Privacy Policy

This policy applies to anyone who uses a SPARROW app or the SPARROW web platform, in any of three roles:

• Farmers, who book spraying services and manage their farms in the Farmer app.
• Aggregators, who book services and manage farmer accounts on farmers' behalf in the Aggregator app.
• Operators, licensed drone pilots who accept and carry out spraying tasks in the Operator app.

Administrators who manage the platform through the SPARROW web console are covered by this same policy for the account data described below.

We only collect what a given role needs the app to work:

• Identity & contact — name, mobile number, email (optional), WhatsApp number, gender, date of birth, profile photo.
• Account credentials — your password, stored as a one-way BCrypt hash. We never see or store your actual password.
• Address — street address, village, tehsil, district, state, and pincode.
• Government ID (Farmer, Aggregator) — Aadhaar and/or PAN, collected for identity verification where required. Stored encrypted and masked everywhere except to you and platform administrators.
• Pilot licensing (Operator) — DGCA drone pilot license number, expiry date, a copy of the license document, and training institute, to verify you're licensed to fly.
• Farm location (Farmer, Aggregator) — farm name and GPS coordinates, captured once when you add or edit a farm on the map. We do not track your device's location in the background or while the app is closed.
• Task photos (Operator) — before/after-spray and incident photos taken through the app during a task, used as service evidence.
• Payment & wallet — bank account number, account holder name, and UPI ID for receiving payouts, plus booking, order, and wallet transaction history. Card and UPI details you enter to pay are handled directly by our payment processor — we never see or store full card numbers.
• Referrals — your referral code and the referral relationships it creates.
• Device & push token — an FCM device token so we can deliver push notifications, plus your device platform. Disable this any time in your device's notification settings.
• Login & diagnostic data — login timestamps, IP address, user agent, and success/failure status, kept for account security.

• Operating your account: registration, login, and keeping your profile and role permissions correct.
• Delivering the core service: matching bookings to operators, scheduling and routing spray tasks, and recording completion evidence.
• Payments and payouts: processing booking payments, running the wallet/rewards ledger, and paying operators and aggregators.
• Communicating with you: SMS and push notifications about bookings, assignments, order status, payments, and wallet activity; OTPs for login and password reset.
• Verification and trust: confirming Aadhaar/PAN or drone pilot licensing where the platform requires it before you can transact.
• Security: detecting fraud, abuse, and unauthorized access, and maintaining an audit trail of sensitive account actions.
• Improving the platform: understanding usage patterns in aggregate. We do not sell this data or use it to build advertising profiles.

We share the minimum necessary data with service providers who help us run SPARROW. We do not sell your personal information, and we don't share it with anyone for their own marketing purposes.

• Razorpay / Cashfree — processes booking payments and operator/aggregator payouts.
• MSG91 / Twilio — delivers OTPs and SMS notifications to your mobile number.
• Firebase Cloud Messaging (Google) — delivers push notifications using your device's FCM token.
• Google Maps — renders the map used to pin your farm's location and plan operator routes.
• Amazon Web Services (S3, ECS, RDS) — stores task photos and license documents (via short-lived, signed URLs) and hosts the SPARROW backend and database.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, or property of SPARROW, our users, or the public.

• Location (Farmer, Aggregator) — used once, when you tap "use current location" while adding or editing a farm. Not used in the background.
• Camera & photo library (Operator, and Farmer/Aggregator for profile photos) — used to capture or select task evidence photos and profile pictures.
• Notifications (all apps) — used to show booking, assignment, and payment push notifications. You'll be asked to allow this the first time it's needed, and can change it any time in your device settings.

• Account, farm, booking, order, and payment records are kept for as long as your account is active, and afterward as needed to meet our legal, tax, and accounting obligations.
• Login history is retained for 90 days.
• Session refresh tokens are purged 7 days after expiry or revocation.
• Task and license photos are retained for as long as the related order/profile record exists, for service-quality and dispute-resolution purposes.

If you delete your account, we deactivate it and remove or anonymize personal data beyond what we're required to retain for legal or financial record-keeping.

• All traffic between the apps and our servers is encrypted in transit (HTTPS).
• Passwords are hashed with BCrypt and never stored or transmitted in plain text.
• Government ID numbers and bank/UPI details are masked in the app and API, and only fully visible to you and authorized administrators.
• Access to administrative functions is role- and permission-gated, and sensitive actions are recorded in an audit log.
• Mobile numbers are masked in our internal logs.

• Access & correction — most of your profile, farm, and address details can be edited directly in the app. For anything you can't change yourself, contact us.
• Deletion — you can request deletion of your account and associated personal data, subject to what we're legally required to retain (e.g. completed payment records).
• Notifications — disable push notifications any time from your device settings; email us to opt out of non-essential SMS.
• Marketing — we don't currently send marketing communications; the notifications you receive are operational (bookings, payments, account activity).

To exercise any of these, email wiseagrotech@gmail.com from your registered mobile number or email so we can verify it's really you.

SPARROW is a commercial agricultural services platform that requires identity verification and handles payments. It is not directed at, and we do not knowingly collect information from, anyone under 18. If you believe a minor has provided us information, contact us and we'll remove it.

We'll update the effective date at the top of this page whenever we make changes, and where a change is material, we'll notify you in-app before it takes effect.

Questions about this policy or your data:

Wise AgroTech — SPARROW Platform
Email: wiseagrotech@gmail.com
Phone: +91 94036 12478
Address: 3rd Floor, Roongta annex, makhmalabad road, Panchvati, Nashik 422003