Privacy Policy

We never sell your data. Not to advertisers, not to data brokers, not to governments, not to anyone. There are no ads in Granary and there is no hidden business model: you (or your farm) pay for software, and that's the whole deal.

We collect only what we need to run Granary, we use it only to run and improve Granary for you, and you can take your data with you or delete it whenever you want.

Account information — your email address, password (stored only as a secure hash; we can't read it), language preference, and the timestamp and version of the terms you accepted at signup.

Your farm data — the products, materials, recipes, inventory, orders, vendors, prices, plans, and notes you enter. This is the heart of the product and it is yours (see the Terms, section 5).

Billing information — if you subscribe, Stripe collects your payment details. We never see or store your full card number; we keep only what Stripe gives us to manage your subscription (like its status and your billing email).

Operational basics — standard technical logs (such as timestamps and error reports) needed to keep the service running and debug problems. We don't run third-party advertising or cross-site tracking scripts.

Only to: • Run the service — store your data, show it to you and your invited teammates, calculate your inventory and planning numbers. • Keep your account secure and your workspace separated from every other farm's. • Process your subscription through Stripe. • Answer you when you contact us, and notify you about things that matter (like a payment problem or a material change to these documents). • Fix bugs and improve the product — for example, reading error logs, or looking at your data with you when you ask for help.

That last point is the full extent of “using your data to improve the app”: making Granary work better for you. We do not mine your data for marketing, build advertising profiles, or train AI models on it — and when the Meadow assistant sends your records out to be answered, it may only use AI providers that are barred from keeping your data or training on it (see section 5).

• We never sell your data — to anyone, for anything. • We never share it with advertisers or data brokers. • We never hand it to government agencies except where the law genuinely compels us — and if that ever happens, we'll tell you unless we're legally forbidden to. • We never use your farm's data to train AI models — and we technically enforce that the AI providers behind the Meadow assistant can't either: Meadow's requests may only be served by providers that keep nothing and train on nothing. • We never make you the product. You're the customer.

Granary runs on a small, deliberately chosen set of service providers, each processing only what its job requires: • Supabase — hosts our database and handles sign-in. Your account and farm data live here, encrypted in transit and at rest. • Stripe — processes payments. Stripe receives your payment details directly; we never do. • Vercel — hosts the application and, like any web host, sees standard request logs. • The Meadow assistant's AI path — only when you ask Meadow a question. Your question and the relevant farm records are sent through an AI gateway we host on our own hardware, which reaches AI model providers via OpenRouter under enforced zero-data-retention routing: the provider may process your data only to produce the answer, may not store it, and may not train on it. Neither our gateway nor OpenRouter keeps your questions or answers, and Granary doesn't store the conversation either — it lives only on your screen.

That is the complete list — we have no other data-sharing relationships. If it changes, this policy changes with it, and material changes are announced.

Granary sets only functional cookies: keeping you signed in, remembering your language, and remembering that you're browsing the demo. There are no advertising cookies and no third-party trackers, so there's no cookie-consent circus — there's simply nothing to opt out of.

Your data is encrypted in transit (TLS) and at rest. Every farm's workspace is isolated with database-level access rules (row-level security), so one tenant can never read another's data — the Meadow assistant reads through those same rules, so it can only ever see your own farm's records, and nothing it sends or receives is stored along the AI path. Passwords are stored only as secure hashes. Access to production data is limited to what's needed to operate the service and help you when you ask.

No system is perfectly secure, and we won't pretend otherwise. If a breach ever affects your data, we will tell you promptly and honestly — what happened, what was affected, and what we're doing about it.

We keep your data for as long as you have an account, plus short-lived backups. If you delete your account (or ask us to), your data is deleted from live systems and ages out of backups within a reasonable period, except for the minimal records we're legally required to keep (like invoices) and your consent record.

You can export your data at any time — it's yours.

Regardless of where you live, we extend the same rights to everyone: you can access your data, correct it, export it, and delete it. Most of that you can do directly in the app; for anything you can't, email us and we'll handle it — no forms, no runaround.

Granary is a business tool and isn't directed at children under 16. We don't knowingly collect data from them; if you believe a child has created an account, contact us and we'll delete it.

If this policy changes materially, we'll notify you before the change takes effect and update the effective date above. We will never weaken the core promise — no selling, no ads, no brokers — as a quiet edit; a change to that would be loud, explicit, and would give you every chance to leave with your data first.

Privacy questions or requests: brycewadley@gmail.com. You'll get a reply from the actual developer, not a ticket system.