What we hold, and why

Farmgreene is not a registered company. It is built and run by Emmanuel Owolabi in Nigeria, and under the Nigeria Data Protection Act 2023 he is personally the data controller for everything described here. When Farmgreene is incorporated, the company will take on that role and this page will say so.

You can reach the controller at emmycookcodes@gmail.com. There is no separate privacy team — the same person who wrote the code answers the email.

Only what a feature needs in order to work. Grouped by the thing you were doing when you gave it to us:

Making an account

• Your name and email address.
• Your password, stored only as a hash — we cannot read it, and neither can anyone who takes a copy of the database.
• The role you chose: farmer, equipment owner or agent.
• The date and time you last signed in.

Listing equipment

• Details of the machine: type, make, model, year, condition, service history.
• Your rates, deposit, minimum and maximum rental, cancellation terms.
• Where the equipment is: state, LGA, city, and any landmark you add. This is the equipment's location, not yours.
• Photographs you upload.
• Proof of ownership, and an insurance certificate if you add one. These are identity-adjacent documents and are treated as the most sensitive thing on the platform.

Renting, watching and reporting

• Rental requests: the dates you asked for, the cost breakdown at the time, and any note attached.
• Your watchlist, your price alert targets, and your quiet hours.
• Reports you generate and save, and the settings you built them from.

Collecting prices, if you're an agent

• The assignments given to you, the prices you submit, the market and date you recorded them at, and whether each submission was approved.

Writing to us

• Contact form: your name, email, optional organisation, and your message.
• Waitlist: your email, which role you're waiting for, and the area you said you could cover.

Worth stating plainly, because most policies leave it ambiguous:

• There is no analytics on this site. No Google Analytics, no tag manager, no product analytics, no session recording, no heatmaps.
• There are no advertising or social media tracking pixels.
• We do not sell personal data, and we do not share it with data brokers or advertisers.
• We do not build behavioural profiles or make automated decisions that have legal effects on you.
• We do not track you across other websites.

One feature uses location: finding equipment near you in the marketplace. It works like this — you press a button, your browser asks whether you want to share your location, and if you agree the coordinates are held in the page's memory just long enough to measure which listings fall within about 100km of you.

We never ask for it automatically, we ask for coarse rather than precise accuracy, and we never write it to a database, a cookie, or a log. Refusing costs you nothing but that one filter; you can still browse every listing and filter by state instead.

Because the coordinates never leave your device, there is nothing for us to retain, export or delete. If you want to revoke the permission entirely, that's done in your browser's site settings, not here.

Farmgreene sets one cookie. It holds your sign-in session so you don't have to log in again on every page, it expires after seven days, and it is marked SameSite=Lax and Secure in production.

That cookie is strictly necessary — the service cannot work without it, so it does not require your consent, and there is no way to turn it off while staying signed in. We have no analytics, advertising or preference cookies to ask you about. If that ever changes, those cookies will be off by default and you will be asked first.

We also use your browser's local storage to remember that you have dismissed the cookie notice. That never leaves your device.

Our lawful bases under the NDPA:

• Performance of a contract — running your account, publishing your listings, passing rental requests to owners.
• Consent — the waitlist, and your browser permission for location. You can withdraw either at any time.
• Legitimate interests — reviewing listings and price submissions before they publish, and keeping the platform secure and free of abuse. We think you'd expect both.
• Legal obligation — where we're required to keep or produce records.

A small number of processors, each doing one job under our instructions:

• Cloudinary — stores the photographs and the ownership documents you upload.
• Resend — delivers our email: sign-up confirmations, password resets, price alerts, the daily digest, and messages sent through the contact form.
• Groq — generates the written market analysis. This one only ever receives commodity price data. Your name, email and account details are never sent to it.

Other people using Farmgreene see less than you might assume. On a public listing, the owner's first name and profile photo are shown; the exact address, phone number and email are stripped server-side and only shared once a rental is agreed between you.

We would also disclose data if we were legally required to. We have never received such a request.

The processors above operate outside Nigeria, which means your data is transferred abroad. Part IX of the NDPA permits this where there are appropriate safeguards, and we rely on the contractual terms each provider offers.

We keep the list short on purpose. Every additional service is another country your data sits in and another company that has to be trusted with it.

• Account data: while your account exists. Delete your account and we delete it, except where we're required to keep records.
• Listings and rental requests: while the listing is live, and afterwards as a record of what was agreed between the parties.
• Ownership and insurance documents: while the listing they belong to exists. Ask and we will delete them sooner.
• Price submissions: kept indefinitely. They are the historical record the whole platform is built on, and they identify a crop, a market and a date rather than a person.
• Waitlist entries: until we launch in your area, or until you ask to come off.
• Contact messages: they arrive as email and stay in the mailbox unless you ask us to delete them.

Under the NDPA you can ask us to:

• Show you what we hold about you.
• Correct anything that's wrong.
• Delete it.
• Stop or limit what we're doing with it.
• Hand it to you in a portable form.
• Withdraw consent you previously gave, without affecting what happened before you withdrew it.

Email emmycookcodes@gmail.com and we'll act within 30 days. It's one person, so it may take a few of those days — but it will not take longer.

If we handle it badly, you can complain to the Nigeria Data Protection Commission. That right exists whether or not you come to us first.

Farmgreene is not for anyone under 18. We don't knowingly collect data about children, and if we discover we have, we delete it.

The product is early and changing quickly, so this page will change with it. The date at the top is the honest record of when it last did. If a change materially affects you — a new processor, a new category of data, a new purpose — we'll email account holders rather than quietly amend the page.

Questions, requests and complaints all go to the same place: emmycookcodes@gmail.com, or through the contact page.