Privacy Policy

Who this covers

This policy applies to PoultryDesk, the poultry operations platform, and to the people who use it: Organization owners, members, and the visitors to our public pages. Where your Organization is the data controller for its farm records, PoultryDesk acts as the processor under your instructions.

What we collect

• Account details: name, email, role, and the Organization and subdomain you belong to.
• Operational records you capture: Lots, rounds, mortality, feed, eggs, health treatments, inventory, sales, and expenses.
• Technical data needed to run the service: device and session identifiers, sync state, and security and audit logs.
• Billing data for paid plans, handled by our payment provider - we do not store full card numbers.

How we use it

We use your data to run the service you signed up for: to store and sync your records, enforce access control and plan entitlements, produce your reports, keep an audit trail for traceability, and contact you about your account. We do not sell personal data.

Optional public-site analytics

When enabled, Google Analytics 4 helps us understand visits to our public marketing pages, documentation, blog, and sign-up page on poultrydesk.com and www.poultrydesk.com. It is off until you choose Allow analytics. Rejecting it does not affect access to the site or your account. No analytics request is sent to Google before you allow it.

Analytics receives a public page category, basic browser and device information, and a random identifier that lasts only while the analytics frame remains open. Google receives your IP address when your browser connects to its service and may process information outside your country. We do not send form entries, names, email addresses, Organization identifiers, query strings, URL fragments, or referring URLs. Documentation and blog article addresses are grouped into categories rather than sent individually. Analytics is not loaded on sign-in, activation, account handoff, tenant, custom-domain, staging, or admin pages.

The analytics script runs in an isolated frame that cannot read the page or its forms, or access site cookies and browser storage. Advertising consent and Google signals are disabled. We save only your allow or reject choice in local browser storage for the current public hostname, until you change it or clear that storage. Essential account and security cookies are separate from this choice.

Use Analytics settings below the public navigation to change your choice at any time, including on this privacy page. Choose Reject analytics to stop future collection; this does not delete data already received by Google. If analytics is disabled for the site, these controls are not shown. Contact us about previously collected information or read Google's privacy policy.

Tenant isolation

Each Organization’s operational data lives in its own database schema. There is no shared table through which one Organization can read another’s records. Access within an Organization is governed by roles and permissions that you control.

Data retention

We keep operational records for as long as your Organization is active so your traceability and audit history stay intact. If a subscription lapses, data enters a defined grace and retention window before removal, in line with our subscription lifecycle. Some records, such as audit and food-safety trails, may be retained longer where regulation requires it.

Your rights

Under the GDPR and the Kenya Data Protection Act, you can request access to your personal data, correction of inaccurate data, deletion where the law allows, a portable export, and restriction or objection to certain processing. To exercise any of these, contact us using the details below and we will respond within the statutory timeframe.

Security

We protect data in transit and at rest, enforce role-based access and two-factor authentication for sensitive actions, and keep an append-only audit log of who did what and when. No system is perfectly secure, but security is a first-class constraint, not an add-on.

Contact

For any privacy question or to exercise a data right, reach us through the contact page and choose the data and privacy route.