Privacy Policy

1. Introduction

EcoStadt Technologies ("Company," "we," "us," or "our") is committed to protecting the privacy of our users, customers, and business partners. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you access or use the EcoStadt Production Portal (the "Portal"), our website, or interact with us through SMS/text messaging services. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

We may collect the following categories of information:

• Personal Identification Information: Name, email address, phone number (including mobile number), job title, and company affiliation.
• Account Information: Login credentials, user preferences, and role assignments within the Portal.
• Usage Data: Information about how you interact with the Portal, including pages visited, features used, timestamps, and session duration.
• Device and Technical Data: IP address, browser type, operating system, and device identifiers.
• Communication Data: Records of communications with us, including SMS/text messages sent and received through our two-factor authentication (2FA) system.
• Business Data: Production records, inventory data, shipping documents, and other operational information entered into the Portal.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Portal and its features.
• To authenticate your identity and secure your account, including sending SMS verification codes for two-factor authentication.
• To communicate with you regarding your account, security alerts, and system notifications.
• To improve our services, troubleshoot issues, and enhance user experience.
• To comply with legal obligations, including regulatory requirements applicable to organic fertilizer and pesticide manufacturing.
• To protect against unauthorized access, fraud, and other security threats.

4. SMS/Text Messaging Privacy

When you provide your mobile phone number and opt in to receive SMS/text messages from EcoStadt Technologies, we use your phone number solely for the purpose of sending two-factor authentication (2FA) verification codes to secure your account access.

Specifically regarding our SMS/text messaging program:

• Your mobile phone number and SMS opt-in consent data will not be shared with any third parties or affiliates for marketing or promotional purposes.
• We will only send SMS messages related to account security (2FA verification codes) and critical system alerts that you have explicitly opted in to receive.
• Message frequency varies based on your login activity. Typically, you will receive one SMS per login attempt when 2FA is enabled.
• You may opt out of SMS messages at any time by replying STOP to any message or by disabling 2FA in your account settings.
• Standard message and data rates may apply depending on your mobile carrier and plan.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following limited circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating the Portal (e.g., cloud hosting, SMS delivery via Twilio). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Legal Requirements: We may disclose information when required by law, regulation, legal process, or governmental request, including compliance with CDFA, OMRI, and other agricultural regulatory bodies.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• Protection of Rights: We may disclose information to protect the rights, property, or safety of EcoStadt Technologies, our users, or others.

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Two-factor authentication (SMS-based) for account access.
• HTTP security headers (Helmet.js) to prevent common web vulnerabilities.
• Rate limiting on login and API endpoints to prevent brute-force attacks.
• Automatic session timeout after periods of inactivity.
• Role-based access controls within the Portal.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements. Production and operational data may be retained for the duration required by applicable agricultural regulations and compliance standards.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Opt-Out of SMS: Reply STOP to any SMS message or disable 2FA in your account settings.
• SMS Help: Reply HELP to any SMS message for assistance.

To exercise any of these rights, contact us at [email protected].

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. EcoStadt Technologies does not sell personal information.

10. Children's Privacy

The Portal is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of the Portal after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: