SwathMap Privacy Policy
Effective Date: October 15, 2026
1. Who we are and what this covers
Agri Flight Logs LLC ("AFL", "we") provides SwathMap: swathmap.com, swathmap.web.app, app.swathmap.com, the SwathMap API, any SwathMap app, and the processing and storage behind them, under the SwathMap brand or a dealer's or partner's brand ("powered by SwathMap").
This policy explains how we handle personal information about:
- our customers' staff and users;
- people who visit our sites or contact us;
- people who open a map someone has shared with them;
- people whose information shows up in the drone data our customers upload.
Privacy contact: support@agriflightlogs.com (put "Privacy" in the subject line).
This policy doesn't cover:
- Other apps: the Agri Flight Logs and ApplicatorView apps (see agriflightlogs.com/privacy), and Partner Apps run by other companies under their own policies.
- Sites run by other businesses: sites on swathmap.com addresses that another business operates and identifies as its own, under that business's own notice.
2. The short version
- Your data is yours. We process the drone data you upload to make your maps.
- We never sell it. We don't use it for advertising, or to contact your growers.
- No other company gets your data for its own use. We don't share it with any other company, our affiliates included, for that company's own purposes. Your maps are never used for its business.
- Model training, once the setting is in your account. We may then train SwathMap's own mapping models on new uploads, with identifying details removed, unless you turn it off. Older uploads are used only if you opt in. Training copies are kept apart from your account for up to 2 years after your data is deleted, and deleted within 30 days if you turn training off.
- Photos are deleted 72 hours after your map is done. Maps are kept while you subscribe, and for 30 days after your subscription ends.
- No tracking across the web. No advertising trackers, no third-party analytics, no session recording.
- Stored in the United States. Map tiles are delivered through Cloudflare's global network.
- Export or delete. You can export your maps and drawings, or delete maps, at any time while your account is open.
3. What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Account and contact | Name, business name, email, phone, role, aircraft you fly, sign-in details (passwords are held only in hashed form, by our sign-in provider), settings | You and your account administrator |
| Billing | Plan, invoices, billing contact, tax ID if you give one. Card details go straight to Stripe; we don't receive full card numbers | You, Stripe |
| Drone data you upload | Photos and their embedded metadata: aircraft position and altitude, time, camera settings, and camera and drone serial numbers; positioning files such as RTK or PPK files | You |
| What you create | Maps, boundaries, obstacles, no-spray areas, notes, the names you give maps and fields, exports, outline-tool sessions | You, and the Service |
| Information about growers and others, inside your data | Land, buildings, vehicles and occasionally people visible in photos; growers' names you use for maps and fields | You (see section 7) |
| People who open a shared map | IP address, browser, and anything they add if the share allows it (for example a suggested boundary) | Them, automatically |
| Technical and usage | IP address, browser and device, request and error logs, processing statistics, and feature-usage counts our servers may record | Automatically |
| Communications | Support emails, feedback, the swathmap.com contact form | You |
4. How we use it
| Purpose | What it involves |
|---|---|
| Providing the Service | Processing uploads into maps; storing and serving them; delivering exports; sending them to apps you connect; showing shared maps to the people you share with |
| Support and quality | Fixing problems you report or our checks find. Staff open a customer's maps only to support that customer, keep the Service secure, meet a legal obligation or, where the customer hasn't turned training off, prepare training data (Terms 5.3) |
| Security | Preventing abuse and fraud; rate limiting; investigating incidents |
| Account and billing | Service emails, including notices about your data such as before deletion |
| Improving the Service | Performance data and feature-usage counts; once the setting is available, training SwathMap's models on customer data with identifying details removed, unless you turn that off; de-identified statistics (Terms 5.3 and 5.4) |
| Legal | Complying with the law; enforcing our terms |
| Marketing email | Only where the law allows, and you can always opt out |
5. Cookies, local storage and analytics
What our sites store on your device. We use cookies and browser storage that are necessary to run the Service: keeping you signed in, remembering your settings, and holding app data and caches.
Maps and payments. When maps or payment pages load, Google (for maps) and Stripe (for payments) receive information such as your IP address and browser details, and may set their own cookies, under their own privacy policies. Stripe uses this partly to prevent fraud.
Analytics. We may measure how the Service is used with our own server-side records, such as which features are used and how often. We don't use advertising cookies, third-party analytics, heatmaps or session-recording tools, and we don't record keystrokes, form contents or screens. If we ever add a third-party analytics tool, we'll update this policy first and, where the law requires, ask for your consent before it loads.
Do Not Track. We don't track you across other websites, and we don't let third parties collect information about your activity over time and across websites through our sites, except that Google and Stripe receive information when their features load, as described above. Because we don't track users across websites, we don't change what we do in response to a browser's Do Not Track signal.
6. What we never do
- Sell or rent personal information or Customer Data, or training sets made from it.
- Show you targeted advertising, or put advertising trackers on our sites.
- Identify people in imagery, including by facial recognition.
- Share your data with any other company, our affiliates included, for that company's own purposes.
- Use your data to contact or market to your growers.
7. Data we hold for our customers
For drone data, maps and anything they reveal about growers, we act on behalf of the customer who uploaded them, usually a spray or mapping operator. We use that data only as our terms with that customer allow (see the DPA).
If you're a grower or landowner and want to see or delete data about your land, contact the operator who flew it. If you contact us, we'll pass your request to the operator and tell you we've done so.
8. Who we share with
| Recipient | Why |
|---|---|
| Service providers ("subprocessors"), listed in the DPA | Hosting, storage, processing, sign-in, payments, email and AI-assisted support, under contracts that limit their use to serving us |
| Apps and people you choose | Partner Apps you use SwathMap through, drones and apps you export to, and anyone you share a map with, for example through a grower link |
| Affiliates and other companies | None, for their own purposes |
| Authorities | When the law requires it, or to protect rights and safety. We tell the customer unless the law forbids it |
| A buyer | If the business is sold, under Terms section 20 |
| Anyone else | Only with your consent |
9. How long we keep it
| Data | How long |
|---|---|
| Photos you upload | 72 hours after the map is done. For maps that fail, are held or are cancelled: kept so the map can be retried, and may be deleted 30 days after the last attempt |
| Maps, drawings and exports | While you subscribe, or until you delete them. Deleted 30 days after your subscription ends |
| Training copies (identifying details removed) | Up to 2 years after the data they came from is deleted; deleted within 30 days if you turn training off (Terms 5.3) |
| Outline-tool sessions | Until the map is deleted; at most 2 years |
| Record that a map existed (ID, account ID, the map's name, dates, sizes, status) | Up to 7 years, for tax and audit |
| Account and contact information | Kept while your account is open, and deleted within 30 days after you ask us to close it. Billing records are kept as tax law requires |
| Temporary support copies | Deleted when the support case closes |
| Server and access logs | Up to 1 year, for security and abuse prevention |
| Feature-usage counts | Up to 2 years, then only in aggregated form |
| Database backups | Up to 7 days. Providers' own backups follow their policies |
| Support emails | As long as needed to resolve and record the issue |
10. Security
| Area | What we do |
|---|---|
| Encryption | In transit on every public connection. Stored files are encrypted at rest (AES-256) by our storage provider |
| Processing | Runs in isolated containers with no network access |
| Access | Limited to staff who need it, through individual keys |
| Backups | Database backups are encrypted to a key kept off our servers |
If a security incident affects you, we'll tell you as the law and our contracts require. For business customers that means within 72 hours of confirming it, or sooner where the law requires (DPA section 9).
11. Your choices and rights
Your rights. Wherever you live, you can ask to see, export, correct or delete personal information we hold about you. Email our privacy contact.
- We'll answer within 30 days.
- We won't treat you differently for asking.
- Account holders can export their maps at any time, turn model training off in their account settings once that setting is available (which also deletes its training copies within 30 days), and opt out of marketing email through the link in it.
State laws. If a state privacy law applies to us, we will honor the rights it gives you, including any appeal it provides.
Canada.
- Your information is stored and processed in the United States by us and our service providers, and may be accessible to courts, law enforcement and national security authorities of the United States under United States law.
- Questions about our practices, including our service providers', go to our privacy contact.
- You can also complain to the Office of the Privacy Commissioner of Canada.
12. Where data is stored
Storage and processing: in the United States.
Delivery: map tiles may reach you through Cloudflare's global network, which can cache them temporarily outside the United States.
13. Children
SwathMap is a business service. It is not meant for anyone under 18, and we don't knowingly collect children's information.
14. Changes to this policy
We'll post changes here, and email account holders at least 30 days before a material change takes effect.
We will not start using personal information you've already given us in a materially broader way without your consent.
15. Contact
Privacy contact: support@agriflightlogs.com (put "Privacy" in the subject line).
Last Updated: October 15, 2026