Privacy Policy

Effective 2026-08-13

This document is a draft published for launch and is pending final legal review. It may be updated; the effective date above reflects the current version.

Asmita is operated by Founderfreedom Ventures LLP ("Asmita", "we", "us"). This policy explains what personal data we collect, why, where it is processed, who we share it with, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act). Asmita is an agronomy and contract-farming platform — we advise on farming and coordinate procurement; we never lend money or move funds on your behalf.

1. What we collect

We practise data minimisation — we collect only what a feature needs:

• Account & contact: name, phone number, and preferred language.
• Field location & boundary: the location of your field. If you map your field —

by walking its edge or drawing it — we store its boundary as a set of coordinates (a polygon) and compute its area; otherwise we store an approximate point for the field. We use these coordinates to fetch weather, soil, elevation and satellite data for your field (see Section 5).

• Crops & activity: the crops you grow, advisories shown, scans you submit, and

procurement/settlement records tied to your contracts.

• Device data: app version and basic diagnostics to keep the service working.

Your name and security secrets (such as a two-factor authentication secret) are encrypted at rest. Precise location and other sensitive fields are protected and are never shared in a form that identifies you without your consent.

2. Why we use it (purpose limitation)

We use your data only for the purposes you consent to, captured per purpose at onboarding — for example crop advisory, community pooling, or filing a subsidy on your behalf. We do not bundle consent, and you can withdraw any consent at any time.

3. Consent & your rights

Under the DPDP Act you may, for your own data:

• Access & portability — request a copy of your data.
• Correction — fix inaccurate details.
• Erasure — ask us to delete your account and data. See

Data Deletion for exactly how, what is deleted, and how long it takes.

• Withdraw consent — for any purpose, at any time.
• Grievance redressal — raise a concern with our Grievance Officer.

To exercise any right, or to reach our Grievance Officer, email [email protected]. See our Grievance Redressal page for timelines.

4. Sharing & service providers

We do not sell your personal data. Data derived for operators, buyers, and government schemes is aggregated and de-identified — counts and coarse bands, never your identity — unless you have consented to a specific purpose (e.g. a subsidy filed on your behalf).

We rely on the following service providers (sub-processors) to run Asmita, under contractual data-protection terms:

• Neon — our managed PostgreSQL database.
• Upstash — managed cache and background-job queue.
• Google Cloud — application hosting (Cloud Run), secret management, and website

analytics (Google Analytics; see our Cookie Policy).

• Resend — transactional email (for example verification messages).
• Meta Platforms / WhatsApp — messaging, when you use WhatsApp with us (Section 6).

5. Where your data is processed (cross-border transfer)

Your data is stored and processed on servers located in Singapore — our database provider (Neon) and our application hosting (Google Cloud Run, region asia-southeast1). This means your personal data is processed outside India. The DPDP Act permits such transfers to countries the Government has not restricted; Singapore is not restricted. We transfer only to reputable providers under contractual safeguards.

To generate your advice we also send your field's coordinates (latitude and longitude) to specialised data providers, which return conditions for that location:

• Open-Meteo — weather.
• ISRIC SoilGrids — soil properties.
• OpenTopoData — ground elevation and slope.
• Copernicus (Sentinel-2) — satellite vegetation greenness.
• NASA Earthdata — rainfall and soil moisture.

Market prices are looked up by your district and state, not your coordinates (data.gov.in / Agmarknet).

6. WhatsApp

If you use WhatsApp with us — including verifying your phone number by sending a short code from our app to our WhatsApp number — Meta Platforms / WhatsApp processes your message and phone number under its own terms as our messaging provider. We receive your number already verified by WhatsApp and use it only to confirm the number on your account and to send advisories and alerts you have asked for. We do not retain your WhatsApp message content.

7. Security & retention

We encrypt sensitive data in transit (TLS) and at rest, and restrict access on a need-to-know basis. We retain data only as long as needed for the service, audit, and legal obligations, then delete or anonymise it.

8. Children

Asmita is intended for adults (farmers and operators). We do not knowingly collect data from children.

9. Contact

Founderfreedom Ventures LLP — [email protected]. Grievance Officer — [email protected].