Privacy Policy

01Who we are

The Platform is operated by Lyncc Technologies Pvt. Ltd., a company incorporated in India with its registered office at 4th Floor, JK Business Centre, 82293/82/A/787/1/4F/1, Road Number 36, Jubilee Hills, Hyderabad, Hyderabad District, Telangana 500033, India.

For the purpose of applicable data-protection laws, Lyncc Technologies Pvt. Ltd. is the data controller (and, in India, the "Data Fiduciary") responsible for personal information processed through the Platform.

02Scope of this policy

lyncc is a cloud-based platform that digitises the procurement of sustainable agricultural commodities. It is used by farmers and farmer organisations, by buyers sourcing verified ingredient lots, and by lyncc team members who operate supply chains. This policy applies to personal information we process about all of these users.

This policy does not cover the independent practices of third parties we do not control, including buyers, producers, or external sites linked from the Platform.

03Information we collect

Information you provide

• Account & identity data — your name, email address, phone number, password, organisation name, role, and (where required for verification) business or farm registration details.
• Farm, commodity & certification data — farm registration, commodities, certifications, production estimates and related records that producers add to the Platform.
• Transaction & procurement data — quotations, sample requests, purchase orders, logistics details, traceability and compliance documentation.
• Images & media — photos you capture or upload (for example, of farms, lots, samples, or documents) using your device camera or files.
• Payment information — billing details processed to complete transactions. Card and bank details are handled by our payment processors; we do not store full card numbers on our systems.
• Communications — messages, support requests, and other content you send to us or exchange through the Platform.

Information we collect automatically

• Device & technical data — device type, operating system, app version, language, unique identifiers, and crash and diagnostic data.
• Usage data — pages and features used, actions taken, and timestamps, to operate and improve the Platform.
• Location data — with your permission, precise (GPS) or approximate location, used to geo-tag farms, lots, and field events for traceability.
• Cookies & similar technologies — see our Cookie Policy for details.

Information from third parties

We may receive information from authentication and analytics providers (such as Google/Firebase), payment processors, and from organisations on whose behalf you are registered.

04How we use information

We use personal information to:

• create and manage your account and authenticate you;
• operate the Platform — register farms and commodities, build and run supply chains, process quotations, samples, purchase orders, and logistics;
• provide traceability, quality assurance, and compliance documentation;
• verify identity, farms, and certifications, and prevent fraud and abuse;
• process payments and maintain transaction records;
• communicate with you about your account, transactions, and support;
• analyse and improve the Platform, including diagnostics and product development;
• maintain the security and integrity of the Platform; and
• comply with legal, regulatory, tax, and audit obligations.

05Legal bases for processing

Where data-protection law (such as the EU/UK GDPR or India's Digital Personal Data Protection Act, 2023) applies, we rely on one or more of the following bases: performance of a contract with you; your consent (which you may withdraw at any time); our legitimate interests in operating, securing, and improving the Platform; and compliance with legal obligations.

Where we rely on consent — for example, to access your camera or precise location — you can withdraw it at any time through your device or account settings, without affecting processing already carried out.

06App permissions

Our mobile app may request the following device permissions. Each is optional and used only for the stated purpose; you can grant or revoke them at any time in your device settings.

07How we share information

We do not sell your personal information. We share it only as needed to operate the Platform and as described below:

• Within the supply chain — relevant information (such as lot, certification, and logistics details) is shared between producers, lyncc, and buyers to carry out a transaction you are part of.
• Service providers — vendors who process data on our behalf under contract (see Section 8).
• Legal & regulatory — where required to comply with law, regulation, legal process, or a lawful government request, or to protect the rights, safety, and property of lyncc, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

08Service providers

We rely on trusted third parties to provide the Platform. These currently include:

• Cloud hosting & infrastructure — providers such as Amazon Web Services, Google Cloud, or Microsoft Azure, to host the Platform and store data.
• Google / Firebase — for authentication, push notifications, analytics, and diagnostics.
• Payment processors — such as Stripe or Razorpay, to process payments securely. Their handling of your payment data is governed by their own privacy policies.

Service providers may only process personal information under our instructions and are bound by confidentiality and security obligations.

09International transfers

lyncc operates in India and the United States, and our service providers may process data in other countries. Where we transfer personal information across borders, we use appropriate safeguards as required by applicable law, such as standard contractual clauses, to protect your information.

10Data retention

We keep personal information only as long as necessary for the purposes set out in this policy — including to provide the Platform, maintain transaction and traceability records, and meet legal, tax, accounting, and audit obligations. When information is no longer needed, we delete or anonymise it. Certain records may be retained for longer where the law requires.

11How we protect data

We use technical and organisational measures appropriate to the risk — including encryption in transit, access controls, and regular security reviews — to protect personal information against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work continuously to safeguard your data and will notify you and the relevant authorities of a breach where required by law.

12Your rights & choices

Subject to applicable law, you may have the right to:

• access the personal information we hold about you;
• correct or update inaccurate or incomplete information;
• delete your information or request erasure;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request a copy of your information in a portable format; and
• nominate another person to exercise your rights, where the law allows.

If you are in California, you may also have rights under the CCPA/CPRA, including to know, delete, and correct personal information, and not to be discriminated against for exercising those rights. We do not sell or "share" personal information for cross-context behavioural advertising.

To exercise any right, contact us using the details in Section 16. We will respond within the timeframe required by law and may need to verify your identity first.

13Deleting your account

You can delete your account at any time from within the app, or by submitting a request on our Account Deletion page. We will delete or anonymise your personal information associated with the account, except for records we are required to retain by law. See the Account Deletion page for what is removed, what may be retained, and timelines.

14Children's privacy

The Platform is intended for use by businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

15Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Platform. Your continued use after changes take effect constitutes acceptance of the updated policy.

16Contact & grievances

For any question, request, or complaint about this policy or your personal information, please contact our Grievance Officer:

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data-protection authority. In India, you may also raise concerns with the Data Protection Board once operational.