Privacy Policy

Skymaps s.r.o. (“Skymaps”, “we”, or “us”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you use the Cultiwise web platform, how we use and share that data, and your rights regarding your data. This policy is designed to comply with the EU General Data Protection Regulation (GDPR) and relevant local data protection laws.
Controller. The controller of your personal data is Skymaps s.r.o., Company Registration No. 05547164, registered office: plynarenska 499/1, Brno, Czech Republic.
Privacy contact: support@cultiwise.com.

1. Data We Collect

We collect and process the following types of information:
·        Account Information: When you register or use Cultiwise, we collect personal identifiers such as your name, email address, contact details, organization or company (if you provide it), and login credentials. This information is necessary to create and manage your account.
·        Farm and Field Data (User Content): When you use our platform’s features, you may upload or enter agricultural data about your farm or fields. This can include drone or satellite images of fields, field boundary coordinates, soil sample results, crop type, planting and harvest dates, yield data, “as-applied” maps (application logs for fertilizers or pesticides), and other agronomic information you choose to provide. We treat this as your data. While such information typically relates to your farming operations and not directly to an identified natural person, it may still be linked to you as a user or to your business, so we protect it as described in this policy.
·        Usage Data: We collect technical information about how you use Cultiwise. This includes your IP address, browser type, device type, operating system, pages or features accessed, timestamps, and other log data. We also use cookies or similar technologies to remember your preferences and enhance your experience. This data helps us secure the Service and improve functionality.
·        Location Data: The Cultiwise web platform may derive location-related data if you input location coordinates for fields or use map features. We do not actively track your real-time GPS location via your device (since Cultiwise is accessed via web, not a mobile GPS app), but any coordinates you provide for your fields will be stored to enable mapping and analysis.
·        Support and Communication: If you contact us for support or feedback, we will collect the information you choose to provide in that correspondence (such as your contact information and a description of the issue).
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, health information, etc., as Cultiwise is focused on agronomic data. We ask that you refrain from submitting such sensitive data on the platform. Cultiwise is not intended for children under 16, and we do not knowingly collect personal data from minors.

2. How We Use Your Data

We process your personal data and User Content for the following purposes, in accordance with applicable law:
·        To Provide Services: We use the collected information to operate and provide you with the features of Cultiwise. For example, we use your field data and uploaded imagery to generate vegetation indices, maps, and analytical reports specific to your farm. Your email and login info are used for authentication and to communicate with you about your account (such as service announcements or security alerts). Processing your data for these purposes is generally based on contractual necessity (to fulfill our obligations to you under our Terms of Use).
·        To Improve and Develop Our Platform: We may process your agronomic data and usage data to refine Cultiwise’s algorithms and services. Specifically, we analyze user-provided field images, crop records, and other inputs in an aggregated or anonymized manner to enhance the accuracy of our models and analytics. For instance, by learning from many uploaded drone images and their outcomes, our machine learning models can better recognize crop patterns or stress indicators. Your personal identity or farm name is not important in this analysis – we care about the overall patterns and trends, not who a particular field belongs to. We store user-contributed data securely and use it to make our algorithms smarter, while maintaining confidentiality. This processing is based on our legitimate interest in improving our services for all users, but we do so in a way that does not override your privacy rights (for example, by anonymizing data where feasible).
·        Customer Support and Communication: We will use your contact information to respond when you reach out with questions, technical issues, or feedback. We may also send you informational communications about new features or updates to the Service. We will only send you marketing emails if you have opted in to receive them (and you can opt out at any time).
·        Legal Compliance and Security: We may process personal data as required to comply with applicable laws, regulations, or court orders (for example, accounting records, or responding to lawful requests by public authorities). We also process data as necessary to ensure the security of the platform, prevent fraud, enforce our Terms of Use, and protect our legal rights. This may include monitoring usage for compliance and investigating any misuse of Cultiwise.
We will not use your personal data for any completely new, unrelated purposes without first obtaining your consent. We do not engage in any automated decision-making or profiling that produces legal or similarly significant effects on you, outside of the core analytics that the Service provides at your direction.
Legal bases for processing. We rely on: contractual necessity (Art. 6(1)(b)) to provide core services; legitimate interests (Art. 6(1)(f)) to improve and secure the Service (including training/evaluating models using anonymized or aggregated agronomic data) and support customers—you may object at any time; legal obligation (Art. 6(1)(c)) for accounting/tax/compliance; and consent (Art. 6(1)(a)) for non-essential cookies/analytics and optional marketing, which you can withdraw at any time.

3. Data Sharing and Disclosure

We value your privacy and do not sell or rent your personal information to third parties. We only share data in the following circumstances:
·        Service Providers (Processors): We use trusted third-party service providers to host and process data on our behalf. In particular, Cultiwise is built on secure cloud infrastructure such as Amazon Web Services (AWS) and Microsoft Azure. These cloud providers store and manage data for us and are contractually bound to protect your information and only use it to provide services to us. We may also use providers for functionalities like map rendering, analytics, or email communications. Examples could include mapping APIs or email delivery services. Each of our processors is vetted for strong security practices and GDPR compliance.
·        Payments (Stripe): We use Stripe to process in-app payments. Card details are handled exclusively by Stripe and are not stored or processed on our servers. For card processing, Stripe acts as an independent controller. We share only the billing details necessary to complete your purchase (e.g., name, email, billing address, VAT number, transaction identifiers).
·        Within Our Corporate Group: If Skymaps s.r.o. has affiliates or subsidiaries involved in operating Cultiwise, your data may be shared within our corporate family on a need-to-know basis, under strict confidentiality, and always under the same privacy commitments. (At present, Skymaps s.r.o. is the primary entity).
·        Business Transfers: If Skymaps is involved in a merger, acquisition, investment, or sale of all or a portion of its assets, your data may be transferred to the new owner as part of that transaction. We would ensure the new owner is bound by terms that are at least as protective of your privacy as this policy, and we would notify you of any change in data control.
·        Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., law enforcement or regulatory agency), but only to the extent we are compelled to and in line with applicable data protection laws. We may also disclose data in connection with the establishment or defense of legal claims, to investigate or prevent fraud or security issues, or to enforce our Terms of Use.
·        Aggregated Data: We may share aggregated, anonymized information publicly or with partners — for example, publishing trends about crop health in a region or average yield improvements among Cultiwise users. Such data will not identify you personally and is used only for industry insights, research, or marketing of our services. (For instance, stating that Cultiwise users managed a certain average fertilizer reduction, without naming specific farms).
Aside from the above, you have control over who you share your data with. Cultiwise might allow you to share or export reports (for example, to an agronomist or advisor you work with), but that is initiated by you. We will not share your farm-specific analyses with other users or third parties without your instruction or consent
Sub-processors. We use vetted sub-processors for specific functions (e.g., hosting, analytics, email). A current list is available on request.
3A. Roles (Controller/Processor) and Machine Learning Improvement
For account data and platform operation, Skymaps acts as a controller. For User Content you upload (e.g., field imagery, agronomic inputs), Skymaps acts as a processor to the extent we process it solely to provide the Service per your instructions. Where we further use anonymized or aggregated User Content to improve algorithms and analytics, Skymaps acts as a controller on the basis of legitimate interests. You may object to our use of your User Content for model improvement at any time by emailing privacy@cultiwise.com. Objecting does not affect your ability to use the Service’s core features.

4. Data Storage and International Transfers

Skymaps is based in the European Union (Slovakia), and we aim to store and process your data within the EU/EEA when possible. However, the cloud providers we use (such as AWS or Azure) may store backups or enable support from teams in other regions. Whenever your personal data is transferred outside of the European Economic Area, we will ensure appropriate safeguards are in place to protect it. Typically, this means we rely on EU Commission-approved Standard Contractual Clauses (SCCs) or transfers to countries that have an adequacy decision from the EU, ensuring a similar level of data protection. Our service providers are also certified under frameworks like ISO 27001 or similar, indicating strong security controls. Copies or a description of these safeguards are available on request.
By using Cultiwise, you understand that your data may be processed in data centers located in different countries, including (for example) the United States, under the protection measures described. We will ensure any such transfers comply with GDPR requirements. If you have questions about where your data is stored, you can contact us (see Contact section below).

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations. In practice:
·        Account Data: We keep your account information (like your name, email, and profile info) for as long as your account is active. If you delete your account or request deletion, we will erase or anonymize this information within a reasonable time after fulfilling any legal or administrative requirements (for example, we might need to retain certain records for tax or audit purposes).
·        User Content (Agronomic Data): All drone images, field data, and related content you upload will remain stored in your account until you choose to delete them or your account is deleted. This allows you to access historical analyses and field records. If you remove specific data or close your account, the original data will be deleted from our live systems. However, copies may remain in our secure backups for a limited period (backups are periodically purged on a rolling schedule) – these will remain protected until deletion. Additionally, if your data has contributed to aggregated analytical models or machine learning training, it may not be feasible to extract or delete individual contributions from those models; however, such models contain no personally identifiable information.
·        Usage Logs: We generally retain web server logs and analytics data for a limited time (e.g., 12 months) for security analysis and improvement of the service. These may be kept longer in a statistical or anonymized form that no longer can identify you.
·        Communications: If you contacted support, we may retain those communications for a period necessary to address your issue and improve our services (typically these are kept for some months in case of follow-ups, and longer if needed for legal purposes).
Retention benchmarks. In addition to the above: account data is deleted or anonymized within 90 days after closure (subject to legal archiving); backups purge on a rolling cycle (typically up to 90 days); billing/transaction records are retained up to 10 years (or the statutory period) for accounting/tax; support tickets up to 24 months unless needed longer; security logs 12 months, then anonymized or deleted.
When we no longer need personal data and are not legally required to keep it, we will either securely delete it or anonymize it so it can no longer be associated with you.

6. Your Rights as a Data Subject (GDPR)

As an individual in the EU (or in other jurisdictions with similar laws), you have certain rights regarding your personal data. Cultiwise is designed to empower you to control your data. Your rights include:
·        Right of Access: You have the right to request a copy of the personal data we hold about you and information about how we process it. We will provide this information, usually within one month of request and free of charge (except if requests are excessive).
·        Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to ask us to correct it. You can update some of your account information directly in your profile settings.
·        Right to Erasure: You have the “right to be forgotten,” meaning you can request that we delete your personal data. You can do this by contacting our support. For example, if you discontinue using Cultiwise, you may request complete deletion of your account and all associated data at any time. We will honor such requests unless we have a lawful reason to retain certain data (we will inform you if so).
·        Right to Restrict Processing: You can ask us to restrict (pause) the processing of your data if you contest its accuracy, object to processing, or in other circumstances under GDPR Article 18. For instance, while we verify a correction you requested or if you need data preserved for a legal claim.
·        Right to Data Portability: You have the right to obtain your personal data in a common, machine-readable format and to transfer it to another service if desired.
·        Right to Object: You may object to certain processing of your data, especially if we are processing it based on legitimate interests or for direct marketing. For example, you can object to us using your agronomic data for machine learning improvements; in such case, we will review your request and, unless we have compelling legitimate grounds, we will cease the processing in question. If you object to marketing emails, we will stop sending them.
·        Right not to be subject to automated decisions: Cultiwise does not make automated decisions about you with legal effects, but if that ever changes, you would have the right to human review of any significant automated decision.
·        Right to Withdraw Consent: In cases where we rely on your consent (e.g., for optional features or newsletters), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing that happened before the withdrawal.
To exercise any of these rights, please contact our support team (see Contact section). We may need to verify your identity to process your request. We will respond to your requests as soon as possible, and no later than one month as required by GDPR (this may be extended by two further months for complex requests, but we will inform you if so). There is generally no fee for exercising your rights, unless requests are unfounded or excessive, in which case a reasonable fee may apply as permitted by law.
You also have the right to lodge a complaint with a data protection supervisory authority. In the Czech Republic: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic. If you are in another EU country, you may contact your local authority.

7. Data Security

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (e.g., SSL/TLS for the web interface) and encryption at rest for sensitive data stored on our servers. Our cloud infrastructure on AWS/Azure is secured and regularly updated with security patches. Access to personal data within Skymaps is restricted to personnel who need it to perform their job (for example, customer support or engineers diagnosing a problem), and they are bound by confidentiality. We monitor our systems for possible vulnerabilities and attacks. We also have backup systems and disaster recovery procedures to prevent data loss.
However, please note that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. It is also important that you protect your account credentials and notify us immediately if you suspect any unauthorized access to your account. In the unlikely event of a personal data breach affecting your personal data, we will notify the competent supervisory authority within 72 hours where required, and inform affected users without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

8. Cookies and Tracking

Cultiwise uses cookies (small text files stored on your browser) and similar technologies to ensure the platform functions correctly and to enhance your user experience. For example, cookies may keep you logged in during a session or remember your preferences like language or units of measurement. We may also utilize cookies or third-party analytics (like a web analytics service) to collect usage data as described under “Usage Data.” Any analytics are configured to minimize personal data (for instance, by anonymizing IP addresses where possible). You can configure your browser to refuse cookies or alert you when cookies are being used. However, please be aware that if you disable or delete cookies, some features of Cultiwise might not function properly (such as maintaining your login). We use a cookie banner/preferences center to obtain consent for non-essential cookies and analytics, and you can change your preferences at any time. For more details, see our Cookie Policy (if provided) or contact us with any questions about our use of cookies.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or for legal reasons. If we make material changes, we will notify you by posting the updated policy on our website and, where appropriate, via email or an in-service notification. We will indicate the date of the latest revision at the top of the policy. Please review the Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of Cultiwise after any changes to this Policy signifies your acceptance of the updated terms, to the extent permitted by law.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at support@cultiwise.com.
 We are committed to resolving any issues and protecting your privacy. By using the Service, you acknowledge that you have read and understood these terms. Thank you for trusting Cultiwise with your agricultural data, we strive to uphold that trust with transparency and security.
Effective Date: 16 October 2025