Privacy and data processing

Who is responsible

Chickensystem is provided by Sevenweeks International L.L.C-FZ, Dubai, United Arab Emirates.

The farm records in Chickensystem belong to our customer, the company that uses it. The customer is the controller of that data and decides what is recorded and who may see it. We are the processor: we store and process the data only to run the service for the customer, on their instructions, and never sell it or use it for advertising.

For our customers' contact and billing details and for enquiries sent through this website, Sevenweeks International L.L.C-FZ is the controller.

What we process

Accounts of the customer's staff (name, username or e-mail, optional phone, language, role and access rights, sign-in times and devices); the records they make (figures, notes, photos, signatures, who made them and when); the farm's visitor log and delivery customers; a complete audit trail of changes and of every access by our own staff; and billing details of the customer company. Card details are handled only by Stripe.

Photos are re-encoded on the phone, which removes embedded metadata such as the location. A photo's location is kept only if the customer switches this on.

Enquiries sent through the contact form: the answers you give (name, company, contact details, country, the kind and size of your operation, the areas, systems and languages you mention, and your message) and when you agreed to this notice. We use them only to reply and to prepare a proposal.

Where the data is stored

The database, sign-ins and files are stored with Supabase in the EU (Frankfurt, Germany). Weekly backups and exports are stored in Cloudflare R2 in the EU. The web application runs on Cloudflare's network. The field app keeps the last 30 days of records on the phone so it works without coverage.

Service providers

Supabase (database, sign-in, files), Cloudflare (hosting, bot protection, backups, cookie-free visit statistics), Stripe (subscriptions and invoices), Resend (e-mail), Google Firebase Cloud Messaging (push notifications). Transfers outside the EU are covered by the providers' standard contractual clauses.

Security

Every table is protected in the database so that people only see the companies and departments they belong to. Records cannot be overwritten or deleted; corrections are added as new entries. Our staff need two-factor authentication and can see a customer's data only in a logged, read-only support session, which the customer sees in their audit log. Connections are encrypted, and so is the data at rest.

How long we keep data

Farm records and photos are kept for as long as the customer's account exists, and the customer can export everything at any time. When a customer leaves, they get a final export and 30 days of read access; then all of the company's records, files, backups and sign-ins are erased. When a person asks to be removed, their name, phone and sign-in are deleted; the farm keeps the records they made, without their name.

Your rights

If you work for or visited one of our customers, please contact that company first; we help them answer requests for access, correction, export or erasure. For anything else, write to us.

Contact

Sevenweeks International L.L.C-FZ, Dubai, United Arab Emirates.