Privacy Policy

🌐 Ler em português · Leer en español — the Portuguese version is the reference text.

1. Who we are

Oscarpes is the soil sampling and agronomic management app of the Oscarpes Group, available as a mobile app and on the web at app.oscarpes.com.br. The data controller is OSCARPES E.A.S. (Empresa por Acciones Simplificada), RUC 80176938-8, Zanja Pytã, Department of Amambay, Paraguay — Calle Milciades Olmedo esquina Ceferina González Ortiz, s/n, barrio Florida (cuenta corriente catastral 00653-29-0032-04-00-00/001). Brazil's LGPD (Law 13,709/2018) also applies to data of people in Brazil and to processing carried out in Brazil.

2. Who this policy covers

• App users — people who create an account and sign in (agronomists, field technicians, staff).
• Registered growers — farm owners registered in the app by a user, who may never have opened the app themselves.
• People who contact us by e-mail or messaging.

3. Data we process

• Account: name, e-mail, phone (optional), password (stored only as an irreversible hash by Supabase Auth), organization and role, hectares sampled per month.
• Growers, farms and fields: name, tax ID (optional), phone, address, farm name and location, field boundaries (GPS polygon), crop and season.
• Field work: precise GPS location of sampling points and of the route walked while the sampling screen is open (the app does not use location in the background), sample barcodes, field notes, pest and weed records, rainfall records.
• Photos and videos: taken with the camera or chosen from the gallery only when you tap the corresponding button. Field timeline photos, pest monitoring photos and attachments to visit reports are uploaded to our storage; diary and sampling-point photos stay on the device. The app does not record audio.
• Soil test results, fertility maps and PDF reports linked to each field.
• Business records (restricted modules): invoices, inventory, grain storage and sales, bank statements imported by the company, accounts payable and receivable.
• Assistant messages: text typed into the in-app assistant is sent to our server to be answered.
• Technical data: IP address recorded by hosting providers, app version and error logs. We do not use advertising IDs, analytics SDKs or crash-reporting SDKs.
• Payments: the app collects no card or bank data from users and sells nothing inside the app.

4. Why we use it

To provide the service (sampling grids, GPS-guided sampling, reports, maps, sync and exports), to authenticate users and keep each organization's data separate, to measure usage of the plan, to provide support, to keep the service secure, to meet legal, tax and accounting obligations and, only with aggregated and anonymized data, to improve the product. We never use personal data for targeted advertising.

5. Service providers and international transfers

We also share data when you ask us to, when required by law or court order, to defend our rights, or in a merger or acquisition with prior notice. We never sell data or give one client's field data to a competitor.

6. App and laboratory are kept apart

Data entered in the app is not automatically passed to the Oscarpes laboratory; the lab only receives samples and data when the user chooses to send them. Each organization only sees its own data — enforced in the database (Row Level Security), not just on screen. A small, named list of Oscarpes Group administrators has access for support, maintenance and security.

7. Retention

• Active account: while the account exists.
• After an account deletion request: personal data deleted within 30 days.
• Records that belong to the client company (fields, reports, invoices) stay with that company, without the deleted user's name.
• Tax and accounting records: for the period required by law.
• Technical logs and assistant conversations: 90 days. Backups rotate every 90 days.

8. Security

All traffic uses HTTPS/TLS; passwords are hashed; data is separated per organization in the database; backups are encrypted; administrative access is restricted to named accounts. If a security incident creates a relevant risk, we will notify the competent authority and the people affected.

9. Your rights and account deletion

You may request confirmation and access, correction, anonymization, blocking or deletion, portability, information about sharing, withdrawal of consent and review of automated decisions.

Delete your account in the app: Profile → Delete my account. The account is disabled immediately and your personal data is permanently deleted within 30 days; signing in again within that period cancels the request. If you cannot sign in, follow the steps at oscarpes.com.br/excluir-conta. For any other request, contact us (section 11); we reply within 15 days.

10. Children and cookies

The app is a professional tool not intended for anyone under 18. The app uses device storage only to work offline and keep you signed in; there are no tracking cookies, marketing pixels or advertising SDKs. This website loads Google Fonts and an embedded Google Map on the contact page, which receive your IP address.

11. Contact

• Controller: OSCARPES E.A.S., RUC 80176938-8 — Zanja Pytã, Amambay, Paraguay
• E-mail: joaocarpes@oscarpes.com.br
• WhatsApp: +55 66 99923-3434

You may also contact your country's data protection authority (in Brazil, the ANPD at gov.br/anpd).

12. Changes

Relevant changes are announced by e-mail and in the app 30 days in advance. The current version is always at www.oscarpes.com.br/privacy. See also the Terms of Use.

---

Oscarpes Privacy Policy — version 2.0, October 1, 2026. Controller: OSCARPES E.A.S. Translation of the Portuguese reference text.