Hand-curated. 10 providers today. You’ll see exactly what each one gets, where they process it, and the agreement we have with them.
Maintained by Abhishree Labs · DPDP Act 2023
Backend API hosting (FastAPI) and the managed PostgreSQL database.
All user-record fields — name, email, phone, address, plant photos, order history. The full application database lives here.
Singapore (primary), US/EU regions for multi-region failover
Payment Aggregator under RBI PA Guidelines. Handles all card / UPI / net-banking checkout for orders, subscriptions, and consultations.
Customer name, email, phone, billing address, transaction amount. No card data ever touches our servers — capture is on Razorpay's hosted checkout.
India
Product image storage + on-the-fly transformation (resize, WebP/AVIF, watermark, label overlays).
Product images, public asset URLs, user-uploaded plant-diagnosis photos. Photos uploaded for AI diagnosis pass through ImageKit before reaching our backend.
India (Mumbai)
Frontend hosting and edge CDN for terracefarming.in, plus object storage for user-uploaded images (public bucket) and private documents — notably affiliate/partner payout statement PDFs, which are served only through short-lived signed URLs.
Request metadata (IP, user agent, URL) for page delivery; user-uploaded photos; and payout statement PDFs containing the payee's name, masked bank/UPI/PAN, and payout amounts.
Cloudflare global network (R2); objects stored per the bucket's configured region.
Application error monitoring. Captures exceptions, stack traces, and a small slice of context (user ID, current URL, browser).
User ID, email (when present in error context), IP. Sensitive bodies are scrubbed by Sentry's data-scrubbing rules before leaving the client.
European Union (de.sentry.io). Configured this way so EU traffic stays in-region.
Generative AI (Claude) for the AI plant doctor and the in-app assistant. We only call Anthropic when a user voluntarily sends a question or photo.
The user's question text, the photo (if attached), and a short conversation context. We do NOT send name, email, or other identifiers in the prompt.
United States
Fallback generative AI used by some assistant features when Anthropic is rate-limited or unavailable.
Same scope as Anthropic — user question text and photo only, no identifiers.
United States
Anonymous web analytics. Loaded only after the user accepts analytics cookies on the consent banner.
Anonymised IP, page URL, click events, broad device/browser type. No name or email is sent. Demographic features are off.
United States (with regional collection in EU/India)
Optional federated login. Only invoked when a user clicks Sign in with Google.
OAuth-returned name, email, and Google profile picture URL. We don't request additional Google scopes.
United States
Transactional email (order confirmations, verification OTPs, password resets) and SMS OTP.
Email address, phone number, the message body itself.
United States
The DPDP Act, 2023 permits transfers of personal data outside India except to countries the Central Government places on a negative list. As of this page’s last review, no negative list has been notified.
Providers above sit in India, the United States, the European Union, and Singapore. For US/EU operations we require either Standard Contractual Clauses (where the provider has European users) or a Master Services Agreement that covers data protection equivalent to the DPDP Act’s standards.
We do not share user data with advertising networks (we’re not in Google Ads’ user-data programmes), data brokers, or analytics-only companies beyond Google Analytics 4 — which we run in anonymised mode and only after consent.
When we display sponsored products, the targeting is computed server-side from data already on TerraceFarming and does not leave our infrastructure.
When we add a sub-processor we update this page first — this page is the authoritative record. For users on our newsletter list, we also include a one-line note in the next monthly send describing the change.
Under the DPDP Act, you can withdraw consent or ask us to stop processing. If you exercise that right, the sub-processors above stop receiving your data within the response window.
Last reviewed: . Next scheduled review: on each sub-processor change, and at minimum every 12 months.