Privacy Policy

1. Who we are

Ericolas Technologies Limited of Lusaka, Zambia ("Agririgo", "we") is the data controller for personal data processed on this Platform. We process personal data in accordance with the Data Protection Act No. 3 of 2021 of Zambia and, where it applies to you, the EU General Data Protection Regulation.

2. What we collect, and what we deliberately do not

Account and profile data: your name, email address, password (stored only as a cryptographic hash by our authentication provider; we can never read it), role, organisation, country and stated purpose of use, plus the timestamp and version of the terms you accepted.

Usage events: sign-ins, studio sessions, counts of images processed and exports made, and pages of the Platform used. These events record what happened and when, tied to your account.

Technical data: our hosting providers log IP addresses and request metadata for security and delivery; we do not build advertising profiles from them.

What we do not collect: your Rigo Studio images and annotations stay on your device and are not uploaded; we hold no payment card data; and we do not ask for or store government identity documents.

3. Why we process it

To provide the service: accounts, saved acceptance of terms, and the studio itself. Legal basis: performance of our contract with you.

To secure the Platform: detecting abuse, enforcing rate limits and investigating incidents. Legal basis: legitimate interest.

To improve the Platform: data you share with us, your profile and your usage events are analysed, usually in aggregate, to understand who the Platform serves and to make it better. This is stated plainly at sign-up and is a condition of use. Legal basis: consent and legitimate interest.

To communicate: service messages about your account or material changes to terms. We do not sell your data, and we do not send marketing without separate consent.

4. Where it lives and who touches it

Account data and events are stored with Supabase (database and authentication, hosted in the European Union, Frankfurt region) and the website is delivered by Vercel. Both act as processors under their own security and data-processing terms. Access within Agririgo is restricted to people who need it to operate the service.

We may publish aggregated, anonymised statistics (for example, "40% of studio users are agronomists") that can never identify you. We disclose personal data only if a law or court order compels it, or to protect the Platform and its users from serious harm.

5. Security, honestly stated

Data is encrypted in transit (TLS) and at rest. Database access is guarded by row-level security so each account can read only its own records. Passwords are hashed with industry-standard algorithms. No system is unbreakable; if a breach materially affects you, we will notify you and the Office of the Data Protection Commissioner as the law requires.

The strongest protection is architectural: the most sensitive material in our ecosystem, your field imagery, never leaves your device in the first place.

6. Your data stays yours

Download everything: the "My data" button inside Rigo Studio exports your complete profile and usage history as JSON, anytime, no request form needed.

Keep results locally: analysis outputs, labels and datasets can be saved to your own device; labels also autosave to your browser's local storage so closing a tab never loses work.

Correct or delete: you can update profile fields in the studio, and you may request deletion of your account and personal data by emailing us; we complete verified requests within 30 days, subject to records we must keep by law.

Object or complain: you may object to specific processing, withdraw consent for the future, and lodge a complaint with the Office of the Data Protection Commissioner of Zambia or your local supervisory authority.

7. Retention

Profiles live as long as your account. Usage events are kept for up to 24 months, then deleted or anonymised. Backups roll off on our processors' standard schedules. Data tied to legal obligations is kept only as long as those obligations require.

8. Cookies and local storage

We use only what the service needs: an authentication session token, and local storage for your studio preferences and label autosave. There are no third-party advertising or tracking cookies on this Platform.

9. Children

The Platform is not directed at children under 16. If you believe a child has created an account without appropriate supervision, contact us and we will remove it.

10. Changes and contact

If this policy changes materially, we will tell you on the Platform and, for studio users, ask you to re-accept before continuing.

Data requests and questions: ernestkapesa@gmail.com · Ericolas Technologies Limited, Lusaka, Zambia.