Last updated: June 16, 2026

Privacy Policy — AgPrecision

Effective date: June 16, 2026

McGill University (hereinafter, “McGill”, “we”, “our” or “us”) is committed to respecting and protecting your privacy and the confidentiality of the information you have entrusted to us and that we collect about you. This privacy policy (the “Policy”) explains how we collect, use, disclose or otherwise process your information (including your personal information) in connection with your use of the AgPrecision platform, how we keep your information confidential, and how you can exercise your rights and choices regarding your information.

AgPrecision is a platform arising from the AgPrecision research project, operated by McGill.

This Policy is supplemented by the Terms of Use available on our website.

1. Scope and application

AgPrecision is a bilingual (French/English) web platform associated with the AgPrecision research project. It comprises:

a public showcase website presenting the project, its research areas, key figures, partners, the regional map and its advisory committee;
an authenticated web application that lets you, among other things, plan precision trials, analyze agronomic data and view the results, share regional averages, browse a list of soil analysis equipment and rent that equipment, as well as manage a profile, organizations, members and roles.

This Policy applies to the AgPrecision platform, accessible at agriprecision.ca, and covers the information collected when you:

browse the public showcase website;
create an account or register for the platform;
complete or update your profile;
create or manage an organization and its members;
plan precision trials and submit or view agronomic data;
browse the list of soil analysis equipment or rent equipment;
make a payment (where applicable);
contact us for support or any other request.

2. What is “personal information”?

“Personal information” generally means information (in any format) about an identifiable individual or natural person, in particular your name, contact details, email address and IP address. The term also includes other types of technical information, but only where that information is used to identify you as an individual.

Aggregated and/or anonymized information that cannot be associated with an identifiable individual, whether directly or indirectly, is not considered personal information. The regional averages shared on the platform are aggregated data and are not considered personal information.

3. What categories of information do we collect?

We limit our collection to the personal information that is reasonably necessary to achieve the purposes for which it was collected.

3.1 Account and profile information

When you create your account and use the platform, we collect:

Personal identifiers: full name, email address;
Profile data: profile picture (avatar), preferred display language (French or English), onboarding completion status;
Authentication data: authentication is performed by email, using a confirmation link or a one-time code sent to your email address. Where applicable, your password is managed and encrypted by the authentication service (Supabase); AgPrecision never has access to it in clear text. No SMS authentication, third-party provider (Google, Microsoft) or multi-factor authentication is used by the platform to date.

3.2 Organizational data

The platform is based on an organization model. When you create or join an organization, we collect and store:

Organization data: organization name, organization type (manager, agronomic, farm or program), affiliation with a parent organization where applicable;
Roles and permissions: your role within the organization (owner, administrator or member) and the permission profiles assigned to you;
Metadata: creation date and identity of the person who created the organization.

3.3 Invitations

When you invite a person to join an organization, we collect and store the invited person’s email address, the proposed role or permission profile, and a single-use invitation token with an expiry date.

3.4 Precision trial and agronomic data

When you plan precision trials or submit data to the platform, we collect and store the information relating to those trials, including: the description and parameters of the trials, the associated agronomic and soil data, the location (region, and where applicable parcel or farm), and the analysis results produced. This data may contain information relating to a farm operation or its operator.

3.5 Equipment and rental data

When you browse the list of soil analysis equipment or carry out a rental, we collect the information relating to the rental (selected equipment, dates, organization and user concerned) and the necessary billing information.

3.6 Payment data

The platform is free for producers and agronomists in Quebec. For users located elsewhere in Canada, as well as for equipment rental fees, charges apply. Payments are processed by our payment provider (Stripe). We collect the necessary billing information (name, billing details, transaction history); full credit card numbers do not pass through our servers and are processed directly by Stripe.

3.7 Technical, analytics and error-tracking information

Your use of the platform allows the automatic collection of certain technical information:

Session data: a session token (JWT) is stored in your browser’s local storage (localStorage) to keep you signed in;
Usage analytics: we use Google Analytics (GA4, deployed via Google Tag Manager) to measure use of the platform. This tool may set cookies and collect usage and technical data (pages viewed, device type, truncated IP address where applicable);
Error tracking and session replay: we use Sentry to detect and diagnose technical errors. Sentry may record error excerpts and session replays (about 10% of normal sessions and 100% of sessions during which an error occurs). We have configured Sentry not to transmit your IP address or your cookies (the “sendDefaultPii” setting is disabled), and to mask sensitive parameters present in URLs (tokens, confirmation codes) before any transmission.

3.8 Data processed by artificial intelligence

When you use an artificial-intelligence feature of the platform, the content you submit (for example text or agronomic data) may be transmitted to the AI provider Anthropic (Claude) for processing. This content may contain information relating to a farm operation. The user’s identity (name, email) is not included in the data sent to the AI provider. Content generated by the AI is provided for guidance only and must be verified before any professional use.

4. How do we collect your personal information?

We collect personal information in various ways:

Directly from you

When you create an account (full name, email);
When you complete your profile (picture, language);
When you create an organization or manage its members;
When you invite people to join an organization;
When you plan trials, submit agronomic data or rent equipment;
When you make a payment;
When you contact us for support.

Automatically via the platform

Session data stored in your browser;
Usage analytics data via Google Analytics (GA4 via Google Tag Manager);
Technical error-tracking and session-replay data via Sentry, within the limits described in section 3.7.

5. How do we use your personal information?

5.1 Providing and improving the platform

Identify you and allow you to access your account;
Provide the platform’s features (precision trial planning, data analysis and delivery of results, regional average sharing, soil analysis equipment directory and rental, management of profile, organizations, members and roles);
Manage equipment rentals, applicable fees, billing and transactions via Stripe;
Send the emails necessary for the operation of the service (account confirmation, reset, invitations, important notifications);
Improve the platform, diagnose and resolve technical incidents.

5.2 Research purposes and aggregated statistics

Calculate and share regional averages and other aggregated and anonymized statistics. These statistics do not allow any particular individual, farm operation or organization to be identified.

5.3 Security and administration

Protect the security of your account and data (authentication, access control);
Prevent fraud and detect unauthorized activity;
Manage role- and permission-based access control within your organization.

5.4 Legal and regulatory obligations

Comply with applicable legal and regulatory obligations;
Respond to requests from competent authorities;
Exercise or defend our legal rights.

5.5 Restrictions on the use of data

We undertake never to sell your personal information or to use it for marketing or advertising purposes. The data entered on the platform is not used to solicit or contact the members of an organization for commercial purposes.

Each organization’s data is strictly partitioned. No data belonging to one organization may be viewed, used or shared with another organization, in accordance with database-level security rules (Row Level Security). Only aggregated and anonymized statistics (regional averages) may be shared more broadly.

6. When do we disclose your personal information?

We may disclose your personal information to the following categories of recipients:

6.1 Technology service providers

We use third-party service providers to operate the AgPrecision platform. These providers may have access to certain of your personal information in connection with the services they provide to us:

Supabase: database hosting, authentication, file storage and server functions;
Resend: sending transactional emails (account confirmation, invitations, notifications);
Stripe: payment processing (fees applicable outside Quebec and equipment rental fees);
Anthropic (Claude): artificial-intelligence processing of the content you submit to AI features (see section 3.8);
Google Places: geocoding and validation of addresses (regions, parcels or farms);
Leaflet / OpenStreetMap: map display (regional map and regional averages);
Impler.io: importing data from CSV/Excel files;
Google Analytics (GA4 via Google Tag Manager): platform usage analytics;
Upstash Redis: caching and rate limiting for performance and security purposes;
Sentry: tracking and resolution of technical errors, as well as session replay, within the limits described in section 3.7.

When we transfer personal information to our service providers, we contractually ensure that this information is used only for the purposes for which the provider was engaged.

The platform allows data to be shared among the members of the same organization, according to the configured permissions and roles (owner, administrator, member). Owners and administrators have broad visibility over the organization’s data, while members only have access to the items corresponding to the permissions assigned to them.

6.3 Sale or transfer of activities

If necessary for the purpose of evaluating or concluding a transaction or reorganization (including a transfer of the research project or the platform), we may share personal information with the other party in accordance with applicable legal requirements.

6.4 Other permitted reasons

We may disclose your personal information where applicable law permits or requires it, for example to prevent fraud or to respond to a request from competent authorities.

7. What are your choices regarding the use of your personal information?

Change your communication preferences

We limit our emails to service communications (account confirmation, invitations, important notifications, security alerts and billing notices). If any optional communications were to be sent, you could unsubscribe by following the instructions in the email.

Manage cookies and analytics

Usage analytics (Google Analytics) may set cookies on your device. You can manage or refuse cookies via your browser settings or any consent management mechanism offered on the platform.

Manage your browser data

The platform uses your browser’s local storage (localStorage) for session persistence. You can clear this data via your browser settings; however, this may sign you out.

Manage your profile

You can view and update your profile information (name, picture, language) at any time from your account settings.

You can withdraw your consent to the collection, use and disclosure of your personal information at any time, upon reasonable written notice, subject to legal or contractual restrictions. Withdrawing your consent may affect our ability to continue providing you with the platform.

8. How do we protect your personal information?

We maintain technical, organizational and contractual security measures to protect your personal information:

Technical measures

Encryption in transit: all communications are protected by HTTPS (TLS);
Secure authentication: email-based authentication (confirmation link or one-time code); passwords, where applicable, are managed and encrypted by the authentication service;
Access control: Row Level Security (RLS) at the PostgreSQL database level, ensuring data partitioning by organization and by role;
Payment security: credit card information is processed directly by Stripe and does not pass through our servers;
Rate limiting: protection against abuse and brute-force attacks via Upstash Redis;
Minimization of data sent to error tracking: Sentry is configured not to transmit your IP address or your cookies, and to mask sensitive tokens and codes present in URLs.

Organizational measures

Management of roles and permissions within organizations;
Procedures to receive and handle requests and incidents relating to the protection of personal information.

Contractual measures

Contractual agreements with our service providers requiring adequate security measures;
Access keys to third-party services are stored exclusively server-side and are never exposed client-side.

9. How long do we keep your personal information?

We keep your personal information for as long as necessary to provide you with the platform, manage our activities and comply with our legal and regulatory obligations.

Account and profile data: kept for as long as your account is active; deleted or anonymized on request, subject to applicable legal obligations;
Organization, trial and agronomic data: kept for as long as the organization exists or as long as it is necessary for the project’s research purposes;
Invitations: invitation tokens expire automatically on their scheduled expiry date;
Billing and payment data: kept in accordance with applicable legal, accounting and tax obligations;
Error-tracking (Sentry) and analytics (Google Analytics) data: kept in accordance with the providers’ default retention periods.

When your information is no longer necessary, it is securely destroyed or anonymized.

10. Cross-border transfers of personal information

The AgPrecision platform is intended for the Canadian market. However, some of our service providers host or process data outside Canada:

Supabase (database and authentication): United States (AWS us-east-1);
Resend (transactional emails): United States;
Anthropic (artificial intelligence): United States;
Google Places (geocoding): United States;
Impler.io (CSV/Excel import): United States;
Upstash Redis (caching and rate limiting): United States / global;
Leaflet / OpenStreetMap (mapping): global tile servers (European Union / global);
Sentry (error tracking): United States;
Google Analytics (GA4 via Google Tag Manager): United States;
Stripe (payments): global (customer’s regional access point).

When your information is used or stored outside Canada, it may be subject to the laws of that jurisdiction. We enter into contractual agreements with our providers to ensure adequate protection of your personal information.

11. Exercising your rights regarding your personal information

In accordance with applicable laws, including the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1) as amended by Law 25, as well as applicable Canadian federal laws, you may:

Access your personal information;
Request the correction of inaccurate information;
Request the deletion of your personal information;
Withdraw your consent to the collection, use or disclosure of your information.

To exercise these rights, you can contact us in writing at the address indicated in the “Contact us” section. We will acknowledge receipt of your request within a maximum of 30 days and respond in accordance with applicable legal requirements.

Certain data may be retained temporarily to comply with legal or contractual obligations (billing, tax obligations).

12. Changes to the Policy

We may, from time to time and at our sole discretion, make changes to this Policy. Any change takes effect when we post the revised Policy on our website. If we make significant changes, we will inform you by email or by a notice on the platform, where required by law.

The “effective date” at the top of this Policy indicates its most recent update.

13. Contact us

If you have any questions or complaints about how we handle your personal information, you can contact the Privacy Officer:

McGill University — AgPrecision research project

Attention: Dr. Viacheslav Adamchuk

Email: viacheslav.adamchuk@mcgill.ca