Privacy Policy | TATI FarmOS

This Privacy Policy is intended to cover the TATI FarmOS mobile application, web portal, website and associated services.

Publication note: This is a complete policy draft, but it must not be published until Tatitech verifies the actual data collected, third-party services, retention arrangements, deletion procedures and contact information. Legal review is recommended before publication.

1. Introduction

Tati Technologies Ltd (“Tatitech”, “we”, “us” or “our”) operates TATI FarmOS, a digital livestock and farm management platform designed to help farm owners, managers, veterinarians and authorized farm workers manage agricultural operations.

TATI FarmOS enables participating farms to maintain livestock records, monitor animal health, manage operational activities, coordinate farm personnel and access relevant reports.

We recognize the importance of protecting personal information and maintaining the confidentiality of farm operational records.

This Privacy Policy explains how personal information is collected, used, stored, disclosed, protected and managed when individuals use TATI FarmOS.

We process personal data in accordance with applicable Nigerian data protection legislation, including the Nigeria Data Protection Act 2023, and other laws applicable to our activities.

By using TATI FarmOS, individuals acknowledge that their personal information will be handled as described in this Policy.

Where consent is legally required, we will request it separately.

2. Scope of This Policy

This Policy applies to individuals who access or interact with TATI FarmOS through its supported services, including:

The TATI FarmOS mobile application.
The TATI FarmOS web-based management portal.
The TATI FarmOS website.
Account registration and authentication services.
Customer support and service communications.
Authorized integrations and related platform services.

It covers personal information relating to farm owners, managers, employees, veterinarians, consultants and other authorized users.

It also explains how personal information contained within farm operational records may be processed.

3. Information We Collect

The information collected depends on the services used, the user’s permissions and the features available in the relevant application.

3.1 Personal and Account Information

We may collect:

Full name.
Email address.
Telephone number.
Account identification details.
Organization or farm affiliation.
Assigned roles and permissions.
Authentication and account-security information.
Account preferences.

Passwords and authentication credentials are processed for account security. We do not intend to make passwords available to other farm users or disclose them in readable form.

3.2 Farm and Organization Information

TATI FarmOS may process information supplied by participating farms, including:

Farm or organization name.
Farm address or location.
Farm contact information.
Farm operational structure.
Livestock categories and records.
Farm personnel and assigned responsibilities.
Operational schedules and tasks.

Some farm information may identify individuals, particularly where a farm is operated by a sole proprietor.

3.3 Livestock and Agricultural Records

The platform may process records relating to:

Animal identification and registration.
Species, breed, age and sex.
Animal photographs.
Health observations and treatment records.
Vaccination and reproductive records.
Feeding and weight measurements.
Animal movements and lifecycle events.
Farm operational activities.
Purchase, sale and expense records.
Farm performance and reporting information.

Animal records are generally operational business data. However, associated names, photographs, locations, transaction details or personnel references may constitute personal data.

3.4 Employee and Activity Information

When farm personnel use TATI FarmOS, the platform may record:

Assigned tasks.
Task acknowledgements.
Task completion and activity status.
Relevant operational timestamps.
Records created or updated.
Actions performed within authorized farm accounts.
Relevant audit and security events.

These records help farm organizations manage accountability, operational continuity and data integrity.

3.5 Device and Technical Information

Depending on the application configuration, we may process technical information necessary to operate and secure the service, such as:

Device and operating-system information.
Application version.
IP address.
Authentication-session information.
Error and diagnostic records.
Security-related access logs.

The exact information collected by the mobile application must be confirmed against the production application and its software dependencies.

3.6 Photographs and Uploaded Content

Authorized users may upload photographs and other supported content relating to farm operations. These may include livestock photographs and supporting operational documentation.

Users should avoid uploading unnecessary personal information or content they are not authorized to share.

3.7 Location Information

FarmOS may process farm addresses and locations entered by authorized users.

Device location: Whether the mobile application collects precise or approximate device location must be verified before publication. This Policy does not, by itself, authorize background location tracking.

3.8 Offline Application Information

Where offline functionality is supported, the mobile application may temporarily store authorized operational information on the device to enable work when internet connectivity is unavailable.

Pending records may be synchronized when connectivity becomes available. Offline records remain subject to server-side validation and authorization.

4. How We Use Information

We process information for legitimate purposes connected to providing and maintaining TATI FarmOS. These purposes include:

Account Management: Creating accounts, authenticating users, maintaining profiles and administering access.

Farm Operations: Enabling livestock registration, farm recordkeeping, task management and authorized operational activities.

Service Delivery: Providing dashboards, reports, notifications and other platform functions.

Security: Preventing unauthorized access, investigating suspicious activity and maintaining system integrity.

Technical Support: Investigating service issues and responding to authorized support requests.

Service Improvement: Identifying errors, improving usability and maintaining platform performance.

Legal Compliance: Meeting applicable legal, regulatory and contractual obligations.

Service Communications: Sending essential account, security and operational communications.

Marketing communications, where used, will be handled according to applicable legal requirements and relevant user choices.

5. Legal Bases for Processing

Depending on the circumstances, Tatitech may process personal data on the basis of:

Performance of a contract.
Compliance with legal obligations.
Legitimate interests, where applicable and appropriately assessed.
Consent, where required.
Other lawful grounds recognized by applicable legislation.

The appropriate lawful basis depends on the specific processing activity.

Where a farm organization determines how employee information is used for its operations, that organization may have responsibility for identifying and communicating the applicable lawful basis.

6. Farm Data Ownership and Control

TATI FarmOS is designed to support farm organizations and their authorized personnel.

As between Tatitech and a participating farm organization, the organization retains its rights and interests in the operational records it provides or creates through the platform, subject to applicable law and third-party rights.

Tatitech does not acquire ownership of a farm’s livestock or business merely because its records are maintained on FarmOS.

The farm organization determines which authorized personnel may access its operational records, subject to the platform’s permission structure.

Farm workers and other authorized personnel do not acquire independent ownership of an organization’s operational records simply by creating or updating them.

Where Tatitech processes personal data on behalf of a farm organization, the respective responsibilities of the parties should be established through the applicable service agreement and data-processing arrangements.

Tatitech may separately determine the purposes and means of processing information necessary for its own account administration, platform security, legal compliance and business operations.

7. User Roles and Access Permissions

TATI FarmOS uses an authorization structure intended to restrict access according to organizational membership, farm assignment and granted capabilities.

Access may differ between farm owners, managers, veterinarians and field workers. Users should only access information necessary for their authorized responsibilities.

A user’s ability to view or modify information depends on the applicable account and farm permissions.

When an individual’s authorization is revoked, the platform is intended to prevent continued server-side access to records outside that person’s permitted scope.

The existing technical specification also describes mobile synchronization controls for removing operational cache data associated with revoked farm access. These controls must be verified in the released application.

8. Sharing and Disclosure of Information

We do not treat farm operational information as publicly available merely because it is stored on TATI FarmOS.

Information may be disclosed in the following circumstances.

8.1 Within Authorized Farm Organizations

Farm owners, managers and other authorized personnel may access information according to their assigned permissions.

8.2 Service Providers

We may use authorized service providers to support activities such as hosting, infrastructure, communications, security, technical support and other necessary operations.

Such providers should be subject to appropriate confidentiality, security and data-protection obligations.

The production list of providers and their processing roles must be verified before publication.

8.3 Authorized Integrations

Information may be shared with third-party services when a farm organization authorizes an integration or when sharing is necessary to deliver a requested feature.

The relevant integration should identify the information involved and the applicable responsibilities.

8.4 Legal Requirements

We may disclose information where required by applicable law, a valid legal process or an authorized regulatory request.

8.5 Business Transfers

Where a lawful corporate restructuring, merger or transfer affects the service, personal information may be transferred subject to applicable legal safeguards and contractual obligations.

Tatitech does not authorize the sale of farm operational records to unrelated third parties merely because they are stored on the platform.

9. Data Security

We recognize the importance of protecting personal information and farm operational records.

Our security program is intended to include measures appropriate to the nature and risks of the information processed.

These may include:

User authentication.
Role- and capability-based access controls.
Farm-level access restrictions.
Session management.
Audit and activity records.
Restricted administrative access.
Secure development and maintenance procedures.
Incident detection and response arrangements.

Specific technical safeguards, including encryption arrangements, backup controls and access-monitoring procedures, must be confirmed against the production environment before they are described as implemented.

No digital platform can guarantee absolute security. Users are responsible for protecting their account credentials and promptly reporting suspected unauthorized access.

10. Data Retention

We retain personal information and farm records for periods appropriate to the purposes for which they were collected, subject to applicable legal, contractual and operational requirements.

Different categories of information may require different retention periods.

Account Information: Retained while needed to administer an account and for applicable post-closure obligations.

Farm Operational Records: Retained according to the applicable farm service agreement, organizational instructions and relevant legal requirements.

Audit and Security Records: Retained for legitimate security, accountability and compliance purposes.

Financial Records: Retained where required for accounting, tax, legal or contractual obligations.

Technical Logs: Retained according to the applicable operational and security retention schedule.

The specific retention periods must be documented and approved before this Policy is published.

11. Account Deletion and Data Deletion

Users may request deletion of their personal accounts and associated personal information, subject to applicable legal and contractual requirements.

A distinction exists between an individual’s account and records belonging to a farm organization.

11.1 Individual Account Deletion

A request to delete an individual account may result in:

Termination of the individual’s account access.
Deletion or anonymization of eligible personal information.
Retention of information where legally required or otherwise lawfully justified.

11.2 Farm Employee Accounts

When an employee leaves a farm organization, account access may be revoked.

Operational records created during authorized employment may remain part of the farm organization’s historical records.

Where appropriate, personal identifiers may be restricted, anonymized or otherwise handled in accordance with applicable law.

11.3 Farm Organization Deletion

Requests involving an entire farm organization’s records must be made by an appropriately authorized representative.

Deletion may be subject to contractual obligations, applicable retention requirements and the need to preserve lawful transaction or audit records.

11.4 How to Request Deletion

Users may submit deletion requests through the account-deletion functionality provided in the application or through Tatitech’s designated privacy contact.

Publication requirement: Tatitech must establish and verify a working account-deletion request mechanism and public deletion-request page before submitting an app that allows account creation to Google Play.

12. Data Accuracy and Correction

Users may request correction of inaccurate personal information.

Farm organizations and their authorized personnel are responsible for maintaining accurate livestock and operational records.

Where an authorized user corrects an animal’s age, identification or other operational information, the platform may preserve relevant historical or audit information to maintain record integrity.

Correction rights relating to personal data will be handled in accordance with applicable law.

13. Rights of Data Subjects

Subject to applicable law and relevant limitations, individuals may have rights concerning their personal data, including rights to:

Receive information about processing.
Access their personal data.
Request correction of inaccurate information.
Request deletion where legally applicable.
Object to certain processing.
Withdraw consent where consent is the applicable lawful basis.
Request data portability where applicable.
Lodge a complaint with the appropriate data protection authority.

Requests will be reviewed and addressed according to applicable legal requirements.

14. International Data Transfers

TATI FarmOS may use infrastructure or service providers operating outside Nigeria.

Where personal information is transferred internationally, Tatitech will assess the applicable legal requirements and implement appropriate safeguards where required.

The actual hosting locations, subprocessors and transfer arrangements must be verified before publication.

15. Children’s Privacy

TATI FarmOS is intended for farm businesses and authorized users, not for children.

The platform is not designed to solicit personal information from children for independent consumer use.

If Tatitech becomes aware that children’s personal information has been collected inappropriately, it will assess and take appropriate corrective action in accordance with applicable law.

The minimum permitted user age must be confirmed in the Terms of Service and app distribution settings.

16. Notifications and Communications

TATI FarmOS may provide notifications relating to:

Assigned farm activities.
Operational tasks.
Animal health observations.
Account security.
Farm management updates.
Other supported service functions.

Notification availability depends on the application version, account permissions and configured delivery mechanisms.

In-app notifications should not be interpreted as a guarantee of SMS, email, WhatsApp or push-notification delivery.

Users should not rely exclusively on automated notifications for urgent animal health emergencies.

17. Veterinary and Agricultural Information

TATI FarmOS is a livestock and farm management platform.

It is not a substitute for professional veterinary diagnosis, emergency veterinary treatment or qualified agricultural advice.

Animal health observations, lifecycle stages, alerts and other system-generated information depend on available records and the applicable software rules.

Users should consult appropriately qualified professionals when making veterinary, reproductive or other consequential animal-management decisions.

18. Third-Party Services

Some FarmOS features may depend on third-party infrastructure, authentication services, communication providers or integrations.

These services may process information necessary to deliver their functions.

Where users are directed to independent third-party services, those services may operate under their own privacy policies.

Tatitech will take reasonable steps to ensure that third-party processing arrangements comply with applicable obligations.

19. Changes to This Privacy Policy

Tatitech may update this Policy to reflect:

Changes in applicable law.
New platform functionality.
Changes in data-processing practices.
Security or operational developments.
Changes in service providers or integrations.

The current version will be made available through the appropriate FarmOS website or application location.

Where legally required, users will receive additional notice or be asked to provide consent.

20. Contact and Privacy Requests

For questions, complaints or requests concerning this Policy or personal information processed through TATI FarmOS, contact:

Data Protection Contact Tati Technologies Ltd Abuja, Federal Capital Territory, Nigeria Privacy Email: [INSERT VERIFIED PRIVACY EMAIL]

Support Email: [INSERT VERIFIED SUPPORT EMAIL]

Account Deletion URL: [INSERT FINAL PUBLIC URL]

Individuals may also exercise applicable rights to complain to the Nigeria Data Protection Commission (https://ndpc.gov.ng/).

Publication and Google Play Readiness

This policy is drafted to support the FarmOS Play Store release, but the following operational details must be confirmed before it becomes the final public version.

Verification Responsible Team Status Confirm legal entity and privacy contact Management Pending Verify actual mobile data collection Mobile/Backend Pending Audit Android permissions and third-party SDKs Mobile Pending Verify hosting providers and data locations Backend/DevOps Pending Confirm data retention periods Management/Legal Pending Implement and test account deletion Backend/Mobile Pending verification Confirm security statements against production Backend/DevOps Pending Publish public privacy policy and deletion pages Web Team Pending Complete accurate Google Play Data Safety declaration Product/Mobile Pending Obtain legal and management approval Management/Legal Pending Next document: FARMOS-LEGAL-002 — Terms of Service & Farm Data Management Policy, covering organization ownership, employee access, livestock records, farm responsibilities, subscription terms, termination and dispute resolution.

The Privacy Policy above is ready for management review, but it is not yet cleared for publication until the pending operational details are verified.