Last updated: November 6, 2026
Effective: October 28, 2026
1. Who we are, and what this policy covers
Pasturly is software for farms that sell directly to the public. It is operated by Nature’s Grove Farm LLC, 138 Penns Grove Lane, Latrobe, PA 15650 (“Pasturly,” “we,” “us”).
This policy explains how we handle personal information as a controller: when we decide why and how it is used. It covers:
- farms that use Pasturly, and the people who work for them and sign in (owners, managers, staff, drivers and market hands);
- visitors to our websites, pasturly.com and app.pasturly.com;
- people who contact us, including anyone who reports a farm’s website or sends a copyright notice;
- people who join our early-access list; and
- users of the Pasturly point-of-sale app for phones.
If you are a customer of a farm, the farm is in charge of your information, and its own privacy notice applies (you will find it on the farm’s website, usually at /privacy). We handle your information only on the farm’s behalf and on its instructions, as its service provider. Section 9 explains that relationship and how to reach the farm.
For questions, write to admin@pasturly.com.
2. Information we collect about farms and their people
| What | Where it comes from | Why we use it |
|---|---|---|
| The farm’s name, its Pasturly name (“handle”), address, phone, time zone, logo and brand color | The farm | Running the account, the farm’s website and its email |
| Owners’ and staff’s names, email addresses and roles | The farm, and each person when they accept an invitation | Signing people in by emailed link, deciding what each may see, and contacting the account |
| Sign-in links and sessions, with the browser type that signed in | Created when someone signs in | Keeping people signed in and signing them out. Links and session tokens are stored only as one-way hashes |
| Driver, market and phone PINs, and the phones a farm adds | The farm | Letting staff sign in on a phone or link. PINs are stored only as one-way hashes; we cannot read them |
| The plan, billing status, trial, discounts and plan history | Our billing, through Stripe | Charging for the plan and deciding which features are on |
| The farm’s billing contact and card | The farm, entered into Stripe’s own page | Charging for the plan. We never see the full card number; Stripe holds it |
| The farm’s Stripe account id and status | Stripe, when the farm connects | Taking card payments on the farm’s own account |
| If the farm connects QuickBooks: its QuickBooks company’s id and name, the connection’s access tokens, and the ids of what Pasturly sent | Intuit, when the farm connects | Sending the farm’s own sales into its own QuickBooks company. Tokens are encrypted, never shown to anyone, and deleted when the farm disconnects |
| Acceptance of our Terms: who, when, and which version | The farm | A record of the agreement |
| Referrals: which farm referred yours, if one did, and whether your first payment went through | The sign-up form and our billing | Running the referral program and giving its free months |
| Support correspondence | The farm | Answering questions |
| Support access grants and visits | The farm, and our staff’s use of them | Showing the farm, and us, every time our staff looked at its account (Section 6) |
| Usage and error logs (requests, errors, times) | Automatically | Keeping the service working and secure |
3. Information we collect from website visitors
pasturly.com. Our marketing website is a WordPress site hosted by GoDaddy, which measures visits to it, and delivered through Cloudflare, which blocks malicious traffic and sets a security cookie (__cf_bm) that expires after 30 minutes. YouTube (Google) plays the videos on its Learn page and may set its own cookies when that page loads. If you accept the notice shown on your first visit, the site also loads the Meta Pixel, which tells Meta (Facebook and Instagram) which pages you visit, so we can measure our ads there and show them to people likely to be interested. It sets Meta’s cookies, such as _fbp. The same answer loads HeyCatch, an analytics service that records the pages you visit and what you click, so we can see how the site is used; it sets its own cookie, which lasts up to a year. And it loads Google Analytics, which counts visits to each page and where visitors came from, so we can see which pages and ads bring farms to the site; it sets Google’s cookies, _ga and one starting _ga_, which last up to two years, and its advertising features are switched off. Nothing of Meta’s, HeyCatch’s or Google Analytics’ loads until you accept. You can change your answer from Cookie choices at the foot of any page. The site sets no other advertising cookies, and its fonts are served from the site itself, not fetched from Google.
app.pasturly.com. The sign-in and admin pages set only the cookies needed to sign in and stay signed in (see the Cookie Notice), unless you accept the notice shown there. If you do, two things run. On the sign-up page, app.pasturly.com/start, the Meta Pixel tells Meta that a farm signed up, so we can measure our ads; it is not sent your name, email, farm or anything you type. And on the sign-up page and in a farm’s admin, HeyCatch records the pages you open and the buttons you press, linked to your Pasturly account (your name and email, your farm’s plan and when you joined), so we can see how Pasturly is used and fix what is hard. HeyCatch is not sent the words on the page, so it never sees a farm’s customers, orders or products. Neither runs on customers’ pages, farm websites, payment pages or anywhere else on app.pasturly.com. Separately, when a farm signs up or starts a plan, Pasturly’s own server tells HeyCatch that it happened, with the account and the plan, whether or not you accepted, so we can count sign-ups and plans. That is a record Pasturly already keeps about your account, not a record of what you do on a page.
Early-access list. If you join it we collect your name, email and, if you give them, your farm’s name and what you sell. We use them only to tell you when there is a place for your farm and to understand what farms need. We keep a sign-up until you open an account, ask us to remove it, or 24 months pass, whichever comes first.
4. Information from people who contact us or report a site
- Reports about a farm’s website (from the “Report this site” link or an email to admin@pasturly.com): the site and page reported, the reason, your words and, if you give it, your email. We use them to review the site and, if needed, take it down. We do not share your email address with the farm, except for a copyright notice (below) or where the law requires it. We keep reports for 3 years after they are closed.
- Copyright notices: the details the law asks for (Copyright and DMCA Policy). We forward the notice to the farm concerned, including your contact details, so that it can send a counter-notice if it believes the notice is mistaken, and we keep it for 3 years after the matter is closed.
- Security reports and other email to us: what you send, to answer it.
5. Information from the point-of-sale app
The Pasturly app for phones is used by a farm’s staff at market and on delivery. It sends Pasturly:
- each sale (items, weights, amounts, how it was paid) and the staff shift that made it;
- the phone’s own Pasturly token;
- a customer’s email address, if they ask for a receipt by email.
Stripe’s card-payment software in the app collects card details, the phone’s and card reader’s identifiers, diagnostic information and the phone’s precise location for each card payment, and sends them to Stripe on the farm’s account to process the payment and prevent fraud. Stripe requires location for card payments to work. Pasturly does not receive the location or card details. Stripe’s own privacy policy applies to them.
The app has no advertising identifier, no crash reporter that sends to us, and no access to photos, contacts or messages.
6. How we use information, and our legal reasons
We use the information above to:
- provide, secure and support Pasturly, including signing people in and stopping misuse;
- bill for plans, and handle trials, discounts, credits and refunds;
- send service email: sign-in links, notices our Terms require (price changes, renewals, new sub-processors, changes to the Terms, breaches), and messages about the farm’s account. These are not marketing, and you cannot unsubscribe from them while you have an account;
- send news about Pasturly to farm owners, only if they opt in;
- show announcements in the admin;
- review reports about farms’ websites and act on them;
- keep aggregate counts across all farms (for example, the number of orders and emails each day), which do not identify any customer;
- run the referral program and stop abuse of it: we compare details of the two farms in a referral (team email addresses, phone, mailing address, farm name, an identifier from Stripe for the card on the Pasturly bill, and what each farm told Stripe about its business) to see whether one farm is referring itself. We keep only the fact that something matched, not the details. Our reason is our legitimate interest in keeping the program honest;
- comply with the law and enforce our Terms.
Our staff and farm data. Pasturly staff see a farm’s account, including its customers’ details, only when the farm turns on support access from its own settings, for the time it chooses, or without it in an emergency: to stop fraud or harm, to keep the service secure, or when the law requires it. Every view is recorded and shown to the farm, and the farm’s owner is emailed at once after any emergency access. A farm owner who has lost access to their email is helped through account recovery, after we verify who they are, not by our looking at the account.
We do not sell personal information, or use it for decisions that have legal or similarly significant effects on anyone. The only information shared for advertising is what the Meta Pixel collects on pasturly.com and the sign-up page at app.pasturly.com/start, and only from visitors who accept it (Section 3). Nothing from any other page of app.pasturly.com, the Pasturly app, or a farm’s customers is ever shared for advertising.
7. Who we share information with
- Our service providers (sub-processors), under contracts that limit their use of it: Railway (hosting, database, file storage and backups), Postmark (email), and Stripe (our own billing). The current list is at pasturly.com/legal/subprocessors.
- Stripe, for each farm’s own payments, under the farm’s own agreement with Stripe.
- QuickBooks (Intuit Inc.), only if a farm connects its own QuickBooks Online company. We send that farm’s sales, payments, refunds and Stripe payouts, with each customer’s name, email address and billing address, to the farm’s QuickBooks company, under the farm’s own agreement with Intuit. United States.
- HeyCatch, our analytics service, on pasturly.com and in the sign-up page and farm admin of app.pasturly.com, in the browser only for visitors who accept it (Section 3). It receives the pages visited and what was clicked, and for a signed-in farm, the person’s name and email, the farm’s plan and when they joined; it is not sent the words on a page. From Pasturly’s server it also receives each farm sign-up and plan start, for every farm (Section 3).
- Google, through Google Analytics on pasturly.com only, for visitors who accept it (Section 3). It receives the pages visited and how the visitor arrived, with its advertising features switched off. Google’s own policy explains how it uses what it receives: https://policies.google.com/privacy.
- Meta, through the Meta Pixel on pasturly.com and the sign-up page, only for visitors who accept it (Section 3). Meta’s own policy explains how it uses what it receives: https://www.facebook.com/privacy/policy.
- The farm, about its own account: for example, a support visit is shown to the farm.
- The farm that referred you: if you sign up through another farm’s link or code, that farm sees your farm’s name and whether you have signed up, are on a plan, or have made your first payment. It sees nothing else about your farm or your customers. We tell you this on the sign-up form.
- Authorities and others where the law requires, or to protect people’s safety, our rights or the service.
- A buyer or successor of Pasturly’s business, who would be bound by this policy.
8. How long we keep information
Our Data Retention Schedule sets out every period. In short:
| Information | Kept |
|---|---|
| A farm’s account and its people | While the account is open |
| A closed farm’s account and everything it held | Kept out of use for 30 days after closing, so the farm can change its mind or download its data, then deleted |
| Sign-in links and sessions | Until they expire, then deleted within 90 days |
| Our own billing records for a farm’s plan | 7 years, for our tax and accounting. This is the only financial record we keep after a farm leaves; a farm’s own sales records are the farm’s to keep |
| Acceptance of the Terms | While the account is open, then 4 years |
| Support correspondence | 24 months after the last message |
| Referrals and the free months from them | While the referring farm’s account is open. When a farm’s account is deleted, its referrals and free months are deleted with it; a referral made by another farm then shows it only as “a farm that has closed” |
| Record of our staff’s actions and views (audit log) | 3 years |
| Reports about farms’ websites, and copyright notices | 3 years after they are closed |
| Early-access sign-ups | Until an account is opened, you ask, or 24 months |
| Error and request logs | 30 days |
| Backups | No more than 35 days after deletion from the live service |
| Aggregate counts across farms | Indefinitely; they are de-identified totals |
9. When we act for a farm: its customers’ information
When a farm uses Pasturly, we hold its customers’ information — names, contact details, addresses, orders, payments recorded, pack weights, CSA and box details, shares of an animal and cut sheets, marketing consent and email history — on the farm’s behalf, as its processor or service provider. We use it only to run the farm’s business for it, as our Data Processing Agreement with the farm says. We do not use it for our own purposes, combine it across farms, sell it, or use it to market Pasturly.
- Customers can see, download or ask to forget their information themselves, from their account page on the farm’s website (signed in with their email). The farm can do the same from its admin.
- Requests that come to us about a farm’s customer are passed to the farm.
- Email to customers: receipts, bills and reminders are sent because of something the customer did or has coming, and we do not track whether they are opened. A farm’s newsletters go only to customers who said yes, carry a one-click unsubscribe, and record opens and clicks for that farm.
- Farm websites count visits on our server without cookies, keeping only numbers by day and page; no internet address or browser details are stored. A farm may add Google Analytics or the Meta Pixel, which load only after the visitor accepts, and never on checkout, payment, account or sign-in pages.
10. Your choices and rights
Farms and their staff can see and correct most of their information in the admin, and can ask us at admin@pasturly.com to access, correct, delete or receive a copy of their personal information. We will answer within 30 days (45 where a state law allows an extension, telling you why). We may need to confirm who you are. You will not be treated differently for asking. If we decline, you may appeal by replying to our answer, and, if you remain unhappy, contact your state attorney general.
Closing a farm’s account. The farm’s owner can close the account from Setup in the admin, after being offered a full download of the farm’s data. The account is kept out of use for 30 days, then deleted. See our Terms, Section 13.
Customers of a farm should use their account page on the farm’s website, or contact the farm.
Deleting your data (for app stores)
- A farm can delete all its data, including its customers’, from Setup in the admin (Reset farm data at once, or Close this farm, which deletes it after 30 days), or by writing to admin@pasturly.com from the owner’s address.
- A staff member can ask the farm to remove them, or write to us.
- A farm’s customer can ask to be forgotten from their account page on the farm’s website, or by asking the farm. Orders and shares of an animal are kept without their name, because they are the farm’s financial and animal records.
- Deleted information leaves our backups within 35 days.
11. Security
We protect information with measures appropriate to it, including: each farm’s data kept separate in every query; sign-in by single-use links with no passwords, and links, sessions and PINs stored only as one-way hashes; two-step sign-in for our own staff; a log of every view of a customer’s details that the farm can read, and an append-only log of our staff’s actions; encryption in transit; separate development and production systems; and nightly backups. Card numbers are handled by Stripe, never by us.
No system is perfectly secure. If a breach affects a farm’s customers, we will tell the farm without undue delay and within 72 hours after we confirm it, as our Data Processing Agreement says, and help it tell its customers.
12. Where information is kept
In the United States. Pasturly is offered to farms in the United States only.
13. Children
Pasturly is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If we learn we have, we delete it.
14. State privacy disclosures
Section 2 lists the categories of personal information we collect, where it comes from, why we use it and who receives it, and Section 8 says how long we keep it. We do not sell personal information. We share it for cross-context behavioral advertising only through the Meta Pixel on pasturly.com and the sign-up page at app.pasturly.com/start, which runs only for visitors who accept it, and you can withdraw that at any time from Cookie choices at the foot of any page.
15. Changes
We will post changes here and change the date at the top. For a material change we will email farm owners at least 30 days before it takes effect.
16. Contact
Nature’s Grove Farm LLC (Pasturly), 138 Penns Grove Lane, Latrobe, PA 15650. Email admin@pasturly.com for privacy questions and requests, security reports, and abuse and copyright reports.