Privacy Policy

1. Who we are and what this covers

Vozaman Ventures LLC (“Tsip Tsip”, “we”, “us”) operates the Tsip Tsip website at https://tsiptsip.com, its subdomains, and our mobile applications (the “Service”). This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It applies to farm owners and team members, marketplace buyers and sellers, forum participants, guest buyers and visitors to our public pages.

For personal data we collect for our own purposes (accounts, security, the marketplace, the forum, service improvement) Vozaman Ventures LLC is the controller. Farm records you enter about your own business, workers and customers are your data: you decide what to put in and you are responsible for having a lawful basis to do so, and we process it on your behalf to provide the Service.

2. Data we collect

Information you give us

• Account data: email address, name, a password (stored only as a cryptographic hash by our authentication provider), language and country preferences, and, if you use it, second-factor (2FA) enrollment.
• Sign-in with Google (or another provider): the name, email address and profile identifier the provider shares with us after you authorize it. We never see your provider password.
• Farm data: farm name and settings; flocks, breeds, egg and production records; feed and inventory; health, disease, vaccination, medication, laboratory and inspection records; certifications; incubation and breeding records; expenses, salaries, money transfers and reserves; customers and orders; and staff and veterinarian contacts you choose to enter.
• Farm location: the location you set for your farm (see Section 5).
• Marketplace data: storefront and listing text, photos, prices, areas served, orders, reviews and reports.
• Community content: forum posts, replies, votes and reports.
• Communications: questions you put to the Help assistant, feedback you send us, and messages when you contact us. In the mobile app, a “Report a problem” message can include a screenshot. If you open the form by shaking your phone, the app takes a picture of the screen you were on and shows it in the form; you can look at it, remove it and choose whether to send it. A screenshot can show whatever was on that screen, such as farm records, customer names or prices, so remove it if you would rather not send it. Only you and our platform team can open it.
• Invitations: the email address of a person you invite to your farm.

Information collected automatically

• Consent record: when you accept our Terms we store your user ID, the version accepted, the time and your IP address, as evidence of consent.
• Security and abuse prevention: IP addresses and timestamps used for rate limiting sign-in attempts, guest orders and other sensitive actions.
• Public-page visit log: when someone opens a public page while not signed in we record the page path, the referring site, the browser’s user-agent string, and an approximate country derived from the connection by our hosting provider. This log is our own first-party record: it sets no cookies and carries no advertising identifiers, and is used for aggregate statistics. It is separate from Google Analytics (below).
• Website analytics (Google Analytics): when you open our website, Google Analytics measures how it is used. See Section 7 for exactly what is sent. It does not run inside the mobile apps.
• Device and notification tokens: if you enable notifications, a web-push subscription or the push token for your phone, so we can deliver reminders and alerts.
• Crash and performance reports (mobile app): the iPhone app uses Apple’s MetricKit. When the app crashes, freezes or uses too much processor time or storage writing, iOS hands the app a technical report about it, and the app sends that report to us. It contains the app version and build, the iOS version, the device model (for example “iPhone17,1”) and technical details such as call stacks and error codes. It is sent without your name, email address, account or farm identifier and is not linked to your account. We use it only to find and fix bugs. We see your IP address when it arrives, as we do for any request, and use it only for rate limiting.
• Technical logs: error and request logs generated by our hosting and database providers, which may include IP address, device and browser type.

We do not knowingly collect special categories of data (such as health, biometric or political data about people). Health records in the Service relate to animals.

3. How we use data, and our legal bases

We use personal data to:

• Provide the Service: create and secure your account, run your farm records, show your storefront, process orders and let members of your farm collaborate (performance of our contract with you).
• Send service messages: sign-in and password emails, invitations, reminders, compliance and regional disease alerts, and notices about changes to our terms (contract, and legitimate interests in keeping you informed).
• Keep the Service safe: detect abuse and fraud, enforce rate limits, moderate the marketplace and forum, investigate reports, and comply with our terms (legitimate interests, and legal obligations).
• Improve the Service: understand which features are used, which questions the Help assistant could not answer, which pages of our website are visited, roughly where visitors come from and how the site performs (through Google Analytics), and fix bugs (legitimate interests).
• Meet legal duties: respond to lawful requests, keep records we are required to keep and establish or defend legal claims (legal obligation, legitimate interests).
• Optional features such as notifications and location-based weather: (consent, which you can withdraw at any time).

Where the law of your country requires a specific legal basis (for example the EU and UK GDPR), the bases above are the ones we rely on. We do not sell personal data, we do not use it for advertising, and we do not use it for profiling that produces legal or similarly significant effects on you.

4. Guest orders on the Bazar

When you order from a farm on the Bazar as a guest, we store the name and phone number you enter so the farm can call you and deliver your order. Only the farm you ordered from (and our small platform team) can see them — they are never shown publicly. We keep this contact data for 24 months after the order and then remove it automatically, leaving only what the farm's records need: the product, quantity, price and dates. You can also ask us at any time to remove your name and phone from all of your past guest orders — contact us and we will do it.

To limit abuse we also keep the IP address and phone number of guest orders in a short rate-limit log, and only the platform team can read it.

5. Farm location

If you set a location for your farm, we store the coordinates in encrypted form. We use it to show local weather and to match your farm to regional alerts such as neighbourhood disease warnings. If a farm publishes a public storefront, the region or area you choose to show on the storefront is visible to the public; your exact coordinates are not published by us.

Using your phone’s location

If you tap “use my location” (in the app or on the website) and allow it, your device takes a single reading and rounds the coordinates to two decimal places, about 1 km, before anything is sent anywhere. The rounded coordinates are not your exact position. Your device then sends those rounded coordinates directly to BigDataCloud (api.bigdatacloud.net), a third-party reverse-geocoding service, to find the country, region and town name. This request does not pass through our servers, so BigDataCloud also sees your device’s IP address, but it does not see your name, email address or account. We then save the rounded location, and the name it returned, to your farm. The iPhone app’s place-name search can also use Apple’s geocoding service on your phone, and what you type there is handled by Apple under Apple’s privacy policy.

Weather

Weather is fetched by our servers, not by your device, using your farm’s saved location. Where we have switched it on, the forecast comes from Apple WeatherKit, and the request to Apple contains the farm’s coordinates but not your name or account. Otherwise, and whenever WeatherKit is not available, the forecast comes from Open-Meteo, a third-party weather service. To resolve a place name you typed, our servers send that name to Open-Meteo’s geocoding. These services see the request but not your name or account. When the weather screen shows WeatherKit data it shows Apple’s attribution and a link to Apple’s legal notice.

You can remove or change the location in your farm settings. We do not track the precise location of your device in the background.

6. Who we share data with

We share personal data only in these ways:

• Members of your farm, according to the roles you grant them.
• Sellers and buyers: a Seller sees the contact details in an order placed with them; buyers see the storefront and listing information a Seller publishes. Reviews and forum posts show the display name you use.
• The public: anything you choose to publish (public listings, storefronts, reviews, forum posts).
• Service providers (processors) that process data on our instructions:
  • Supabase: database, authentication and file storage;
  • Vercel: hosting and edge network, including approximate country detection;
  • Resend: delivery of transactional email;
  • Apple and Google push-notification networks, and browser push services: delivery of notifications;
  • Apple WeatherKit and Open-Meteo: weather, and Open-Meteo place-name geocoding, from the farm location our servers hold (see Section 5);
  • BigDataCloud: turns the rounded (about 1 km) coordinates your device sends when you tap “use my location” into a country, region and town name; your device contacts it directly (see Section 5);
  • Apple (MetricKit, Apple’s crash and performance reporting built into iOS): produces the reports on your phone that the app then sends to us; Apple does not receive them from us (see Section 2);
  • Google (Google Analytics): website usage statistics (see Section 7);
  • our AI service provider: generating answers for the Help assistant from the question you type, without your name or email;
  • Google (or another identity provider you choose): sign-in.
• Authorities and advisers where we are legally required to, to protect rights, safety and security, or to our legal and professional advisers under confidentiality.
• Business transfers: in a merger, acquisition or sale of assets, in which case we will require the recipient to honour this policy and will tell you.

We require providers to protect the data and use it only for our purposes. Our platform team can access personal data where needed to operate, secure and support the Service and handle reports, and that access is restricted and limited to staff who need it.

7. Cookies and similar technologies

We use the storage the Service needs to work, plus one analytics service, Google Analytics, described below. We do not use advertising cookies or cross-site tracking cookies of our own, and we do not run advertising networks or retargeting on the Service.

• Authentication cookies set by our authentication provider keep you signed in and protect your session (strictly necessary).
• Preference storage: your chosen language (a locale cookie), sidebar state and theme, kept in cookies or your browser’s local storage so the interface remembers your choices.
• Push and offline features: if you install the app or allow notifications, your browser stores a service worker and a push subscription.
• Google Analytics cookies (named _ga and _ga_ followed by an identifier): these are not strictly necessary. They hold a random identifier that lets Google Analytics tell returning browsers apart and group page views into visits.

Google Analytics

We use Google Analytics 4, a service of Google, on our website to see which pages are visited, roughly where visitors come from (for example the referring site and country) and how the site is performing, so that we can fix problems and improve it. Google acts as our service provider (processor) for this and receives the data described here.

On this site Google Analytics is loaded in its standard configuration. Each page view sends Google the page address and title, the referring page, the time, your browser, device and screen type, your language, and the identifier stored in the Google Analytics cookie. Google derives an approximate location (such as country or city) from your IP address. Google Analytics 4 does not log or store IP addresses, but your browser necessarily sends its IP address to Google’s servers when the script loads. Google’s standard automatic measurements may also record scrolls, outbound link clicks, file downloads and site search. We do not send Google your name, email address, account or farm identifier, or any of your farm records, and we do not set up a user ID. The script is part of every page of the website, including pages you see after signing in, but it does not read the content of your farm records.

We do not enable Google’s advertising features (such as Google signals or advertising personalisation) and we do not use Google Analytics data for advertising. Google handles data it receives under its own privacy policy and terms; see How Google uses information from sites or apps that use its services and the Google Privacy Policy.

Your choices

• Block or delete cookies in your browser settings, or use a browser or extension that blocks analytics scripts. The Service keeps working without Google Analytics.
• Install Google’s opt-out add-on for your browser: tools.google.com/dlpage/gaoptout.
• We do not currently change behaviour based on a browser’s “Do Not Track” signal or Global Privacy Control, so use one of the options above to opt out.
• You can also object to this processing by contacting us at our contact address, which is being set up and will be published on this page before general launch (until then, use the feedback option inside the app).

You can clear the other storage in your browser at any time; signing in and some preferences will not work without the necessary items. We do not currently show a cookie consent banner.

8. How long we keep data

• Account and farm data: for as long as your account is open. When you delete your account or farm, we delete or de-identify the associated data, except where we must keep it (below). Copies in backups expire on the provider’s normal backup cycle.
• Guest order contact data: 24 months after the order, then removed automatically (see Section 4).
• Consent records: kept for as long as needed to demonstrate that terms were accepted.
• Security and rate-limit logs, and the public-page visit log: kept only for as long as needed for their purpose and reviewed periodically.
• Google Analytics data: kept in our Google Analytics account for no more than 14 months, then deleted by Google automatically.
• Crash and performance reports: kept only as long as needed to find and fix the problem, and reviewed periodically. They are not tied to your account, so they are not removed when you delete it.
• Feedback and its screenshots: kept with your account and removed or de-identified when you delete your account, like the rest of your account data.
• Forum posts: removed or de-identified when you delete them or your account, although replies by others that quote them may remain.
• Legal and dispute needs: we may keep data longer where required by law or to establish, exercise or defend legal claims.

9. Security

We use measures appropriate to the risk, including encryption in transit (HTTPS), hashed passwords, encrypted farm coordinates, row-level access controls so that farms can only read their own data, restricted server-side keys, rate limiting, optional two-factor authentication (required for platform administrators), and audit trails for sensitive administrative actions.

No system is completely secure. Please use a strong, unique password, enable 2FA, and tell us promptly at our contact address, which is being set up and will be published on this page before general launch (until then, use the feedback option inside the app) if you think your account has been compromised. If a breach affects your personal data we will notify you and the relevant authorities as required by law.

10. International transfers

Vozaman Ventures LLC is based in the United States, and our providers, including Google (Google Analytics), operate in the United States and other countries. If you use the Service from outside the United States, including the European Economic Area, the United Kingdom, Georgia or Türkiye, your data will be transferred to and processed in countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards such as standard contractual clauses with our providers.

11. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a portable copy;
• correct inaccurate data (most of it you can edit yourself in the app);
• delete your data (see below);
• restrict or object to certain processing, including processing based on legitimate interests;
• withdraw consent at any time, without affecting earlier processing (for example, turn off notifications);
• not be subject to decisions based solely on automated processing with legal effects (we do not make such decisions);
• lodge a complaint with your data-protection authority.

How to exercise them

• Delete your account: farm owners can do this in Settings → Danger Zone, or in the mobile app. This is permanent.
• Guest buyers: ask us to remove your name and phone from all past guest orders (Section 4).
• Everything else: contact us at our contact address, which is being set up and will be published on this page before general launch (until then, use the feedback option inside the app). We may need to verify your identity, and we will respond within the time the applicable law requires (generally within 30 days).

Regional notes

• EU / UK / Georgia / Türkiye: the rights above reflect the GDPR and UK GDPR, Georgia’s Law on Personal Data Protection and Türkiye’s KVKK, as applicable to you.
• California and other U.S. states: you may have rights to know, access, correct and delete personal information and to opt out of its sale or sharing for cross-context advertising. We do not sell personal information and do not share it for cross-context advertising (we do not enable Google’s advertising features in Google Analytics), and we will not discriminate against you for exercising your rights.

12. The Help assistant

When you ask the Help assistant a question, the text is sent to our AI service provider so a reply can be generated. Please do not include sensitive personal information in your questions. If the assistant could not answer from our knowledge base, we log the question, your language and the farm it came from so we can improve our answers. Replies are automated and can be wrong (see our Terms, Section 8).

13. Children

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the Service or the law changes. The “Effective” date above shows the current version. For material changes we will notify you in the app or by email, or ask you to review the updated policy when you next sign in. Our Terms of Service also apply to your use of the Service.

15. Contact us

Controller: Vozaman Ventures LLC, United States. For privacy questions, requests or complaints, contact our contact address, which is being set up and will be published on this page before general launch (until then, use the feedback option inside the app).