Privacy Policy

This Privacy Policy explains how Grow13 (ABN 13 202 575 229) ("Grow13", "we", "us" or "our") collects, uses, discloses and protects information in connection with our website at grow13.com.au and the Grow13 platform (together, the "Services").

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Services, you acknowledge that your information will be handled in accordance with this policy.

We collect the following categories of information:

• Contact and account information — name, work email, phone number, organisation, job title and login credentials for authorised users.
• Farm operational data — data you or your organisation provide or connect to the platform, including paddock and property boundaries, crop and variety details, harvest records and yields, grain storage and inventory levels, sales contracts, machinery telematics and location data, agronomic records, and related financial information.
• Third-party integration data — data we receive from systems you authorise us to connect to, such as machinery manufacturer platforms, farm management software, weather services and satellite imagery providers.
• Usage and technical information — IP address, browser and device type, pages viewed, features used, and log data generated when you interact with the Services.
• Communications — information you provide when you request early access, contact us or respond to surveys.

Farm operational data is generally business information of our customers. Where it can identify an individual (for example, a sole trader's property records or a machine operator's location), we treat it as personal information under this policy.

We use information to:

• provide, operate and maintain the Services, including dashboards, reports and alerts;
• generate analytics and AI-assisted insights for your organisation;
• manage user accounts, authentication and role-based access;
• respond to enquiries and early-access requests, and provide customer support;
• monitor, secure and improve the Services, and develop new features;
• send service-related notices and, where permitted, product updates; and
• comply with our legal obligations and enforce our agreements.

We may use aggregated and de-identified data — which cannot reasonably be used to identify you, your organisation or a specific property — to improve our models and services. We will not sell your farm operational data, or share identifiable operational data with other customers, without your consent.

Your organisation retains ownership of the farm operational data it provides to or connects with the Services. We process that data on your behalf to deliver the Services and in accordance with your agreement with us. You can request export or deletion of your data at any time, subject to any legal retention obligations.

We may disclose information to:

• service providers who help us operate the Services, such as cloud hosting, data storage, email delivery, analytics and AI processing providers, who are bound by confidentiality and data-protection obligations;
• users within your organisation, according to the access permissions it configures;
• third-party platforms you direct us to integrate with;
• professional advisers, insurers and auditors;
• a purchaser or successor in connection with a merger, acquisition or sale of assets, subject to equivalent confidentiality protections; and
• regulators, law enforcement or others where required or authorised by law.

Some of our service providers may store or process information outside Australia, including in the United States and other countries where they operate. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs.

We take reasonable steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures include encryption in transit, access controls and role-based permissions, authentication requirements, logging and monitoring, and restricting staff access to those who need it. No system is completely secure, and we cannot guarantee the absolute security of information. If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

We retain information for as long as needed to provide the Services and for legitimate business or legal purposes. When your organisation's agreement ends, we will delete or de-identify its operational data within a reasonable period, unless you ask us to export it first or we are required by law to retain it.

We use cookies, local storage and similar technologies to keep you signed in, remember preferences and understand how the Services are used. You can control cookies through your browser settings, although some features may not function correctly if they are disabled.

If you request early access or subscribe to updates, we may send you information about Grow13. You can unsubscribe at any time using the link in our emails or by contacting us. We comply with the Spam Act 2003 (Cth).

You may request access to, or correction of, the personal information we hold about you by contacting us using the details below. We will respond within a reasonable period, usually 30 days. We may need to verify your identity before acting on a request.

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you may lodge a complaint with the OAIC at oaic.gov.au.

We may update this policy from time to time. The current version will always be published at grow13.com.au/privacy-policy, and we will notify customers of material changes.

For privacy questions or requests, contact us at arangrewal05@gmail.com.