Privacy at Papalotla Field

Controller and contact

Papalotla Sementes acts as the controller for data handled in Papalotla Field. Requests for access, correction, deletion, or other privacy questions can be sent to support@papalotlafield.com.

Data handled

• Name, work email, roles, account status, and operational contacts.
• Authorized farms, areas, location context, and other information needed for the work.
• Agronomic observations, forms, recommendations, and other technical records.
• Photos, videos, and metadata needed as evidence of fieldwork.
• Comments, reviews, audit history, and approved reports.
• Limited, redacted operational records used for security and reliability.

How data is used

• Authenticate employees and enforce access permissions.
• Enable fieldwork, synchronization, technical review, and report generation.
• Protect the service, investigate failures, and respond to support requests.
• Maintain business and audit records required for Papalotla operations.

Providers and international processing

The service uses Supabase for authentication and data, Cloudflare for execution, private files, and operational telemetry, and ZeptoMail for authentication messages. These providers process data only to operate the service and are expected to apply compatible protections.

Primary Supabase data is currently hosted in the United States, in the Oregon region. Cloudflare may process information globally. Contracts, access controls, and Papalotla's assessment govern this international processing.

Retention and deletion

Business records, media, reports, and audit history are retained while the service operates and for 24 months after it ends, unless a legal obligation, authorized hold, or incident-related need applies.

Removed media becomes inaccessible immediately and its file becomes eligible for deletion after 30 days. Credentials and sessions follow provider lifetimes. Operational logs have short windows, normally up to seven days in Cloudflare and shorter according to the Supabase plan.

Security and devices

Papalotla Field uses authentication, role- and assignment-based authorization, encrypted communication, private storage, and security records. No system eliminates every risk.

Report a lost iPhone to support immediately. An account can be disabled and its sessions revoked, but Papalotla Field cannot remotely erase a device while it is offline.

Language preference and public site

The public pages store only a functional language preference for up to one year. They do not use advertising or public behavioral analytics tools. Search-engine directives do not make these pages private.

Your requests

Employees may request access, correction, or deletion at support@papalotlafield.com. Papalotla will verify identity, the request's scope, and any retention obligations before acting.