Last updated: September 4, 2026
This document applies jointly to three reference frameworks: (A) the Privacy Notice under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), (B) the disclosures typically required by U.S. state privacy laws (such as California's CCPA/CPRA and equivalent laws in other states), and (C) a set of "international" baseline rights inspired by the most demanding globally recognized standards (equivalent to the European GDPR), which Yolia grants to any user, regardless of country, as a minimum floor of protection. Where a local law grants you more rights than described here, that law prevails.
1. Data controller
Omar Eduardo Escobio Arenas (individual, operating under the trade name “Yolia”), whose notification address is provided in writing upon request at contacto@yolia.farm, is responsible for processing your personal data under this Notice. You can contact us for any privacy matter at contacto@yolia.farm.
2. What data we collect
2.1. Account data: name, email address, password (stored encrypted, never in plain text), role (farmer, cooperative, government), and contact details you provide when registering.
2.2. Cultivation and case-file data: species or specialty, crop stage, plant count, approximate location or GPS coordinates you voluntarily provide, environmental conditions, fertilization history, and answers to the diagnostic questionnaire.
2.3. Photographs: if you upload photos of witness plants or other image documents, we store them together with an integrity identifier (hash fingerprint) to verify the file wasn't altered — this identifier is not an encryption mechanism, it is only an integrity check.
2.4. Payment data: Yolia uses Stripe as its payment processor. We do not store your full card number; Stripe processes it directly under its own security policies (PCI-DSS level). We retain only your subscription status, the transaction identifier, and the billed amount.
2.5. Usage data: interactions with the site, features used, simulator results (when you choose to save them), and basic technical data (IP address, browser type), used mainly for security (see the Cookie Policy).
2.6. Anonymous visit statistics and feedback: to know how many people visit Yolia, from which country and from which source (for example a social network), we run our own counter. It uses no cookies and does not store your IP address: the country is worked out on our own server and only a short daily fingerprint is kept, which changes every day and cannot be used to follow you from one day to the next. Visits from robots and from our administrators are not counted. If you send us feedback through the feedback page, we store what you write and, only if you choose to give them, your name and email; we do not publish it and we do not share it. Country detection uses the free DB-IP.com IP-to-Country Lite database (IP Geolocation by DB-IP, license CC BY 4.0).
2.6. Organization documents: if your account belongs to a cooperative or government institution, we may store compliance documents you upload, in accordance with the Privacy, Isolation, and Governance of Dashboards Policy.
3. What we use your data for
- Generating and calibrating your case file's nutritional formulas;
- Applying the safety locks described in the Formula Generation Policy and the Specialized Laboratories Policy;
- Processing your subscription and billing through Stripe;
- Sending you operational notifications about your account, your case file, or your growing cycle;
- Preventing fraud, Service abuse, and unauthorized access attempts;
- Complying with legal obligations or requirements from a competent authority;
- Improving the Service through aggregated, anonymized analysis of usage patterns — we do not sell your personal data to third parties for advertising purposes.
4. Legal basis (for users covered by GDPR-type standards)
We process your data based on: (a) performance of the service contract you accept when registering, (b) your explicit consent when we request it separately, (c) our legitimate interest in security and fraud prevention, and (d) compliance with applicable legal obligations.
5. Who we share your data with
We do not sell your personal data. We share it only with: Stripe (payment processing); hosting and infrastructure providers; email/notification providers; your cooperative's or government institution's authorized supervisors (only within the read-only, aggregation scope described in the Dashboards Privacy Policy); and competent authorities, when a valid legal obligation exists.
6. Isolation between accounts — how we technically protect your data
Every case file, formula, and document in Yolia is associated with the account or organization that generated it, and the system filters every database request by that owner identifier: no account can read, list, or modify case files that don't belong to it, and this is enforced in the system's own code, not only in the visible interface. Like any system, Yolia cannot guarantee absolute security against every conceivable attack, but we maintain application-level access controls, encrypted passwords, and monitoring of anomalous traffic patterns as part of a reasonable, active data-protection program.
7. Data retention
We retain your data while your account is active and for the additional period necessary to comply with legal, tax, or accounting obligations, or to resolve disputes.
8. Your rights
Regardless of your country of residence, you can exercise the following rights by writing to contacto@yolia.farm: access, rectification, cancellation/deletion, objection, portability, limitation of processing, and revoking consent at any time. We will respond within the timeframe applicable law requires (and, absent that, within thirty (30) calendar days).
8.1. For California and other U.S. state residents: you additionally have the right to know what categories of data we collect, to request their deletion, to not be discriminated against for exercising your rights, and to designate an authorized agent. We do not sell or share personal data for targeted-advertising purposes.
9. Minors
The Service is not directed at minors under the law of their country of residence. If you become aware that a minor provided us data without their guardian's verifiable consent, contact us to delete it.
10. International data transfers
If you operate from a country other than the one where our infrastructure or providers are located, your data may be transferred to and processed outside your country of residence, under reasonable contractual measures equivalent to the standard of this Notice.
11. Cookies and local storage
See the Cookie Policy for the full detail.
12. Changes to this Notice
We may update this Notice periodically, notifying substantial changes with reasonable advance notice.
13. Contact and complaints
To exercise your rights, write to contacto@yolia.farm. If you believe we did not address your request, you have the right to file a complaint with the competent data-protection authority in your country.