Privacy Policy

Effective Date: March 10, 2026 | Last Updated: March 10, 2026

Welcome to Greenhouse.am (“we,” “our,” or “us”). This Privacy Policy explains how Greenhouse.am collects, uses, stores, shares, and protects your personal information when you use our website (greenhouse.am), mobile applications, IoT devices, AI greenhouse agent, marketplace, and all related services (collectively, the “Service”).

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

This policy is drafted in compliance with the Law of the Republic of Armenia on Protection of Personal Data (Law No. ZR-49, adopted May 18, 2015, as amended), the General Data Protection Regulation (GDPR) for users in the European Economic Area, and other applicable data protection laws.

1. Information We Collect

1.1 Information You Provide Directly

Account registration data: full name, email address, phone number, password, preferred language (Armenian, Russian, or English), and organization/farm name
Greenhouse profile information: location, greenhouse size, crop types, number of zones, and greenhouse structural details
Marketplace data: billing address, payment information, shipping details, order history, and product reviews
Communications: messages you send through support channels, AI greenhouse agent chatbot conversations, and any feedback or survey responses
Verification data: government-issued identification for marketplace sellers or constructor service providers

1.2 Information Collected Automatically

When you use the Service, we automatically collect the following types of data:

1.2.1 IoT Sensor Data

Our IoT devices and sensor networks collect environmental data from your greenhouse(s) in real time, including but not limited to:

Temperature readings (air, soil, and surface) from multiple greenhouse zones
Humidity levels (air and soil moisture percentages)
CO₂ concentration levels
Light intensity and photoperiod data
Water flow rates, irrigation volumes, and substance application records
Equipment operational states (fans, heaters, irrigation valves, ventilation systems)

This sensor data is transmitted from your IoT devices via MQTT protocol to our servers. Raw sensor data is collected at intervals as short as every few seconds, depending on your device configuration.

1.2.2 Device and Technical Data

Device identifiers, firmware versions, and hardware model of IoT gateways (e.g., ESP32 controllers)
IP address, browser type, operating system, and screen resolution when accessing the web or mobile application
Session data, access times, pages visited, and features used within the application

1.2.3 Usage Analytics and Resource Reports

We process and aggregate your sensor data to generate resource usage reports, including:

Monthly and annual water consumption volumes
Chemical and substance treatment history
Energy consumption associated with greenhouse operations
Crop cycle performance metrics and yield estimations

1.3 Information from Third Parties

Payment processors (transaction confirmations, partial card details for display)
Social login providers if you choose to sign up using a third-party account
Public weather and agricultural data services used to enrich your dashboard

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Improving the Service

Displaying real-time sensor dashboards with live temperature, humidity, CO₂, and other environmental metrics
Executing automation rules based on conditions you define (e.g., start irrigation when soil moisture drops below a threshold)
Enabling remote control of greenhouse equipment (irrigation, ventilation, heating) from your phone
Generating end-of-month and end-of-year resource usage reports (water, substances, treatments)
Powering the AI Greenhouse Agent chatbot to provide personalised recommendations based on your data
Processing marketplace orders, deliveries, and payments

2.2 Communication

Sending alerts and notifications (e.g., temperature out of range, equipment failures, automation triggers) via the app, email, Telegram, or Viber
Responding to your support inquiries
Sending product updates, new feature announcements, and service communications

2.3 Analytics and Optimisation

Analysing aggregated sensor data to improve AI recommendations and predictive models
Conducting platform performance and reliability analyses
Generating anonymised benchmarking insights for the agricultural community (only with your opt-in consent)

2.4 Legal and Safety

Complying with applicable laws and regulations, including Armenian data protection law
Preventing fraud, abuse, or unauthorised access to the Service
Enforcing our Terms of Service

3. How We Store and Protect Your Data

3.1 Data Storage Architecture

We employ a dual-database architecture designed for both security and performance:

Transactional data (user accounts, organisations, greenhouse configurations, automation rules, marketplace orders, and device registrations) is stored in a relational database (PostgreSQL) with full ACID compliance, foreign key integrity, and encryption at rest.
Sensor and analytics data (time-series readings from all IoT devices) is stored in a columnar analytics database (ClickHouse) optimised for high-volume ingestion and fast dashboard queries. Sensor data is partitioned by month with automatic data lifecycle management.

3.2 Data Retention

We retain your data according to the following schedule:

Data Type	Retention Period	Notes
Raw sensor readings	90 days	Automatically purged via TTL
Hourly aggregated data	1 year	Pre-computed summaries
Daily aggregated data	Indefinite	Long-term trends and reports
Account information	Duration of account + 1 year	Deleted upon verified request
Marketplace transactions	5 years	Legal/tax compliance
AI chatbot conversations	12 months	Anonymised after retention

3.3 Security Measures

All data in transit is encrypted using TLS/SSL (HTTPS) including sensor data transmitted via MQTT
Data at rest is encrypted in both PostgreSQL and ClickHouse databases
Application-level security includes role-based access control (RBAC) per user and organisation
Infrastructure is hosted on AWS (Frankfurt, eu-central-1 region) behind an Application Load Balancer with security groups restricting access
Database backups are stored in encrypted S3 buckets with restricted IAM policies
Internal platform monitoring (Prometheus and Grafana) is accessible only to the operations team via VPN and is never exposed to users
Regular security audits and penetration testing

3.4 On-Premise Deployment Option

For users who choose our on-premise deployment, all data remains on your local hardware (e.g., Raspberry Pi or mini PC) within your greenhouse. In this mode, data never leaves your local network unless you explicitly enable cloud synchronisation. This option provides maximum data sovereignty and is ideal for users with strict privacy requirements.

4. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

4.1 Service Providers

Cloud infrastructure providers (AWS) for hosting and storage
Payment processors for marketplace transactions
Communication service providers for alerts (email, Telegram, Viber integrations)

All service providers are contractually obligated to process data only on our behalf and in accordance with this Privacy Policy.

4.2 Marketplace Participants

When you place an order or list products/services on the marketplace, certain information (name, delivery address, contact details) is shared with the relevant buyer or seller to facilitate the transaction.

4.3 Anonymised and Aggregated Data

With your explicit opt-in consent, we may include your anonymised greenhouse data in aggregated datasets used to improve AI models and generate industry benchmarks. This data cannot be traced back to you or your greenhouse. You may withdraw this consent at any time.

4.4 Legal Requirements

We may disclose your information if required by Armenian law, court order, or governmental request, or to protect the rights, safety, or property of Greenhouse.am, our users, or the public.

4.5 International Data Transfers

Your data is primarily stored in the EU (Frankfurt, Germany). If data is transferred to any country outside Armenia or the EU, we ensure adequate protection through contractual safeguards in compliance with Armenian data protection law and, where applicable, GDPR standard contractual clauses.

5. Your Rights

Under the Armenian Law on Protection of Personal Data and applicable international regulations, you have the following rights:

Right to Access: Request a copy of all personal data we hold about you, including sensor data, account information, and processing records.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
Right to Block Processing: Request that we block or suspend processing of your data while a dispute is being resolved.
Right to Data Portability: Receive your data in a structured, machine-readable format (JSON or CSV export available from your dashboard).
Right to Withdraw Consent: Withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint: File a complaint with the Personal Data Protection Agency (PDPA) under the Ministry of Justice of the Republic of Armenia.

To exercise any of these rights, contact us at privacy@greenhouse.am. We will respond within 5 working days, as required by Armenian law.

6. Cookies and Tracking Technologies

Greenhouse.am uses cookies and similar technologies to:

Maintain your login session and language preferences
Remember your dashboard layout and preferred greenhouse view
Analyse platform usage patterns to improve the Service

We do not use advertising or third-party tracking cookies. You may disable cookies through your browser settings, though this may affect certain features of the Service.

7. Children’s Privacy

Greenhouse.am is designed for agricultural professionals and businesses. Our Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take immediate steps to delete that information.

8. AI Greenhouse Agent and Automated Decisions

Our AI Greenhouse Agent chatbot analyses your sensor history, resource usage, and crop patterns to provide personalised recommendations. Important information about AI processing:

The AI uses your greenhouse data to suggest optimisations such as adjusting irrigation schedules, recommending treatments, and reducing resource waste
Automation rules you create may trigger actions (e.g., starting irrigation) without your real-time approval, based on conditions you define
You maintain full control and can disable any automation rule or AI recommendation at any time
AI-generated insights are advisory in nature and do not replace professional agricultural judgement

No fully automated decisions with legal or similarly significant effects are made without your explicit approval.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website, sending an in-app notification, and updating the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Company: Greenhouse.am

Email: privacy@greenhouse.am

Website: https://greenhouse.am

Address: Yerevan, Republic of Armenia

Supervisory Authority: Personal Data Protection Agency, Ministry of Justice of the Republic of Armenia