.

Two roles. For most worker data, FruitScout acts as a processor on behalf of the Customer (the worker's employer), who is the data controller. Workers exercising their rights should also contact their employer; we assist the Customer in responding.

1. Data we collect

CategoryExamplesFrom whom
Account & identityName, email, phone number, role, employer/organization, authentication identifiers (Firebase UID)Customers & workers at sign-up/invitation
Employment / laborCrew, position, shifts, clock-in/out times, tasks, piecework (destajo) counts, hoursGenerated in-app
Sensitive (MX labor compliance)CURP, Social Security Number (NSS/IMSS)Customer/worker, where required for social-security compliance
LocationDevice geolocation captured at clock-in / task events to verify work locationFieldAgent app, with device permission
Device & usageDevice model/OS, app version, log/diagnostic data, IP addressAutomatically

2. How we use it

3. Legal bases

We process personal data to perform our contract with the Customer, to comply with legal obligations (labor/social-security law), and based on legitimate interests in operating and securing the service. Sensitive data (CURP/NSS) is processed only where necessary for compliance and with the protections required by the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and applicable law.

4. Location & sensitive data (app-store disclosures)

Location is collected by FieldAgent only to record where work is performed (clock-in/task verification). It is used in the foreground around those events, is tied to the worker's employment records, and is never sold or used for advertising. You may deny or revoke the location permission in your device settings; some work-verification features will not function without it. CURP/NSS are encrypted at rest and accessible only for the compliance purposes above.

5. How we share it

6. International transfers

Our infrastructure runs on Google Cloud. Some processing (including authentication and certain AI-assisted onboarding features) may occur on servers outside Mexico, including the United States. Where data is transferred internationally, we apply appropriate safeguards and process it under this policy.

7. Retention

We retain personal data for as long as the Customer's account is active and as needed to provide the service, and thereafter as required to meet legal, labor, and social-security record-keeping obligations. We delete or anonymize data when no longer needed, subject to those obligations.

8. Security

We use industry-standard safeguards: encryption in transit (TLS) and at rest, encryption of sensitive identifiers (CURP/NSS), tenant isolation, and access controls. No method is perfectly secure, but we work to protect your data.

9. Your rights (ARCO & more)

Subject to law, you may request to Access, Rectify, Cancel, or Object (derechos ARCO) to the processing of your personal data, and to withdraw consent. To exercise these rights, contact privacy@fruitscout.ai (workers should also contact their employer, who controls the data). You may also request deletion of your account.

10. Children

FieldAgent is a workforce tool intended for adult workers and is not directed to children. We do not knowingly collect data from anyone below the legal working age.

11. Changes

We may update this policy; we will post the new version here and update the "Last updated" date. Material changes will be communicated to Customers.

12. Contact

Automated Fruit Scouting — Privacy · privacy@fruitscout.ai · [POSTAL ADDRESS].

Draft for review. This is a strong first draft prepared to unblock the Google/Apple/OAuth requirements. It should be reviewed by counsel (esp. the LFPDPPP / CURP-NSS / IMSS-STPS and international-transfer sections) and a Spanish-language version published for field workers before this is the official, linked policy. Bracketed fields ([EFFECTIVE DATE], [POSTAL ADDRESS]) need filling.