Privacy and Cookie Notice

Last updated: 1 June 2026

Introduction

Plexaris Agri is operated by Plexaris Uganda Ltd, registered in Uganda ("we", "us"). This notice explains what personal data we process, why, how long we keep it, and the rights you have. We process personal data in line with Uganda's Data Protection and Privacy Act 2019. This is a pilot service and this notice will be updated as the service matures.

Cookies

We use only strictly necessary cookies. They keep you signed in (an authentication session cookie) and protect forms against cross-site request forgery (a CSRF token cookie). We do not use analytics, advertising, or tracking cookies, and we do not share cookie data for marketing. Because these cookies are essential to provide the service, they do not require consent. You can clear them through your browser settings, but the service will not work without them.

What data we hold and who processes it

Depending on your role we may process: your name and phone number; your preferred language; farm plot and harvest records; marketplace orders, deliveries, and payment records; the decentralized identifier (DID) used for sign-in; and security audit records. Farmer names and phone numbers are encrypted at rest. We use the following sub-processors to run the service: Google Cloud Platform (compute and backup storage), Supabase (database), and Sentry (error monitoring), all hosted in the European Union.

How long we keep your data

We keep personal data only as long as necessary for the purpose it was collected, unless a longer period is required by law or contract. In summary: account data up to 24 months after your last sign-in; farmer and plot data up to 36 months after your last activity; marketplace and audit records up to 7 years (financial and integrity reasons); operational logs for 7 days; and encrypted database backups for 30 days. At the end of a retention period we delete or irreversibly de-identify the data.

Your rights

Under Uganda's Data Protection and Privacy Act 2019 you have the right to access your personal data, to have inaccurate data corrected, to request erasure, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You also have the right not to be subject to a decision based solely on automated processing that significantly affects you. To exercise any of these rights, contact us at info@plexaris.ai.

International data transfers

Your data is collected in Uganda and processed on our behalf by sub-processors located in the European Union (Google Cloud, Supabase, and Sentry), chosen for performance, reliability, and cost. Transfers are governed by our agreements with these providers. We apply technical safeguards including encryption in transit and encryption of sensitive fields at rest.

Contact

Controller: Plexaris Uganda Ltd, registered in Uganda. For any data protection inquiry or to exercise your rights, contact us at info@plexaris.ai. If you have an unresolved concern, you may also contact Uganda's Personal Data Protection Office.