Privacy Policy

1. Scope

This Privacy Policy explains how Navelina SAS ("Arlo," "we," "us," or "our") collects, uses, shares, and protects information in connection with Arlo Agro, including our website, application, billing flow, support channels, documentation, and related services (the "Service").

Arlo Agro is a farm operations platform for perennial-crop and cannabis operations. It helps customers manage crop scouting, GPS datapoints, harvest, field tasks, supplies and inventory, sales statements/remisiones, custom forms, alerts, exports, AI-assisted insights, and cannabis post-harvest workflows.

2. Information We Collect

We may collect the following categories of information:

• Account and contact information: name, email address, phone number, organization, farm, role, language preference, login credentials, and invitation status.
• Farm and organization configuration: farm name, country, timezone, currency, lots, maps, crops, varieties, users, roles, settings, and module configuration.
• Operational farm data: crop scouting records, GPS datapoints, photos, files, route progress, harvest schedules and entries, weights, field tasks, contractors, supplies, inventory, purchase and usage records, custom form responses, alerts, reports, exports, sales statements/remisiones, clients, post-harvest batches, containers, gross/tare/net weights, quality inspection, drying, manicuring, classification, packaging, and QA release data.
• Billing information: plan, subscription status, Paddle customer identifiers, transaction metadata, receipts, tax status, renewal status, and refund/cancellation records. Paddle processes payment card details as Merchant of Record; Arlo does not directly store full payment card numbers for Paddle transactions.
• Support and communications: messages, requests, attachments, call notes, feedback, survey responses, and communications with our team.
• Device, usage, and log data: IP address, browser, device type, operating system, pages viewed, feature usage, timestamps, diagnostic logs, error reports, security events, and approximate location inferred from network data.
• Cookies and similar technologies: cookies, pixels, local storage, and analytics identifiers used for login, preferences, security, analytics, and marketing.

3. How We Use Information

We use information to:

• Provide, operate, secure, and maintain the Service.
• Create and manage accounts, farms, roles, permissions, and user invitations.
• Process subscriptions, renewals, cancellations, refunds, receipts, and tax-related records through Paddle.
• Enable crop scouting, offline data collection, GPS mapping, reports, exports, alerts, post-harvest tracking, and other product features.
• Provide Smart plan AI and analytics features, including AI assistant responses, yield forecasting, anomaly detection, smart scheduling, weekly insights, and form intelligence.
• Provide customer support, onboarding, implementation assistance, and troubleshooting.
• Monitor performance, prevent fraud, protect accounts, detect abuse, and improve reliability.
• Improve, develop, and measure the Service.
• Comply with law, enforce our Terms, respond to lawful requests, and protect rights, safety, and property.

4. Farm Data and Customer Control

As between you and Arlo, you retain ownership of the farm operations data you submit to the Service. We process that data to provide the Service, support your account, generate reports and exports, provide AI/analytics features, maintain security, and meet legal obligations.

Farm owners and administrators control which invited users can access farm data through roles and permissions. You are responsible for choosing users, removing users who no longer need access, and exporting records needed outside the Service.

5. AI Processing

Smart plan AI features may analyze your farm data, including crop scouting, harvest, supplies, field tasks, alerts, custom forms, and post-harvest records, to produce summaries, forecasts, recommendations, anomaly flags, and answers to user questions.

AI outputs are informational and should be reviewed by qualified users. They do not replace agronomic, regulatory, legal, financial, cannabis compliance, food safety, or operational judgment.

Customer data and AI model training position: No. Customer data is not used to train AI models.

6. How We Share Information

We may share information with the categories below.

We do not sell your farm operations data as a standalone product. If this changes, we will update this Privacy Policy and provide any choices required by law.

• Paddle: for checkout, payments, tax, invoices, receipts, subscription management, fraud prevention, cancellation, and refund processing.
• Service providers: hosting, storage, database, email, analytics, security, monitoring, support, AI processing, maps, and infrastructure vendors.
• Customer-directed users: owners, administrators, employees, monitors, contractors, sales operators, or other users invited to a farm.
• Professional advisors and legal authorities: where needed for compliance, tax, accounting, legal claims, lawful requests, fraud prevention, or protection of rights and safety.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets.

7. Cookies and Analytics

We use cookies and similar technologies to keep users signed in, remember preferences, secure the Service, measure site and feature usage, improve performance, and support marketing. You can control cookies through your browser settings, but some features may not work properly if essential cookies are blocked.

8. Security

We use reasonable technical and organizational measures designed to protect information, including access controls, encryption in transit where appropriate, backups, monitoring, and role-based access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Retention

We retain information for as long as needed to provide the Service, maintain accounts, comply with legal and tax obligations, resolve disputes, enforce agreements, prevent fraud, maintain backups, and support legitimate business purposes.

Customer Data retention after cancellation is currently 3 months. Some data may remain in backups, audit logs, billing records, legal records, or security records for longer where necessary.

10. International Transfers

We and our service providers may process information in countries other than your country of residence or operation. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

11. Your Privacy Rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. You may also have rights to opt out of certain processing or marketing communications.

If your account is managed by your employer, farm, or organization, some requests may need to be directed to that organization as the account administrator. To submit a request, contact [email protected]. We may ask for information to verify your identity and authority.

12. Children's Privacy

The Service is intended for business and professional use and is not directed to children. Users must be authorized by their organization and old enough to use business software under applicable law.

13. Paddle and Payment Data

Online purchases are processed by Paddle.com as Merchant of Record. Paddle may collect and process buyer, payment, tax, fraud prevention, invoice, and subscription information under its own buyer terms and privacy notices. Arlo receives transaction and subscription metadata needed to provide and support the Service.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by posting an updated policy, sending email, or using in-app notice where appropriate. Continued use of the Service after the effective date means the updated policy applies.

15. Contact

Legal entity: Navelina SAS
Registered address: Calle 110 #8-09, Bogota, Colombia
Privacy contact: [email protected]
Support email: [email protected]
Support phone: +57 316 3034344