Privacy policy
What Mothmr collects about you, why, who it is shared with, how long it is kept, and how to reach us about it.
1. Who we are
Mothmr is a farm-management service provided by 3lom.ai LLC, 8 The Green, Dover, DE 19901, United States ("3lom.ai", "we", "us"). This policy explains what personal data we handle when you visit mothmr.com, send us an enquiry or use the Mothmr application, and what we do with it.
For an account you create yourself, 3lom.ai is responsible for your personal data. When an organization uses Mothmr for its team, the organization decides whom to add and what to record about them, and we process that data on its behalf and on its instructions.
2. What we collect
What we collect depends on how you use Mothmr:
- Account details: your first and last name, your email address, phone number or both, a password (stored only as a one-way hash), your language and, if you choose one, a username.
- If you sign in with Google: the account identifier Google gives us, your name, your email address and whether Google has verified it. We never receive your Google password, and we do not store your profile picture.
- If an organization adds you to its team: the details its administrators enter, such as your name, phone number, email address, job title and an employee reference, and your role and the fields you are assigned.
- Farm and work records: field boundaries and names, crops and seasons, tasks, notes, checklists, photos and other evidence, reports, and readings from sensors that are connected.
- The location of evidence: when you add evidence to a task, your device's location is recorded only if you tick the box that allows it. Photos are stored exactly as you upload them, so any location or camera details your phone saved inside a photo file stay in it.
- Enquiries: when you use the enquiry form on our website, the name, organization, email address, phone number, country, farm size and message you give us, and the network address the request came from.
- Where you came from: if the link that brought you to our website carried campaign tags (such as utm_source or utm_campaign), we record those tags with the account you create or the enquiry you send, to learn which of our posts and ads bring people to Mothmr.
- Support: the messages you send and receive through Support in the application.
- Technical and usage information: records of sign-ins and of security-relevant actions and changes (an audit log), counts of product events such as a field being created or a task being verified, and the standard information your browser sends with every request.
- Sign-in codes: if you sign in with a one-time code by WhatsApp or SMS, where that option is offered, we keep hashed records of each request, including a hash of your phone number and network address, to limit misuse.
If you pay for a plan, you enter your card details with our payment provider, not with us.
3. How we use it
We use personal data to:
- create and run your account and workspace, and let you sign in (to perform our contract with you);
- provide the features you use: your fields and their satellite history, weather for your fields, tasks, evidence, reports and sensor readings (contract);
- answer enquiries and support requests, and arrange a demonstration you asked for (contract, or steps you asked us to take before one);
- keep the Service secure, prevent abuse, investigate problems and keep an audit trail of important actions (our legitimate interest in a safe service);
- understand how the website and the product are used, so we can improve them (our legitimate interest, or your consent where the law requires it);
- meet our legal obligations.
Our team is told by email about every new sign-up and every enquiry, with the details given, so that a person can follow it up.
We do not sell your personal data. We use it for advertising only as described under Cookies and browser storage: to measure our own ads on Facebook and Instagram and to show them to people who have visited our website. The advice in Mothmr comes from fixed rules: nothing you type is sent to an artificial-intelligence service, and we do not use your data to train one.
4. Signing in with Google
If you choose Continue with Google, Google shares your basic profile with us: your name, your email address and an account identifier. We use it only to create your Mothmr account, sign you in and show your name in the application. We do not ask for access to your email, contacts, files or any other Google data, and we do not pass what Google gives us to anyone else.
You can remove Mothmr's access at any time in your Google account settings. Your Mothmr account stays; to close it, contact us.
5. Who we share it with
We share personal data only with service providers that help us run Mothmr, only as much as each one needs, and never for their own marketing:
- Google, for Continue with Google and for website analytics (see Cookies and browser storage);
- Meta Platforms, to measure our ads on Facebook and Instagram and to show them to people who have visited our website (see Cookies and browser storage);
- Resend, the email service that delivers notifications of new sign-ups and enquiries to our team;
- Twilio, which delivers one-time sign-in codes by WhatsApp or SMS, where that option is offered;
- payment providers such as Stripe, when you pay for a plan;
- Open-Meteo and, where it is enabled, OpenWeatherMap, which receive the coordinates of your fields to return the weather for them — not your name or contact details;
- ipapi.co, which may receive your network address to suggest your country in phone-number fields;
- Esri, whose map imagery, and unpkg, whose mapping code, your browser loads on the application's map screens; like any website you visit, they see your network address;
- sensor platforms that you or your organization connect, through your own account with them;
- our hosting provider, which runs the server where the Service and its backups are stored.
We may also disclose personal data when the law requires it, to protect the rights and safety of people, or as part of a sale or reorganisation of our business, in which case this policy continues to apply to it.
6. Organization workspaces
In an organization workspace, administrators and supervisors can see the work records, evidence and task history of the people working in the fields they are responsible for. Administrators decide who joins, can change members' details and roles, and can remove members. If you are a member, the organization is your first contact for questions about the data it records about you.
A small number of Mothmr staff with platform-administration or support access can see accounts and workspaces across the Service, in order to set them up, answer support requests and keep the Service running. They use that access only for those purposes.
7. Cookies and browser storage
We use a small number of cookies and a little browser storage:
- a session cookie that keeps you signed in, and security tokens for forms, without which the Service cannot work;
- preference cookies that remember your language, your area unit and a note you have dismissed;
- a cookie that lasts ten minutes and ties a Google sign-in to your browser;
- in the application, copies of pages you have visited, and task updates, notes and photos you saved while offline, so that they can be sent when you are back online. Updates are removed once they are sent; copies of pages stay until your browser clears them. On a shared device, clear your browser data when you finish.
The home page of our website uses Google Analytics, which sets its own cookies to count visits and see how the page is used; Google handles that information under its own privacy policy. You can block these cookies in your browser settings, or with Google's opt-out add-on for browsers, without affecting the website or the application.
The home page also uses the Meta Pixel, which sets Meta's own cookies so that we can count visits that come from our ads on Facebook and Instagram, and so that Meta can show our ads to people who have visited the site. When you create an account or send an enquiry, our server tells Meta that it happened, with your network address, your browser type, those Meta cookie identifiers and, for an account, a coded account number. We never send Meta your name, email address, phone number or anything about your fields. Meta handles this information under its own privacy policy. You can block these cookies in your browser settings, and you can manage the ads you see in your Facebook or Instagram settings.
8. How long we keep it
We keep personal data while your account is active and for as long as we need it for the purposes above. In particular:
- account details and farm records are kept until the account or workspace is closed and deleted;
- enquiries are kept until you ask us to delete them, or until we no longer need them to follow up;
- records of sign-in code requests are deleted after one day, and Google sign-in attempts after ten minutes;
- backups are made every day; data deleted from the Service can remain in a backup until that backup is removed.
When an account or workspace is closed at your request, we delete or anonymise the data that belongs to it, except what we must keep by law or to resolve a dispute.
9. How we protect it
We protect personal data with measures suited to it, including:
- encrypted connections (HTTPS) between your browser and our server;
- passwords stored only as salted one-way hashes, never in readable form;
- credentials for connected services encrypted at rest;
- access limited by role and by the fields each person is assigned, checked on the server;
- limits on repeated sign-in-code requests, and an audit trail of important actions.
No system is completely secure. If we learn of a breach that affects your personal data, we will tell you, and the authorities where the law requires it.
10. Your rights
Depending on where you live, you may have the right to ask for access to your personal data, to have it corrected or deleted, to receive a copy in a portable format, to object to or restrict some uses of it, and to withdraw a consent you have given. You may also complain to your data-protection authority.
You can correct some details yourself in the application, and administrators can export records as CSV files. For anything else, including closing your account, contact us as described below. We answer within one month, and we may first need to confirm who you are.
If you are a member of an organization workspace, some requests may need to go through that organization.
11. Where your data is processed
3lom.ai is a company registered in the United States. Our server and the service providers listed above may process your personal data in countries other than the one you live in, whose laws may protect it differently. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.
12. Children
Mothmr is a service for farmers and farm businesses. It is not directed at children, and you must be at least 18 to create an account. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy. We publish each version here with its date, and if a change materially affects how we use your personal data, we will tell you in the application or by email before it takes effect.
14. Contact
For questions about this policy or your personal data, or to exercise your rights, contact us through the enquiry form on mothmr.com, through Support inside the application, or by post at 3lom.ai LLC, 8 The Green, Dover, DE 19901, United States.