Inversiones Rafael Bello IRB EIRL (RNC 132375408), Santo Domingo, Dominican Republic, is the controller of the personal data processed on Recrops. Privacy contact: [email protected].
We collect the data you provide directly when registering and using the platform:
We use your data to:
We process your data under the following bases (GDPR art. 6 and Dominican Law 172-13): performance of the contract, legitimate interest in the security and improvement of the service, your consent where required, and compliance with legal obligations.
To operate the platform we rely on providers that process data on our behalf: Google LLC (Firebase: authentication, database and hosting), Cloudflare, Inc. (network security and cookie-free aggregate web analytics) and, for paid subscriptions, PayPal (payment processing). We do not sell your personal data. You may request the up-to-date list of subprocessors at any time.
Your data may be processed on infrastructure located outside your country, including the United States. Our providers apply recognized safeguards such as standard contractual clauses and encryption in transit and at rest.
Your data is retained while your account remains active. If you delete your account and your company has no orders, no registered clients/farms and no aircraft, everything — the account and the company — is permanently deleted. If your company does have such data, we anonymize it instead of deleting it: we remove the account holder's email and name, and from the orders and the client/farm registry we remove client names, signatures, notes and any other data that identifies a third party; location coordinates are rounded to approximately 10 km so they no longer point to the exact field. Only aggregated operational data (hectares, crop, application type, date and amounts) is kept for internal statistics.
We also retain a pseudonymous, irreversible identifier derived from your email (a cryptographic hash, never the email itself), based on our legitimate interest in preventing abuse and fraud — specifically, to stop the same person from repeatedly deleting and re-registering an account to exploit free or trial plans.
You may access, correct, delete, export (portability), object to or restrict the processing of your data at any time by writing to [email protected]. We will respond within 30 calendar days. You may also lodge a complaint with your data protection authority.
We do not use advertising or third-party tracking cookies. We only use essential storage: authentication (Firebase) and your preferences (such as language) in your browser's localStorage. Analytics on the public site is cookie-free and aggregate — it does not identify individuals.
Data is stored on Google Firebase with AES-256 encryption at rest and TLS in transit. We apply role-based access controls, per-company data isolation and automated daily backups.
If a security breach puts your data at risk, we will notify the competent authority within 72 hours where required, and inform affected users without undue delay, together with the measures taken.
The service is not directed to persons under 18 years of age and we do not knowingly collect their data.
Any significant changes to this policy will be communicated by email at least 15 days in advance.
For any privacy-related inquiries: [email protected]