Privacy Policy

Last updated: 2026. This is a general privacy policy describing how NextGrow ("we", "us") handles information across our website, web application and farmer app. It is written to be honest and reasonable, and is informed by Kenyan data-protection principles and the general expectations of frameworks such as the GDPR. Specific terms may be set out in your service agreement.

Data we collect

• Account data — names, email addresses, phone numbers and roles used to create and secure user accounts.
• Business data — your organisation's details, inventory, lots, purchase orders, sales and receipts entered into the platform.
• Farmer records — plots, soil logs, crop-issue reports and input requests captured in NextGrow Shamba.
• Uploads — documents, lab reports, certificates and photos you attach to records.
• Technical data — limited device, log and usage information needed to operate, secure and troubleshoot the service.

How we use data

• To provide and operate the platform — verification, POS, the farmer app, inventory, documents and compliance features.
• To secure accounts, prevent abuse, and maintain an append-only audit trail of actions.
• To support you, respond to requests, and improve reliability and performance.
• To meet legal, regulatory and compliance obligations where they apply.

We do not sell your personal data.

Security

NextGrow is built security-first. Protections include encryption of data in transit, multi-tenant organisation isolation so tenants' data is kept separate, role-based access controls, rate-limiting and hardened defaults, and audit logging of actions. Field-level encryption of sensitive personal information is available. No system can promise perfect security, but we design to keep your data protected and access controlled.

Data location and retention

Data is stored on managed cloud infrastructure and retained for as long as your account is active or as needed to provide the service and meet legal obligations. When data is no longer required, it is deleted or de-identified in line with our operational and legal duties.

Your rights

Subject to applicable law, you may request access to the personal data we hold about you, ask us to correct inaccurate data, request deletion, or object to certain processing. Because much of the data in the platform belongs to the organisation that operates the account, some requests may be directed to that organisation as the data controller.

Sharing

We share data only with service providers who help us operate the platform (such as hosting and messaging infrastructure), where required by law, or with your organisation's authorised users under its access controls. Providers are expected to protect data consistent with this policy.

Changes

We may update this policy from time to time. Material changes will be reflected on this page with a revised date.

Contact

For any privacy question or request, contact us at admin@nextgrows.com or reach our head office in Nakuru City, Kenya.