Privacy Policy

We respect your privacy and are committed to protecting your data.

Last updated: 30 September 2026

Introduction

This Privacy Policy explains how AgMap ("we," "our," or "us") collects, uses, and protects your information when you use our agricultural research platform. We are committed to ensuring your personal data is handled responsibly and transparently.

Data We Collect

We collect information to provide and improve our services. The types of data we collect include:

  • Personal identification information (name, email address)
  • Information a project team enters about other people (the names and email addresses of people invited to an event, and who replied)
  • Survey answers from people at field days and other events, including members of the public who answer without an AgMap account (see Surveys at events below)
  • Farm and agricultural data (location, crop types, farm size, growing practices)
  • Usage data and analytics (pages visited, features used, time spent on platform)
  • Technical information (IP address, browser type, device information)
  • Communication data (messages sent through our contact forms or support channels)

How We Use Your Data

We use the collected information for the following purposes:

  • Provide personalized research recommendations based on your farm characteristics
  • Maintain and improve our platform functionality
  • Communicate with you about your account and our services
  • Collect survey answers for the research teams that run events, and report them as described under Surveys at events
  • Analyze usage patterns to enhance user experience
  • Ensure platform security and prevent fraud
  • Comply with legal obligations and regulations

Farm Data and Analytics

Your farm details are private to your account, appear in analytics only as aggregated, de-identified counts, and can be accessed by AgMap administrators for support. If you send a survey with your details filled in, those answers go to the survey's team like any other answer.

Engagement analytics shown to research organisations use minimum-count thresholds: regional and demographic breakdowns covering fewer than 5 people are not shown. This threshold applies to analytics about how people use AgMap. It does not apply to survey results, which are described under Surveys at events below.

Surveys at events

Research teams use AgMap to run short surveys at field days and other events. Anyone at the event can answer through a survey link or by scanning a QR code, and many people answer without an AgMap account. A team can also type in answers from a paper form.

Most questions come from a fixed set, such as how relevant the event was to your farm, whether you plan to change a practice, your role and how you heard about the event. A team can add questions of its own. A survey can also ask for your postcode and nearest town, which are optional, and give you space to write answers in your own words. The form does not ask for your name or email. If you are signed in, it may fill in your postcode, town and role from your farm profile, and you can change them before you send. If you answer while signed in, or later link a response to an account you create, we record that account with the response; no survey result or export shows it to the team.

We collect survey answers for the team that ran the event, to help shape its research and extension work. Totals from those answers also go into reports for the team, its organisation and any program or portfolio the project is part of.

The person who created a survey sees each response as it was given, including written answers, postcode and town. AgMap administrators can see the same, to support the team and to review suspected fraud or duplicate responses. A project's own team, and the managers of any program or portfolio the project is part of, see that project's survey results as totals, with no minimum count. Totals from a survey, which can cover very few people, may also be shown to the organisation's other users and to the teams of other projects the survey covers.

Counts and averages are reported in full, so at a small event a total can be one or two people. These totals never include a name, email address, individual response, free-text answer, postcode or town, and they place respondents no more precisely than an NRM region or a state.

When a response arrives we also store two scrambled codes, known as salted hashes: one made from the internet (IP) address it came from and one made from your browser's details. We do not store the address or the browser details themselves with your answers. The codes let us review suspected fraud and duplicate responses, such as the same survey being sent many times from one connection. We make them with a secret value that only AgMap holds, so AgMap could match a code to an address it already knows, and we treat the codes as personal information. If you answer through a survey link or QR code without signing in, we also store a third scrambled code that lets you link the response to your AgMap account if you sign in or create one later. The three codes are not shown to the team that ran the survey and do not appear in any result, report or export. We delete them 12 months after the survey closes. For a survey with no closing date, we delete them 12 months after the response was sent. The deletion runs once a week, so a code may be kept up to a week longer. We also record which visit to AgMap the response came from, using the analytics cookie described below, so we can count how many people open a survey and send it.

Third-Party Services

We work with trusted third-party services to provide our platform:

  • Supabase: Database and authentication services
  • Vercel: Web hosting and deployment
  • Resend: Transactional email delivery (notifications, invites)
  • Mapping Services: Location and geographic data visualization

Our database and stored files are held by Supabase in Sydney, Australia, and the AgMap app's servers run on Vercel in Sydney, Australia. Vercel is a United States company. It delivers pages from the part of its network nearest to you, and it may keep its own records of visits to AgMap, such as IP addresses, outside Australia.

Every email the AgMap app sends, including sign-up, password and invitation emails, goes through Resend, a United States company that does not send email from Australia. Each email, including its content, is sent from Resend's servers in the United States, and Resend keeps its records of each email, including the recipient's email address, the subject and whether it was delivered, in the United States.

These services may have access to your data as necessary to provide their functionality. We ensure all third-party providers maintain appropriate data protection standards.

Data Storage and Security

We implement industry-standard security measures to protect your data:

  • Encrypted data transmission using SSL/TLS protocols
  • Secure cloud storage with automated daily backups
  • Access rules enforced inside the database itself, so each account can only read the data its role and organisation allow
  • Access controls and authentication for system administrators
  • Data retention policies to minimize unnecessary data storage

Within an organisation, admins can see the sign-in email address of the organisation's members. Members who are not admins do not see other members' email addresses. Where a project belongs to a program, the people who manage that program sit on the project team and see what the project's own leads see, including the email addresses of people invited to the project's events. Where a project is part of a portfolio, a program that brings existing projects together, the people who manage the portfolio can read the same details without joining the team. That includes the names and email addresses of the project's team and of people invited to its events, who replied, who recorded attendance, and reports of posts in the project's discussion.

User Rights and Access

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Update or correct inaccurate personal information
  • Deletion: Request deletion of your personal data (subject to legal requirements). Survey responses are kept as research records and cannot be deleted, but if we can identify your response we will remove it from every total and report.
  • Portability: Request your data in a machine-readable format
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us using the information provided below.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

  • Essential cookies for authentication and platform security
  • Preference cookies to remember your settings (e.g. map layer selection)
  • One analytics cookie that tells one visit from the next, so a visit spread across several tabs is counted once

AgMap sets one first-party analytics cookie to tell one visit from the next. We set no advertising cookies and no third-party cookies.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify users of significant changes via email or platform notifications. Continued use of our services after such changes constitutes acceptance of the updated policy.

Complaints

If you think we have mishandled your personal information, email us at info@agmap.org and tell us what happened. We will look into it and reply to you in writing within 30 days of receiving it. If we need more time, we will tell you why and when to expect our reply.

If you are not satisfied with our reply, or have not had one within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC). You can lodge a complaint online or by phone, and the details are at oaic.gov.au.

Contact for Privacy Concerns

For any privacy-related questions or concerns, please contact us at:

Email: info@agmap.org

AgMap, a trading name of Soil Analytics Pty Ltd
Adelaide, South Australia
Australia