Privacy Policy

Last updated: November 19, 2025

Introduction

Welcome to HayShare. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

Information We Collect

We may collect, use, store and transfer different kinds of personal data about you:

  • Identity Data: name, username, or similar identifier
  • Contact Data: email address, phone number, and physical address
  • Profile Data: farm name, location, profile picture, and bio
  • Transaction Data: details about listings you create or inquiries you make
  • Technical Data: IP address, browser type, device information, and usage data
  • Communications Data: messages sent through our platform

How We Use Your Information

We use your personal data for the following purposes:

  • To provide and maintain our marketplace service
  • To create and manage your account
  • To enable communication between buyers and sellers
  • To display your listings and profile information
  • To send you important updates and notifications
  • To improve our website and user experience
  • To prevent fraud and ensure platform security
  • To comply with legal obligations

Information Sharing

We do not sell your personal data. We may share your information in the following circumstances:

  • With Other Users: Your public profile information and listings are visible to other users
  • Phone Number Display: Only verified users can see phone numbers if you enable this setting
  • Service Providers: We may share data with trusted third-party services that help us operate our platform
  • Legal Requirements: We may disclose information if required by law or to protect our rights

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. We use industry-standard encryption and secure authentication protocols to protect your information.

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Object to processing of your data
  • Request transfer of your data
  • Withdraw consent at any time

To exercise these rights, please contact us at privacy@hayshare.com or use the account deletion feature in your dashboard settings.

Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. For more details, see our Cookie Policy.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy. When you delete your account, we will permanently remove your personal data, listings, and associated content from our systems.

Third-Party Services

Our service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

We may use the following third-party services:

  • Supabase for authentication and data storage
  • Vercel for hosting and analytics
  • Email service providers for notifications

Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

GDPR Compliance (EU Users)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). HayShare is committed to complying with GDPR requirements.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract: Processing necessary to provide our marketplace service and fulfill our agreement with you
  • Consent: You have given explicit consent for specific processing activities (e.g., marketing communications, optional features)
  • Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, platform security, service improvement)
  • Legal Obligation: Processing required to comply with applicable laws and regulations

Your GDPR Rights

Under GDPR, you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
  • Right to Restriction: Request that we limit the processing of your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to our processing of your data based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

Data Retention

We retain your personal data only as long as necessary:

  • Active Accounts: Data retained while your account is active and for legitimate business purposes
  • Deleted Accounts: Personal data permanently deleted within 30 days of account deletion
  • Legal Requirements: Some data may be retained longer if required by law (e.g., tax records, dispute resolution)
  • Anonymized Data: We may retain anonymized, aggregated data indefinitely for statistical purposes

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach
  • Inform affected users without undue delay if there is a high risk to their rights
  • Provide clear information about the nature of the breach and steps being taken
  • Offer guidance on protective measures you can take

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at privacy@hayshare.com. We will respond to your request within one month. You can also:

  • Update your profile information in your dashboard settings
  • Delete your account using the account deletion feature
  • Export your data by contacting our support team
  • Manage cookie preferences through your browser settings

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.

Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us: