Data Processing Addendum (DPA)
Last updated: June 17, 2026
This Data Processing Addendum ("DPA") forms part of the Terms of Service between John Fodchuk (operating as AgriForge) ("AgriForge") and the customer agreeing to these terms ("Customer") and applies where AgriForge processes Personal Information on Customer's behalf in providing the Service. It is intended primarily for Pro and Enterprise customers who manage personal information of others within the Service.
1. Definitions
- Personal Information — information about an identifiable individual that Customer enters into or generates in the Service (for example, names and contact details of team members, contractors, buyers, or other individuals appearing in records or invoices).
- Processing — any operation performed on Personal Information (collection, use, storage, disclosure, deletion, etc.).
- Applicable Privacy Law — PIPEDA and any other privacy or data-protection law applicable to the parties.
- Sub-processor — a third party engaged by AgriForge to process Personal Information.
Roles: with respect to Personal Information in Customer's account, Customer is the controlling organization and AgriForge acts as a service provider/processor, processing only on Customer's documented instructions (which include the Terms and use of the Service's features).
2. Scope and instructions
AgriForge will process Personal Information only:
- to provide, secure, and support the Service;
- in accordance with Customer's documented instructions, including configuration and use of the Service; and
- as required by law, in which case AgriForge will inform Customer unless legally prohibited.
AgriForge will not sell Personal Information or use it for its own purposes, except to create de-identified, aggregated data to operate and improve the Service.
3. Confidentiality
AgriForge will ensure that personnel authorized to process Personal Information are bound by confidentiality obligations and are limited to those who need access to provide the Service.
4. Security
AgriForge will implement and maintain reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the Personal Information, including:
- encryption of data in transit and at rest;
- access controls and the principle of least privilege;
- passwordless authentication for user access;
- logging and monitoring; and
- regular review of safeguards.
A summary of our technical and organizational security measures is available on request.
5. Sub-processors
Customer authorizes AgriForge to engage Sub-processors to provide the Service. AgriForge will:
- impose data-protection and security obligations on each Sub-processor that are no less protective than this DPA; and
- remain responsible for each Sub-processor's performance.
Current Sub-processors:
| Sub-processor | Purpose | Processing location |
|---|---|---|
| DigitalOcean | Cloud hosting, database, and object storage | United States |
| Stripe | Payment processing | United States |
| Resend | Delivery of one-time sign-in codes and notifications by email | United States |
| Twilio | Delivery of one-time sign-in codes by SMS | United States |
| Google LLC (Google Maps) | Field maps and satellite imagery | United States |
| Open-Meteo | Local weather data (by coordinates) | European Union (Germany) |
| xAI | AI chat assistant and image generation | United States |
| Anthropic | AI chat assistant | United States |
Photo analysis (animal identification, weight, and condition) runs on AgriForge's own servers and is not sent to a third-party AI provider.
AgriForge will notify Customer of changes to Sub-processors by email or in-app at least 30 days before a new Sub-processor begins processing Personal Information, during which Customer may object on reasonable data-protection grounds.
6. International transfers
Personal Information may be processed in Canada and other countries, including the United States, through AgriForge and its Sub-processors. AgriForge will use contractual and other appropriate safeguards to require a comparable level of protection consistent with Applicable Privacy Law. Current processing locations are listed in the Sub-processors table above — primarily the United States, with weather data processed in the European Union.
7. Assistance to Customer
Taking into account the nature of processing, AgriForge will provide reasonable assistance to Customer with:
- responding to individuals' access and correction requests (including by providing in-app export and edit tools);
- security-incident response; and
- privacy impact assessments and inquiries from regulators, to the extent the request relates to AgriForge's processing.
8. Security incidents
AgriForge will notify Customer without undue delay after becoming aware of a breach of security safeguards involving Personal Information processed on Customer's behalf, and will provide information reasonably available to help Customer meet its own notification obligations (including, under PIPEDA, assessing real risk of significant harm), targeting notification within 72 hours of confirming the incident.
9. Return and deletion
On termination of the Service, or on Customer's request, AgriForge will delete or return Personal Information processed on Customer's behalf, except where retention is required by law, within 90 days. Backups are deleted on a rolling cycle.
10. Audits
On reasonable written request and no more than once per year (or following a security incident), AgriForge will make available information necessary to demonstrate compliance with this DPA, which may take the form of summaries, certifications, or third-party reports where available, subject to confidentiality. Audits are limited to information relevant to AgriForge's processing of Customer's Personal Information and must not compromise the security or data of other customers.
11. Liability and order of precedence
This DPA is subject to the limitations of liability in the Terms. If there is a conflict between this DPA and the Terms regarding the processing of Personal Information, this DPA controls.
12. Contact
John Fodchuk (operating as AgriForge)
Attn: Privacy
Saskatchewan, Canada
[email protected]