Legal · Last updated 19 October 2026
Privacy Policy
Harvora Limited ("Harvora", "we", "us", "our") operates the Harvora platform at harvora.co.nz. This Privacy Policy explains how we collect, use, store, disclose and protect personal information under the New Zealand Privacy Act 2020. How we use orchard data more broadly, including de-identified aggregate data, is set out in the Grower Data Sovereignty Statement.
1. Information we collect
1.1 Account information
When you create an account we collect your full name and email address. You may add a mobile phone number to receive SMS alerts. Sign-in is handled by Amazon Cognito, which holds your credentials and multi-factor authentication details. We do not see your password.
1.2 Orchard and block data
When you set up your operation we collect your orchard name and address, block boundaries you draw or confirm, crop, variety and planting year for each block, and cost assumptions for protection actions.
1.3 Management actions, decisions and outcomes
We collect the actions you log (type, date, cost and block), the recommendations you act on, and the outcomes you confirm.
1.4 Financial information
If you connect Xero, we read the financial records you authorise. You can also enter financial records yourself. We do not store your Xero password. Data we receive from Xero is used only to provide the service to you. We do not use it to train or improve AI models, include it in Aggregate Data, or sell or share it. Costs you enter in Harvora may be used to suggest your own cost rates for you to confirm. This information can mention other people, such as suppliers and staff (see section 3).
1.5 Ask Harvora and AI features
We keep your Ask Harvora conversations, including your questions, the answers, and folders you create. We also keep an operation profile of facts about your orchard, built from what you tell us and what you confirm (see section 6).
1.6 Team members
Orchard Owners can invite other people. We collect the name and email address of invited team members and their role (Owner, Manager or Viewer).
1.7 Alerts and messages
We keep your alert preferences (thresholds, channels, quiet hours) and a minimal delivery record: the contact used, the time and the delivery status. We also record that you confirmed your phone number with a one-time code and any STOP reply.
1.8 Usage and technical data
We collect your IP address, device and browser type, pages and features used, and error and performance information. This helps us secure and run the service.
1.9 Website enquiries and measurement
When you first arrive on our public website, we may keep a short attribution record in your browser's session storage. It holds the landing page, a broad source category, permitted campaign labels and the arrival time. It does not use a visitor ID, excludes cookies, account or orchard IDs, full referrer URLs and precise location, and is ignored after 24 hours or when the tab closes.
If you send an enquiry, we use your name, email address, organisation and message to respond to it. Contact details are not copied into analytics, and we keep only a qualified enquiry event with the broad attribution above. If you book through Cal.com, Cal.com processes the booking details, and we count a booking only after receiving a verified completed-booking notification.
1.10 Information we derive
From your records and public data we derive block elevation, slope, aspect and terrain, vegetation indices, weather observations and forecasts for your blocks, probabilistic predictions, and financial projections.
2. How we use your information
We use your information to:
- (a) provide the Harvora service, including predictions, projections and recommendations;
- (b) send alerts and service messages;
- (c) run Ask Harvora and our other AI features;
- (d) improve and calibrate our models, including through the grower learning loop;
- (e) create de-identified Aggregate Data, as described in the Grower Data Sovereignty Statement. We apply the controls described in that Statement, such as minimum cohort sizes and suppression of rare combinations, so that Aggregate Data does not reasonably identify you or any other individual. Information that cannot identify an individual is not personal information;
- (f) communicate with you about the service and support;
- (g) keep the service secure and prevent abuse;
- (h) carry out billing, administration and record-keeping;
- (i) analyse, test and develop the service and new products;
- (j) enforce our terms, protect our rights and detect fraud and abuse; and
- (k) meet legal obligations.
We may also use information for a purpose directly related to those above. We do not sell your personal information, or share it with other organisations for their own purposes, without your authorisation. We do not use it for advertising.
3. Information collected from other sources
Some personal information reaches us from someone other than the person it is about. This section is our notice for those people under Information Privacy Principle 3A.
- (a) Invited team members. An Owner gives us your name and email address when they invite you. We use them only to give you access to that orchard. You can ask us to correct or delete them.
- (b) Financial records. Xero records you connect may name suppliers, customers or staff. We use them to ground projections for the Owner. We do not contact those people.
- (c) Public data. We use public datasets that describe land and conditions, such as terrain and satellite data. They are not about identifiable individuals.
If we hold information about you that came from someone else, you may ask to see it or correct it by writing to privacy@harvora.co.nz. We hold it for the purposes above and share it only as set out in section 4. Harvora Limited, 368 Blockhouse Bay Rd, Auckland 0600, is the agency that collects and holds it.
4. Who we share information with
We share personal information only as needed to run Harvora, with two kinds of recipient.
4.1 Service providers acting on our behalf
These providers process information for us, under our instructions, to provide the service.
| Provider | Location | Purpose | Information shared |
|---|---|---|---|
| Amazon Web Services | Australia (Sydney) | Hosting, database, storage, compute, sign-in, email and SMS delivery | All service data, encrypted at rest; your email address, phone number and message content for alerts |
| OpenRouter and the AI model providers it routes to | United States (OpenRouter and the AI hosts it currently uses are United States companies) | Ask Harvora and other AI reasoning | Your questions, block context and orchard summaries (see section 6) |
| Google (Gemini embeddings) | United States | Ask Harvora knowledge retrieval | The text of your question and knowledge documents, converted to numeric vectors |
| Better Stack | Germany | Error tracking, logging, uptime and browser telemetry | Error context, service logs and minimised telemetry |
| Vercel | United States company, serving from Sydney (Australia) | Hosting and delivery of the website and app | Standard web request data |
The AI providers we use are set not to store or train on your information. Google may hold prompts briefly for abuse monitoring only.
4.2 Public data services we request data from
These are independent services that provide map, weather and satellite data under their own terms. They receive locations only, never your name or your orchard's name.
| Service | Location | Purpose | Information sent |
|---|---|---|---|
| Land Information New Zealand (LINZ) | New Zealand | Address search and mapping | The address you type into address search and a map point |
| MetService | New Zealand | Weather data | The centre point of each block |
| Open-Meteo | Switzerland, with servers in Europe | Weather data | The centre point of each block. Open-Meteo keeps these coordinates in its request logs for 90 days, then deletes them |
| Copernicus | European Union | Satellite data | The boundary shape of each block |
4.3 Services you choose to connect or use
| Service | Location | Purpose | Information shared |
|---|---|---|---|
| Xero (if you connect it) | Xero Limited, a New Zealand company, under its own terms | Financial data sync | Only sign-in authorisation and requests to read the records you authorise. We never write data to Xero |
| Cal.com (if you book a call on our website) | United States | Booking a call through "Book a call" on our website. Cal.com is not used in the app | Scheduling details and standard web request data you submit to Cal.com |
| Your browser's speech recognition (if you use voice) | Your browser's provider (Google Chrome uses Google) | Turning spoken questions into text | The audio of your spoken question, handled by your browser's provider under its own terms. Harvora receives only the text |
We may also disclose personal information to our professional advisers, insurers and auditors, and to the authorities or other parties where the law allows or requires.
We do not share your identifiable orchard data, predictions or financial information with any third party for its own purposes. We share it with other organisations only with your consent, through an organisation relationship you establish, or when the law requires it. We may also disclose it in a sale or restructure of Harvora. Aggregate Data is not personal information and is licensed as described in the Grower Data Sovereignty Statement.
5. Overseas disclosure
Our main hosting is in Amazon Web Services' Sydney region (Australia). Some recipients in section 4 are in Germany, Switzerland, the European Union or the United States, and your information can be processed there.
Service providers acting on our behalf (section 4.1) hold and process information only for us, under our instructions. Under Information Privacy Principle 12, we disclose personal information to other overseas recipients only where the recipient is subject to the Privacy Act or to privacy laws that give comparable safeguards, has agreed to protect the information appropriately, or you authorise the disclosure after being told about the risk.
Some recipients, including AI providers in the United States, may not be required to protect your information in a way that, overall, provides safeguards comparable to those in the Privacy Act. When you sign up, we ask you to confirm, separately from accepting the Terms of Service, that you understand this and authorise the disclosure. We record which version of the Terms and this policy you accepted.
6. AI features
Ask Harvora and our other AI features send text to AI providers to generate answers. What we send includes your questions, the context of the block or orchard you ask about, operation profile facts and summaries of your finances where needed to answer. Xero transaction records are never sent; only totals and summaries are.
The nightly grower learning loop sends the previous day's logged actions and chat statements to the AI provider, which proposes facts about your operation. You confirm or reject each proposal, and nothing is saved to your operation profile without your confirmation. Xero records are never used to train or improve models, and neither Xero records nor the finance incidents you record (such as losses and recoveries) are used in the learning loop. Costs you enter in Harvora may be used to suggest your own cost rates for you to confirm.
You can see, correct or remove any fact in your operation profile at any time, or ask us to at privacy@harvora.co.nz.
Please do not enter sensitive personal information into Ask Harvora. The AI Use Notice explains the limits and risks of AI output.
7. Data retention
- (a) Account and orchard data is kept while your account is active. After you delete your account, account, orchard, prediction and financial data are deleted within 30 days. We may keep records we must keep for legal, security or dispute purposes.
- (b) Prediction history is kept while your account is active. Expired raw forecast inputs and Monte Carlo samples may be pruned under operational schedules after derived summaries are preserved.
- (c) Alert delivery records are limited to minimal alert-delivery and contact metadata, which may be retained for up to 24 months for audit and debugging, and to resolve questions about whether an alert was delivered.
- (d) Qualified website conversions contain no contact details and are kept for up to 24 months. Rejected enquiries are not kept in measurement records.
- (e) Search and citation snapshots contain authorised, aggregated performance measurements and are kept for up to 36 months. Versioned benchmark results are kept for longitudinal comparison and do not contain a provider's full answer text.
- (f) Xero data is deleted when you disconnect Xero or delete your account.
- (g) Aggregate Data and model improvements that no longer identify you are kept after deletion.
8. Your rights
Under the Privacy Act 2020 you can:
- (a) access the personal information we hold about you, whether or not it is in your data export;
- (b) correct it, in your account settings or by contacting us;
- (c) export your orchard data as a JSON file from your account; and
- (d) delete your account by emailing support@harvora.co.nz. Account, orchard, prediction and financial data are deleted within 30 days. Minimal alert-delivery and contact metadata may be retained for up to 24 months for audit and debugging.
Email privacy@harvora.co.nz to use any of these rights. We respond within 20 working days of a request. We may refuse access in the limited cases the Act allows, and we will tell you why.
9. Security
We protect personal information with:
- (a) encryption in transit (TLS) on all connections;
- (b) encryption at rest in our AWS-hosted database and archive;
- (c) role-based access within orchards (Owner, Manager and Viewer);
- (d) multi-factor authentication using an authenticator app;
- (e) no plaintext storage of passwords or API keys; and
- (f) logged administrator access, which is visibly indicated in the interface.
If a privacy breach is likely to cause anyone serious harm, we will notify the Privacy Commissioner and the people affected as soon as practicable, as the Act requires.
10. Cookies and similar technologies
The Cookies and Analytics Notice explains the cookies and browser storage we use and the measurement we run.
11. Children
Harvora is a professional agricultural tool and is not directed at anyone under 18. We do not knowingly collect personal information from anyone under 18.
12. Changes to this policy
We may update this policy. We will email material changes to the address on your account at least 30 days before they take effect, unless the law requires a change sooner, and show the new date on this page.
13. Contact US
Email: privacy@harvora.co.nz
Mail: Harvora Limited, 368 Blockhouse Bay Rd, Auckland 0600
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner at privacy.org.nz.