This Privacy Policy explains the categories of information RuralReady collects, why it is used, when it may be disclosed, how it is retained and the choices available to organization owners and members.
Information you provide
We may collect names, email addresses, organization names, workspace type, assigned role, support messages, notification preferences and account records. Operational content may include apparatus and equipment records, inspections, work orders, member certifications, training, map points, grants, expenses, livestock records, health and breeding records, fields, crop activity, inventory, notes, photos and uploaded documents.
Location, maps and offline data
When a user chooses to record a location, RuralReady may process device coordinates, map points, access notes and related photos. The browser or operating system controls location permission. Installed or offline use may store selected records and pending changes on the device until they synchronize. Organization leaders should secure devices that contain offline data.
Information collected automatically
The Service and its hosting providers may process IP address, browser and device type, requested pages, timestamps, session identifiers, sign-in activity, usage events, error details and security or rate-limit records. Necessary cookies or similar browser storage may keep users signed in, remember essential settings, support offline use and protect sessions.
Breached-password screening
When a user creates or resets a password, RuralReady checks it against the free Have I Been Pwned Pwned Passwords service. RuralReady creates a SHA-1 hash only for this lookup, sends only the first five hash characters using the service’s privacy-preserving range method, compares the returned suffixes locally and does not send or retain the full password or full hash for this screening.
Notifications
If a user enables browser push notifications, the Service may store a device-specific subscription identifier and notification preference. Notification providers, browsers and operating-system vendors may process delivery information under their own policies. Users can disable permission in their device or browser settings.
How information is used
We use information to create and secure accounts; separate organization workspaces; provide Fire, Ranch, Farm and County Operations features; synchronize offline changes; route work orders; deliver requested notifications; generate reports; respond to support; diagnose failures; prevent misuse; document consent; improve the Service; and meet legal, tax, accounting or security obligations.
How information may be disclosed
Information may be disclosed to vendors that process it for RuralReady, such as hosting, database, storage, mapping, email, notification and payment providers. It may also be disclosed at your direction; within your organization according to roles; to comply with valid legal process; to investigate fraud, abuse or security threats; to protect users or others; or in connection with a financing, reorganization or sale subject to appropriate protections.
Sale and advertising
RuralReady does not currently sell personal information or use organization records for third-party targeted advertising. If that practice ever changes, this policy and any choices required by law will be updated before the change applies.
Texas privacy requests and appeals
Where applicable, a Texas consumer may request confirmation of processing, access, correction, deletion or a portable copy of personal data, and may opt out of a sale, targeted advertising or qualifying profiling. RuralReady does not currently sell personal data, use it for third-party targeted advertising or make decisions producing legal or similarly significant effects through profiling. Send an authenticated request or appeal to h-vclients@outlook.com. We target a response without undue delay and within 45 days, subject to a permitted extension, and may request information reasonably needed to verify the requester. If a request is denied, the response will explain the reason and appeal process.
Sensitive information and precise location
RuralReady processes sensitive information only when reasonably necessary for the customer-directed service and authorized by the organization. Device location is collected only after a user action and browser or operating-system permission. Do not enter protected health information, criminal-justice information, Social Security numbers, complete payment-card data or precise private-home locations unless expressly authorized and operationally necessary.
Payments
Stripe handles subscription checkout and payment-card processing. RuralReady may receive limited customer, subscription, invoice, payment-status and transaction information needed to manage the account, but does not receive or store complete payment-card numbers.
Retention and deletion
Information is retained while needed to provide the Service, secure accounts, resolve disputes and meet legal, tax and accounting obligations. Organization owners may request access, correction, export or deletion through support. Deletion may not immediately remove temporary backups, security logs, records another authorized user exported or information legally required to be retained.
Children
RuralReady organization accounts are intended to be controlled by adults. The Service is not directed to children under 13, and children under 13 may not receive a direct login. An adult organization may keep authorized operational records that incidentally concern a minor, but it is responsible for having appropriate authority and limiting the information submitted.
Security and choices
We use administrative and technical measures intended to protect information, but no online or offline storage method is completely secure. Users can manage browser permissions, notification access and device storage; organization owners can manage membership; and requests may be sent to support. See the Security page for current safeguards and user responsibilities.
Security incidents
RuralReady investigates suspected unauthorized access, loss or disclosure and may preserve relevant security records, suspend affected access, coordinate with service providers and notify affected organizations or authorities when required by applicable law. Users should promptly report lost devices, exposed sign-in accounts or suspected unauthorized activity and should not include passwords or sensitive record contents in an ordinary email.
Changes and contact
We may update this policy as RuralReady develops. Material changes will be posted with a new effective date. Privacy questions or requests may be sent to h-vclients@outlook.com.