Privacy Notice
Forge Systems LTD · Version 2026-10-19.3 · Effective 19 October 2026
Who is responsible
Forge Systems LTD, 10 Roy Road, Wairuna 9584, New Zealand, operates Pasture Farm & Feed and is responsible for personal information it handles to operate the service. Contact the privacy officer at gabriel@forgesystems.co.nz for questions, access or correction requests, deletion requests or complaints.
Information we collect and why
We collect account email addresses, account identifiers, passwords through the authentication service, names you choose to enter, farm memberships and roles, invitations, and the farm content you and authorised members supply. This may include paddock boundaries, map points, covers, walk dates, grazing and crop records, herds, feed rations and stores, costs, diary notes, timesheets, livestock and animal-health or medicine records. We use this information to authenticate accounts, keep farms separate, share authorised records, calculate and display planning information, send service emails, resolve conflicts, support you and protect the system. Animal-health information is about animals; avoid adding unnecessary personal medical or other sensitive information about people.
Required and optional information
An email and password are required for a shared account; agreement acceptance is required for shared-farm access. Without these we cannot provide account-based sharing. Most farm content and device location permission are optional, but leaving information out can limit calculations and features. You may decline device location and navigate the map manually. The private practice farm on the website uses browser-local data and does not require a shared account.
Information supplied by other people
A farm owner may supply your email and invite you, and authorised members may enter records that refer to you. Invitation emails explain who operates the service and link to this notice. We use an invited email to deliver and validate the invitation, not to subscribe it to marketing. If you believe information about you was entered without authority, contact the farm owner or our privacy officer. We take reasonable steps to notify people about indirect collection where required by New Zealand law.
Who can see shared records
Members of a farm can access that farm’s records according to their role. Owners can see the full list of members, administer access and delete their farm. Non-owners can see their own membership but not the full member list. Different farms use separate records. Forge Systems LTD may access information when reasonably necessary for support, security, maintenance or legal obligations. We may disclose information when required or authorised by law. We do not sell personal information or use farm content for advertising or external AI model training.
Contractor job sharing
When a farm shares a contractor job, we process the contractor email to send the job link and, for a verified signed-in account, show matching active assignments. The contractor page shares the full farm map, paddock boundaries and names or numbers for navigation. Only assigned paddocks include relevant area, exclusions, water trough details, job instructions and job GPS markings; pasture cover readings, herds, budgets and unrelated farm records are excluded. No account is required to use a private job link. Anyone holding it may forward it to contractor workers, who may forward it further within the same job scope. This is not an email-identity check for account-free viewers. Anyone receiving the link can access the limited job until the farm owner revokes access. Signed-in viewers may save a forwarded job to their account, without farm membership. Job links and saved-account access stay active until the farm owner revokes the job. Deleting the farm removes its hosted contractor jobs. A deleted and recreated account does not automatically inherit older email assignments; a fresh assignment or job link is needed. Keep job links private and contact the farm owner if a link is sent to the wrong person. Copies already taken by recipients may remain after access is revoked.
Service providers and overseas processing
Pasture uses Supabase for authentication and shared records, Vercel for the website and invitation service, Google Workspace/Gmail for service email, and Apple and Esri services for app distribution and maps or imagery. Those services may receive account or technical data, invitation emails, map requests or hosted farm records as needed for their function. Service providers may process information outside New Zealand. We use providers and contractual or other safeguards appropriate to our obligations; acknowledging this notice is not a blanket waiver of overseas-disclosure protections. Provider privacy notices are linked below. Map providers may receive technical request details and the map area requested.
Location and device storage
When permitted, device location helps centre the map; Pasture does not need continuous background location to provide farm sharing. Paddock boundaries, trough and silo points, and any farm centre you save can reveal a farm location and are shared as farm content. The app and website keep local copies so you can continue working and queue changes. People with access to your unlocked device or browser profile may be able to see those copies. Use device locks and a private browser profile. Signing out is not a promise that every backup, exported file or browser/device copy has been erased.
Security and its limits
We use authenticated sessions, access roles and farm-level database restrictions. The iPhone stores sign-in credentials in the system Keychain. Network requests use HTTPS, and hosted providers supply their own storage safeguards. This is not end-to-end encryption: the service and its providers must process records to provide features. No online system is completely secure. Private links and passwords must be kept confidential. New shared-account sign-ins require a one-time code emailed to the account address before farm access. Account creation does not independently verify the email until this code check is completed. Sessions already open when this protection was introduced may stay signed in until a new sign-in is needed. We investigate suspected privacy breaches and notify affected people and the regulator when required.
Technical logs and agreement records
Hosting, authentication, map and email providers may process IP addresses, request metadata, timestamps and operational logs to deliver and secure their services. Pasture records account ID, server time, accepted versions, content fingerprints and whether acceptance was through iOS or web. This provides evidence of the agreement and supports compliance; the agreement record does not require additional device fingerprinting or location tracking. Built-in help answers are local guide content, not a conversation with an external AI service. We do not intentionally add advertising trackers.
Retention and deletion
We retain account and farm records for the service while needed for their lawful purposes, then delete or de-identify them when no longer required, subject to legitimate legal and security needs. Account deletion removes that account and its memberships. Owner account deletion also deletes its owned farms; non-owner deletion leaves the farm for its remaining users. Re-registering the same email does not restore access. Farm deletion removes shared access for all members. Provider backups, security logs, exports and copies on other devices may persist under their applicable retention processes. We do not promise immediate erasure from every backup. Contact us about retained information or records you need to preserve before deletion.
Your choices and rights
You may ask to access or correct personal information we hold about you, request deletion, ask questions about a disclosure, or complain by emailing gabriel@forgesystems.co.nz. We may verify identity to protect your information. We respond within the periods required by applicable law and explain lawful refusals and available remedies. Where a correction is disputed, you can ask for a statement of correction to accompany the information. Farm owners’ administration powers do not replace your statutory rights. You may also contact the New Zealand Office of the Privacy Commissioner at privacy.org.nz.
Changes to this notice
The effective date and version appear with this notice. Your agreement and privacy acknowledgement are recorded once for your account. App updates, signing out and signing back in do not ask you to agree again. Updated documents remain available to read, and we explain significant changes where appropriate. We preserve the version and time you originally accepted; we do not record later versions as accepted without your action. Optional uses that require separate consent will not be bundled into the account agreement. You can read this notice and the Terms of Use without creating an account.