← Back to sign-up

Version 2026-10-17

Privacy Policy: Alqira outside Brazil

Last updated: 17 October 2026

This Privacy Policy applies to farms located outside Brazil and to the people who use Alqira for them, and to visitors of our pages in English. It is written to meet the information duties of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR", articles 13 and 14) and of the UK GDPR. Farms located in Brazil are covered by the Brazilian Privacy Policy, in Portuguese, at /politica-de-privacidade.

1. Who is responsible for your data

The controller of the personal data described here is ALQIRA DESENVOLVIMENTO DE SOFTWARE LTDA, a company registered in Brazil under CNPJ 68.290.029/0001-99, with its registered office at Rua Pais Leme, 215, conj. 1713, Pinheiros, São Paulo/SP, 05424-150, Brazil. Privacy contact (data protection officer under Brazilian law): Pedro Henrique de Mattos Cavalcante, suporte@alqira.com.br. Representative in the European Union or in the United Kingdom (article 27 of the GDPR and of the UK GDPR): we have not appointed one yet. We will appoint one when we have customers there, and publish the contact in this section.

2. Our two roles

Controller and processor. For the identification, account, billing and website data of users and visitors, we are the controller. For the farm data that customers enter about their farm and about other people (for example, staff, buyers and sellers), the customer is the controller and Alqira acts as processor, processing it on the customer's behalf to provide the Service, under clause 10.3 of the Terms of Use.

3. The data we process

a) Account data: name, e-mail address, password (stored only as a protected hash by our authentication provider), farm details (name, country, state or region, area, language, currency and units), role and permissions and, if you choose to answer, how you heard about Alqira (optional question when a new farm signs up). b) Billing data: the name and billing address you enter at checkout, the country of the billing address and of the card's issuer (to apply the right tax and to prevent fraud), the VAT number of a business customer, and the subscription and payment history. Card details are processed directly by Stripe; we never store the full card number. c) Usage and technical data: access logs, IP address, date and time, the approximate country derived from your IP address by our hosting provider (used only to suggest your country, currency and prices on the sign-up and pricing pages), audit records of actions in the account (who did what and when) and device and browser data. d) Farm data entered by the customer: herd, weighings, health and handling records, finance and, sometimes, personal data of other people entered by the customer (for example, the name of a buyer or seller on an invoice). e) Advertising data, only with your consent: if you click "Accept" on the ad cookie banner, the site loads the Meta Pixel and the Google tag, which record the pages you visit and the sign-up steps, and we keep the identifier of the ad click that brought you (Meta's `fbclid` and Google's `gclid`). If, with that consent, you start a free trial or make the first payment, our server tells Meta (Conversions API) and Google Ads about it, with the click identifier, the amount paid and your e-mail address irreversibly scrambled (SHA-256), so that they can tell which ad worked. Without consent, none of this is loaded or sent.

4. Why we use it and on what legal basis

  • Creating and running your account and providing the Service: performance of a contract (GDPR article 6(1)(b)).
  • Processing payments and billing, including tax: performance of a contract and compliance with a legal obligation (article 6(1)(b) and (c)).
  • Security, fraud prevention (including comparing the farm's country with the billing and card country) and audit records: our legitimate interests in protecting the Service and our customers (article 6(1)(f)) and legal obligations.
  • Complying with legal, tax and regulatory obligations: legal obligation (article 6(1)(c)).
  • Support and messages about the Service, including the guidance e-mails and the first-charge notice during the free trial: performance of a contract (article 6(1)(b)).
  • Improving the product with aggregated or anonymized data, learning how farms hear about Alqira (optional answer) and measuring website traffic without cookies and without identifying you: our legitimate interests in running and improving the Service (article 6(1)(f)).
  • Measuring which ads brought visits, sign-ups, trials and subscriptions (Meta Pixel and Conversions API, Google tag and Google Ads conversions): your consent (article 6(1)(a)), given on the cookie banner and which you can withdraw at any time (section 10).
  • Marketing messages, if we ever send them: your consent (article 6(1)(a)), which you can withdraw at any time.

Where we rely on legitimate interests, you can object at any time (section 9). Providing the account and billing data is necessary to sign up and subscribe; without it we cannot provide the Service. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

5. Who we share it with

We do not sell your data. We share it only with providers that are strictly necessary to run the Service, which act on our instructions:

  • Supabase: database and authentication (hosting of the data, in Brazil).
  • Vercel: hosting and running of the application, and website traffic measurement without cookies.
  • Stripe: payment processing, tax rates and fraud prevention.
  • Sentry: error and stability monitoring (technical logs, IP address, device and browser data).
  • Resend: sending the Platform's automatic e-mails (name, e-mail address and the content of the message).
  • Cloudflare (Turnstile): protection of the sign-up form against automated abuse, when it is turned on.
  • Meta Platforms (Meta Pixel and Conversions API): ad measurement, only with your consent (section 3, item e).
  • Google (Google tag and Google Ads conversions): ad measurement, only with your consent (section 3, item e).
  • Public authorities, when required by law or by a court order.

6. International transfers

Our main database is hosted in Brazil (São Paulo region). For personal data sent from the European Union to Brazil, the European Commission has decided that Brazil ensures an adequate level of protection (Commission Implementing Decision (EU) 2026/179 of 26 January 2026, under GDPR article 45). For the United Kingdom, there is no UK adequacy decision for Brazil; where UK law requires a safeguard for a transfer, we use the International Data Transfer Addendum to the EU Standard Contractual Clauses issued by the UK Information Commissioner (UK GDPR article 46). Some of our providers (Vercel, Stripe, Sentry, Resend, Cloudflare, Meta and Google) may store or process data in the United States or other countries. For those transfers we rely on the provider's certification under the EU-US Data Privacy Framework and its UK Extension where the provider is certified, and otherwise on the Standard Contractual Clauses (GDPR article 46(2)(c)) and, for the UK, on the Addendum. You can ask us for a copy of the safeguards at suporte@alqira.com.br.

7. Security

We apply reasonable technical and organizational measures, including logical isolation between accounts (each farm can only reach its own data), role-based access control, two-factor authentication (MFA), encryption in transit (HTTPS) and audit records. No system is 100% immune. If a personal data breach occurs, we notify the competent supervisory authority and the people affected where the law requires it.

8. How long we keep it

We keep the data while the subscription is active. When the subscription ends, the data entered is kept for up to 90 days (the reactivation and export period in the Terms of Use) and, after that, may be permanently deleted or anonymized, except for records we must keep longer to meet legal, accounting and tax obligations (for example, invoices and payment records) and the record of your acceptance of these documents, kept as proof for as long as a claim may arise.

9. Your rights

You have the right to: access your personal data; have it corrected; have it erased; restrict its processing; object to processing based on legitimate interests; receive the data you gave us in a structured, commonly used and machine-readable format (portability); and withdraw your consent at any time, without affecting processing done before the withdrawal. To exercise any of them, write to suporte@alqira.com.br. We reply within one month, which may be extended where the law allows. You also have the right to lodge a complaint with a supervisory authority: in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in the European Union, the data protection authority of the country where you live or work (list of authorities).

When a request concerns farm data that a customer entered (where the customer is the controller), we pass it on to that customer and help them answer it.

10. Cookies

Strictly necessary cookies. We use cookies that are strictly necessary for the Service you ask for: session, authentication and security (for example, remembering a trusted device for MFA), and the record of your cookie choice. They cannot be turned off without breaking the Service, and they do not need your consent.

The cookie that records your choice. On the pages where people arrive at Alqira (the home page, sign-up, subscription, partner pages, the Terms of Use and this Policy), a banner about ad cookies offers two options with the same prominence: "Accept" and "Only what is necessary". We store your choice in the `alqira_consentimento` cookie, our own, for 12 months, so that we do not ask again. It holds no personal data.

Ad cookies, only with your consent. If you click "Accept":

  • the Meta Pixel sets its own cookies (such as `_fbp` and `_fbc`) and the Google tag sets its own (such as `_gcl_au`). These are third-party cookies used to measure ads;
  • we set `alqira_fbc` and `alqira_gclid`, our own, for 90 days, with the identifier of the ad click that brought you, to match your trial or payment with that ad (section 3, item e);
  • for visitors in the European Economic Area, the United Kingdom and Switzerland, the Google tag is told that consent for ad storage, ad user data, ad personalization and analytics storage is denied by default and is then granted by your click (Google consent mode).

If you choose "Only what is necessary", or make no choice, none of these cookies is set, no Meta or Google script is loaded, and our server sends nothing to them. The logged-in area of the Platform has no Pixel and no tag, with or without consent.

Changing your mind. You can withdraw your consent at any time with the "Change cookie choice" button at the bottom of this page and in the footer of our home page in English. Withdrawing tells Meta and Google that consent has ended, deletes our ad cookies and shows the banner again. You can also delete this site's cookies in your browser settings.

Partner referral cookie. When someone arrives through a partner link (an address with `?p=`), we store only the partner's code, for up to 90 days, to credit the referral if that person subscribes. It is our own, not used for advertising and holds no personal data. For visitors in the European Economic Area, the United Kingdom and Switzerland, we do not set it: the partner's code is entered in the code field when subscribing.

Traffic measurement without cookies. We use Vercel Web Analytics to count visits and page views in aggregate. It sets no cookie and does not identify you, so it does not depend on the banner.

11. Changes to this Policy

We may update this Policy. Material changes will be announced by e-mail or inside the Platform, and the date at the top will change.

12. Contact

Privacy contact: Pedro Henrique de Mattos Cavalcante, suporte@alqira.com.br. Controller: ALQIRA DESENVOLVIMENTO DE SOFTWARE LTDA, CNPJ 68.290.029/0001-99, Rua Pais Leme, 215, conj. 1713, Pinheiros, São Paulo/SP, 05424-150, Brazil.