Legacy Farmer Privacy Policy

1. What This Policy Covers

What this means: This policy covers information handling for our websites, coaching, and software; optional permissions and separate providers remain distinct.

Legacy Farmer, Inc., a Delaware corporation ("we" or "us"), uses and protects information as described here. This policy covers our websites, mobile and desktop applications, coaching and consulting, and Farmer Metrics, whether purchased with coaching or as standalone software. It also covers related email, text, service communications, and interactions with advertising or applications linking to this policy.

We serve the United States and Canada where lawfully available, including all ten Canadian provinces. Mandatory state and provincial privacy rights remain available. Insure the Farm, Grain Strategy, and other separately contracted providers have their own notices. Independent sites and services control their own practices; review their notices. Our responsibility for information handled for our Services, including by contracted providers, remains covered here.

This policy explains our practices. Reading or acknowledging it, buying Services, or accepting Terms does not replace separate permission required for Rowe, referrals and introductions, marketing, affiliate referrals, testimonials, or other optional processing. Sections 3 and 4 protect private farm and Rowe information and control over conflicting general advertising, public-content, aggregate-sharing, storage, or deletion language. Anonymized benchmarking and partnership outreach happen only under the permissions Sections 3 and 5 describe.

2. Information We Collect and Why

What this means: We collect information you provide, including business contacts you add, and information about service use, for the purposes listed below.

Information you provide includes contact and account details, such as name, mailing address, email, phone, and other identifiers, including Social Security numbers where provided; enrollment and Order information; transactions and financial information; farm records; support requests and correspondence; community contributions; service requests, searches, and operational activity. Rowe information includes instructions, prompts, uploaded files, authorized records, responses, reports, feedback, chosen recipients, and action and delivery history. We also record permissions and accepted policy versions. Avoid providing unnecessary sensitive identifiers or access credentials.

Business contacts you provide. If you use the Farmer Metrics contacts feature, we receive business contact details from you, not necessarily from the contacts themselves: name, organization, role, business email, business phone, and the business relationship you identify, such as lender, crop insurance agent, accountant, grain marketer, or supplier. Provide only information you are authorized to provide. Your private notes about a contact and your financial records are not contact details and are never used for partnership prospecting. Storing a contact, asking us to communicate with an adviser for you, and our own partnership outreach are three separate purposes with separate permissions; Terms Sections 2.9 and 7.5 describe them, and Section 5 below explains the processing.

Automatically collected information may include IP address, device and browser details, operating system, location information, traffic and usage data, logs, and resources accessed. Cookies, pixels, and similar tools may collect this information. We may link it with personal information supplied by you or received from third parties to recognize returning users, remember preferences, understand audience and usage patterns, personalize the website, and improve searches and service delivery.

We use information to deliver requested products, coaching, software, content, and interactive features; fulfill Orders and purposes disclosed when information is provided; administer accounts, renewals, and payments; provide support; diagnose problems; protect security; enforce agreements and lawful collection rights; communicate service changes; comply with law; carry out other disclosed uses with required consent; with the permissions described in Section 3, produce anonymized, aggregated benchmarks; and, only with your separate permission under Terms Section 7.5, contact selected business contacts you provide about Legacy Farmer partnerships or marketplace participation. Sections 3 and 4 limit processing of private farm records and AI information.

Public and shared posts. You may choose to publish content or share it with a selected audience. We cannot guarantee that others will not copy, retain, or obtain it, including through cached or archived pages. No security system is perfect. These risks concern content you intentionally share; entering private farm records, messages, or Rowe content does not make them public.

3. Rowe and Private Farm Information

What this means: Rowe processes authorized information through company-selected providers that can change with required notice; anonymized benchmarks never expose identifiable records; we do not sell private farm records or use customer content for general-purpose AI training.

Rowe is our AI assistant within Farmer Metrics. It currently uses Anthropic's Claude through a company-managed commercial service. Rowe is our product name; the underlying third-party model does not operate solely inside Legacy Farmer's systems.

When you use Rowe, we process your requests, files, relevant records you authorize it to access, responses, reports, feedback, and related technical information. Authorized records may include existing workspace data. Enabling Rowe does not expand your account permissions or authorize unrelated processing. Do not put passwords, API keys, or unnecessary sensitive information in chat.

We use this information to explain and analyze records, calculate scenarios, prepare reports, maintain conversation context, and carry out authorized edits and sends. We also use it for support, security, error investigation, enforcing restrictions, and legal obligations. Anthropic and contracted hosting, storage, communications, and other providers support those purposes under applicable confidentiality, security, and use restrictions. Information may be processed in the United States and other countries where authorized providers operate and may be subject to lawful access there. Ask legal@legacyfarmer.com about processing arrangements.

Our commitments. We do not sell private farm records, use private AI content for advertising, or use or authorize our contracted AI providers to use customer content to train general-purpose AI models. Feedback does not itself authorize training. Private records, uploads, messages, prompts, outputs, and reports do not become public submissions or marketing materials through use or support requests. Affiliate referrals, testimonials, and publicity require separate permission. These protections also cover private farm information outside Rowe.

Aggregated benchmarks. With the permissions described in Terms Section 2.10, we process eligible structured financial and operational records - such as interest rates, debt measures, costs, revenues, and operating ratios - to produce benchmarks grouped by geography, operation type, or size. Benchmarking does not draw on Rowe conversations, coaching recordings, support messages, or contact notes. Benchmark features inside Farmer Metrics are part of the software; contributing identifiable source records to benchmarks for public reports, education, marketing, or other external distribution requires your separate affirmative permission before those records are processed for that purpose. Underlying identifiable records stay confidential and subject to this policy's access restrictions, security, retention, and your rights. Before anything is published or shared externally, results undergo anonymization and disclosure-risk review: groups are sized appropriately, small or unusual groups and dominant contributors are suppressed or generalized, and we guard against identification through combined queries. No numerical group size by itself guarantees anonymity, and removing identifiers alone does not meet applicable anonymization standards, including Quebec's; we apply the standard the applicable law requires. Genuinely anonymized aggregate results already created may remain in use where lawful after you stop contributing, and an individual contribution cannot be deleted from an aggregate that can no longer be linked to you; your identifiable source data remains subject to the retention and deletion duties in Section 7. These provisions do not authorize targeting, lead scoring, or disclosure of individual farm profiles. Properly authorized, genuinely anonymized benchmarks are not advertising with private farm records or AI content; exposing identifiable source records is.

Access and human review. Access is limited to authorized users and personnel or providers who need information for the purposes above. Human review may be necessary for support, security, error investigation, or enforcement. Declined requests may still be logged or reviewed for those purposes; we do not promise processing without human access.

Edits and sends. For an authorized action, we process instructions, affected records, selected reports, recipient details, and approval and delivery information. At your direction, Farmer Metrics can send selected information to a lender, accountant, adviser, or other approved recipient, using contracted preparation, storage, and delivery providers. A send does not grant access to the rest of your account or enroll you in affiliate referrals, marketing, or the referral and introduction program. The review and approval rules in Terms Section 2.8 apply.

We retain appropriate action and delivery evidence, such as requesting user, records affected, changes, approval time, recipient, and sending status, for service operation, authorization, troubleshooting, security, and legal needs. Recipients may retain copies under their own policies and legal duties. Deleting a report or withdrawing future-sharing permission does not delete delivered copies.

Controls and future providers. Disabling Rowe stops new Rowe activity in the disabled scope; it does not erase required records. Deleting a conversation does not automatically delete underlying business records, saved reports, or others' copies. We may change company-selected AI providers or models. Before materially changing data recipients, uses, or processing practices, we update relevant disclosures, provide required notice, and obtain required consent. A change does not expand approved purposes, account access, sharing or action permissions, or permit general-purpose AI training. If customer-selected providers become available, we will explain recipients, shared information, settings, and terms before activation and obtain required authorization. We enable only providers and configurations reviewed for compatibility with this policy's privacy, security, retention, and no-general-purpose-training commitments; customer choice cannot waive them. A provider change alone does not authorize transferring all historical conversations or unrelated uses. This policy does not promise provider choice.

4. Optional Referrals and Introductions

What this means: We share only the introduction and information you approve with named providers; participation is optional and future permission can be withdrawn.

If you ask for a referral or introduction to a provider, such as a lender, crop insurance provider, grain marketer, seed or equipment supplier, accountant, attorney, other agricultural or business provider, or an affiliated company, we use your request and chosen records to prepare it. These are examples of referral categories, not a promise that any provider or service is available. Before disclosure, we identify each named recipient, contact details, purpose, message, and exact information, and obtain separate affirmative approval. Choose an introduction using only your name, business name, and contact details, or approve selected farm and financial records such as operational summaries, debt schedules, cash-flow reports, financial statements, or a lender packet. Contact-only approval does not permit sharing financial statements, farm records, or access to your workspace. Asking us to find a provider does not authorize distribution to unnamed recipients. Permission to share with a lender does not extend to an insurance provider, grain marketer, seed supplier, or other recipient. Giving you a provider's contact details, without sending your information to that provider, needs no outbound-sharing approval.

An introduction may identify you and your business and permit the approved provider to contact you about the inquiry. It is not anonymous. Accepting Terms, buying Services, enabling Rowe, or approving another report send does not enroll you. New recipients, added records, materially changed messages, or a new purpose need renewed approval. We do not distribute your profile under a general aggregate-data clause, grant full-workspace access, authorize unrelated marketing, or sell private farm records through this program.

We use restricted providers to prepare, store, and securely deliver approved communications. With a recommendation or referral, and before you approve an introduction, we identify any material ownership or affiliation and any referral fee, commission, discount, or other material benefit to us or an affiliate, including the payer and amount or calculation method where applicable, provide the recipient's available privacy notice, and identify the recipient country. Approved information may be processed in the United States or Canada. We apply required cross-border safeguards and disclosures. Recipients control their received copies under their own notices and law; permission does not remove our obligations.

Declining or withdrawing does not take away purchased coaching or software. Withdraw future sharing through an available program control or legal@legacyfarmer.com; support routes requests internally. We stop future disclosures within the withdrawn scope once the request is received and processed, subject to law. Already dispatched transmissions may complete; delivered copies cannot be recalled. Contact the recipient about copies it lawfully retains.

We retain minimum appropriate request, approval, withdrawal, recipient, and delivery records for administering the service, requests or disputes, security, and compliance, under our retention practices. Participation does not authorize credit-report requests, applications, financial transactions, unrelated marketing, or general-purpose AI training. Terms Section 7 governs the program. Paid debt restructuring or financing placement needs a separate accepted engagement; sharing permission does not authorize that work or its fees. Referral permissions do not include text messaging opt-in data, consent records, or SMS enrollment lists; Section 6's messaging restrictions continue to apply.

5. Other Recipients and Billing Records

What this means: Information can go to appropriate providers, approved recipients, or lawful authorities for stated purposes; outreach to your business contacts needs your separate permission, and overdue bills do not justify sharing an entire workspace.

Business contacts and partnership outreach. At your direction, authorized personnel and supported software communicate with the contacts you identify for the purpose you approve, under the approval rules in Terms Sections 2.8 and 2.9. Separately, and only with your affirmative permission under Terms Section 7.5, we may use selected business contact details you provide to approach those contacts about Legacy Farmer partnerships, provider participation, or marketplace opportunities. That outreach identifies our own business purpose, never includes your private notes, financial records, balances, loan terms, or other financial information, and does not name you as the referring customer without your approval. Your permission does not substitute for any consent or other lawful basis we need to contact the recipient; one customer cannot consent on another person's behalf. We follow applicable communication rules, honor recipient opt-outs, and obtain a provider's agreement before presenting it as a participating marketplace partner. Only the limited personnel responsible for partnerships and marketplace operations, and contracted providers that store and deliver communications, process contact details for this purpose. Your contact lists and relationship information are never exposed in a public marketplace. A contact may ask us to correct or stop using their details through legal@legacyfarmer.com; you may withdraw permission for future outreach using your uploaded contacts the same way. Withdrawal does not recall delivered messages. Text messaging opt-in data, consent records, enrollment lists, and mobile information collected for our text messaging programs remain outside this outreach and outside partner-marketing sharing (Section 6).

We may disclose information to contracted providers for disclosed purposes under confidentiality, security, and use restrictions; to affiliates when necessary for a disclosed service purpose under appropriate restrictions or with separate permission for an optional referral; to recipients you authorize; and to fulfill purposes disclosed when information is provided or with your consent.

We may disclose information to comply with court orders, laws, legal process, or government and regulatory requests; enforce agreements, billing, and collection rights; or protect our, customers', or others' rights, property, or safety where necessary or appropriate. A merger, sale, restructuring, bankruptcy, or similar transfer may transfer information to a successor, but privacy commitments and applicable notice and consent duties continue.

Lawful aggregate or deidentified disclosures must remain consistent with this policy. They do not authorize unrestricted sharing of private farm or Rowe information or replace specific referral-sharing approval. Anonymized aggregate benchmarks follow Section 3.

Billing and collection. We process relevant account, Order, acceptance, invoice, payment-status, and communications records to administer schedules, resolve disputes, enforce lawful payments, and document settlements or releases. Where necessary and lawful, we disclose minimum relevant information to billing or payment providers, legal advisers, or collection providers under confidentiality and data-protection requirements. This does not authorize marketing, affiliate referrals, AI processing, or access to unrelated farm records. An unpaid balance does not justify disclosure of the entire workspace.

6. Cookies, Advertising, and Message Choices

What this means: You have choices about advertising and messages; SMS consent is separate, and your SMS enrollment information is not shared for partners' marketing.

Browser cookies are small files stored on your device. You can refuse some or all cookies or ask your browser to alert you, although parts of the website may stop working. Unless your browser blocks them, website visits may set cookies. Web beacons and pixels in pages or emails may measure visits, email opens, content popularity, and system integrity.

Third-party advertisers, networks, content providers, or applications may use cookies or similar tools and associate information with you or track activity across websites over time to provide targeted content. We do not control independent third-party tracking. Ask the provider about its practices and choices. Participating Network Advertising Initiative providers offer opt-outs through the NAI website.

We may use information for promotional messages or targeted website advertising with required permission. We do not disclose personal information for this advertising without consent; clicking an advertisement may reveal to its provider that you meet its targeting criteria. These uses do not permit advertising with private farm records or private AI content. Affiliate referrals require separate permission.

Text messaging. We collect the phone number you provide, your enrollment choices and consent evidence, messages you exchange with us, and delivery and opt-out records to operate the messaging program, answer requests, honor your choices, and document compliance. Access is limited to authorized personnel and contracted providers supporting those purposes under appropriate restrictions. Records follow Section 7's retention practices. Message frequency varies. Message and data rates may apply.

We do not sell or share mobile information collected for our text messaging programs with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent are excluded from our referral, advertising, and other discretionary sharing permissions. Restricted providers may process information needed to operate and support our messaging service, and we may make disclosures required by law. A separate customer-requested introduction under Section 4 does not transfer SMS permission or authorize use of SMS enrollment lists. Text HELP for help or contact support@legacyfarmer.com; text STOP to opt out. We honor other valid revocation requests as required by law. For marketing email, use its unsubscribe link. For privacy requests, contact legal@legacyfarmer.com. Marketing, referral, and publicity permissions remain separate from Terms acceptance and Rowe enablement. Opting out does not cancel a purchase or its lawful payments; necessary service messages use permitted channels.

7. Retention, Security, and Payments

What this means: We use safeguards and retain information for stated business and legal needs; security and immediate deletion from every system are not guaranteed.

We keep information for as long as reasonably needed for disclosed purposes, considering account activity, support, security, contractual duties, and legal requirements. Provider retention, backups, and legal or security records may differ from what remains visible in your account. We do not promise zero retention or immediate deletion from every system. Business contact details you provide are kept while they remain in your workspace and for the periods our service, legal, and compliance needs require; partnership-outreach authorizations and recipient opt-outs are kept as compliance evidence.

We retain minimum agreement, acceptance, billing, dispute, settlement, and collection evidence for applicable legal, accounting, and claim periods. Account closure, deletion requests, or withdrawal of optional consent do not automatically erase lawfully retained records. We explain exceptions and delete or deidentify records when the lawful need ends. An unpaid balance does not justify indefinite retention of unrelated farm records.

We and contracted providers maintain safeguards designed to protect information. Storage and processing may occur in hosting, AI, communications, and other provider systems. No system or transmission is completely secure. Protect your login and do not share passwords. Transmission carries risk; we cannot guarantee security and are not responsible for circumvention of privacy or security settings, subject to our commitments and mandatory law.

Payment-card details go directly to third-party payment processors; we do not collect or retain those card details. Their privacy notices govern their handling. Our payment processors adhere to PCI-DSS standards designed to secure payment information. We still process the billing and payment-status records described above.

8. Access Choices and Privacy Rights

What this means: You can request applicable privacy rights, subject to verification, legal limits, and the response rules below.

You can review and update profile information in your account. For access, correction, deletion, withdrawal of consent, or other privacy requests, contact legal@legacyfarmer.com, including when an expected control is unavailable. Contact support@legacyfarmer.com for technical help. We explain relevant effects, exceptions, and lawful retention limits. Where law provides another option, we do not require closure of unrelated services to exercise rights. Deleted content may remain in caches, archives, or recipient copies; underlying records can be separate from a deleted conversation or report.

State rights vary. Where applicable, they may include confirming processing; accessing, correcting, deleting, or obtaining a portable copy; opting out of sale, targeted advertising, or profiling that produces legal or similarly significant effects; and limiting or requiring consent for sensitive-data processing. Examples include California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia; available rights and exceptions differ. This list is not a limit on coverage. Broader statutory rights, request periods, authorized-agent options, response duties, and lawful request methods control over this general description.

Canadian rights remain available under applicable federal and provincial laws. We explain cross-border purposes, processing, and choices and obtain meaningful consent where required. You may request access or correction, withdraw consent subject to lawful limits, or make a privacy complaint to legal@legacyfarmer.com. This does not limit access to the relevant Canadian privacy regulator or other mandatory remedies.

California rights. We comply with the CCPA. California residents may request access, portability, deletion, and applicable sale opt-outs; we do not resell personal information collected from consumers. A verified request may obtain categories and specific pieces collected, source categories, business or commercial purposes, and recipient categories. Where applicable, sale and business-purpose disclosures are listed separately by information and recipient category. We generally describe the preceding twelve months; broader mandatory rights and reporting periods control.

We delete requested information and direct service providers to do so unless a lawful exception applies. Exceptions may include completing a transaction or contract, security and fraud prevention, debugging, protecting lawful speech or other rights, compliance with the California Electronic Communications Privacy Act or other legal duties, qualifying public-interest research with informed consent, reasonably expected internal uses, or other lawful compatible uses, only as applicable law allows.

You or an authorized representative may submit a request, including for a minor child where applicable. Provide enough information to verify identity and authority and understand the request. We use verification information only for that purpose. No account is required. Access and portability requests are generally limited to twice in twelve months, subject to broader mandatory rights. We explain inability to verify or another lawful reason for declining a request.

We endeavor to respond within 45 days; if a lawful extension to 90 days is needed, we explain the reason and length. Shorter or otherwise different mandatory deadlines control. Responses go through your account or, without an account, by mail or electronically at your choice. Portable information will be reasonably usable for transfer. Requests are free unless a lawful exception for excessive, repetitive, or manifestly unfounded requests permits a charge; we explain the basis and estimate before proceeding.

We do not discriminate for exercising CCPA rights. Except where legally permitted, we will not deny service, change its price or quality, or suggest different treatment for exercising those rights. If we offer a privacy-related financial incentive, its separate offer explains the program and required terms before opt-in; participation is voluntary and withdrawal is available. Potential incentives may include contests or referrals. Any lawful data valuation depends on participation, opt-outs, combined data, and our enhancement efforts; we do not record consumer-data value in our accounting statements. This policy does not enroll you in a program.

California direct-marketing requests. Once per calendar year, California website users may request the categories of personal information disclosed to third parties for direct marketing during the preceding calendar year and those parties' names and addresses. Write to legal@legacyfarmer.com or our mailing address below, use the subject "California Privacy Rights," and provide details sufficient to respond. Sending the request to support instead does not invalidate it.

9. Eligibility, Policy Changes, and Contact

What this means: Services are for adults; policy updates, legal rules, and contact routes remain subject to mandatory privacy protections.

Services are not intended for people under 18 or below the age of majority where they live. Minors must not submit personal information. We do not knowingly collect information from children under 18 without parental consent and delete information collected without verified parental consent when we learn of it. Report concerns to legal@legacyfarmer.com. This provision does not make Services available to minors.

We post revisions at legacyfarmer.com/privacy-policy with the revision date and provide a website notice of material changes. Keep your email current and review notices. Posting or acknowledging an update does not retroactively authorize new processing of previously collected information. We provide required notice and obtain additional consent where required before material new practices begin.

United States and Kansas law govern this policy and website use, subject to mandatory protections. Access from another country may involve transfer to the United States. You consent to exclusive jurisdiction in Kansas state and federal courts for disputes under this policy, subject to mandatory law. That submission and choice of law do not waive mandatory U.S. state or Canadian privacy rights, required consent, or access to a regulator or legally available forum. An invalid provision does not invalidate the rest.

Legal notices and privacy questions or requests: legal@legacyfarmer.com. Billing, cancellations, and software help: support@legacyfarmer.com. We route requests received by the other inbox internally; using that inbox alone does not invalidate a cancellation or privacy request.

Legacy Farmer, Inc.

PMB 200

4320 Vine Street Unit 80

Hays, KS 67601