Legal / Privacy
Privacy Policy
This template describes how Aversify handles personal information while operating a California agricultural workforce compliance evidence platform for farm labor contractors, growers, supervisors, and workers.
Pre-launch template - counsel review required
Scope
Aversify processes account information, organization records, worker roster data, training evidence, signatures, incident records, compliance documents, and support communications to provide compliance evidence services.
California worker data can be consumer personal information under the CCPA/CPRA. When Aversify processes worker information for a farm labor contractor, grower, or other customer, Aversify is expected to act as a Service provider for that customer unless a signed agreement says otherwise.
Personal information categories
The product may handle identifiers, employment-related information, training and certification records, signature evidence, device and audit metadata, incident-reporting information, and communications with Aversify or customer administrators.
The worker PII inventory is source-controlled separately so engineering and legal can trace privacy claims back to the actual schema before launch.
Use of information
Aversify uses personal information to create and preserve compliance evidence, authenticate users, enforce access controls, support customer workflows, generate audit packets, respond to support requests, and maintain security.
Aversify does not use worker personal information for cross-context behavioral advertising in this template. Any production change to that statement requires legal review and a product design update.
Service provider commitments
Aversify will process worker personal information only for the business purposes defined in the customer agreement, data processing addendum, and documented product workflows.
Aversify will not sell worker personal information or retain, use, or disclose it outside the permitted service-provider purposes without customer authorization and updated legal terms.
Worker privacy requests
Workers should direct access, deletion, correction, and portability requests to their employer or the organization responsible for their work records. Aversify supports customers in responding to those requests through documented DSAR workflows.
Some compliance evidence must be retained to satisfy occupational safety, wage-hour, workers' compensation, agricultural labor, or litigation-hold obligations. Deletion workflows may anonymize personal identifiers while preserving legally required evidence.
Security and retention
Aversify uses role-based access, tenant isolation, audit logging, append-only evidence ledgers, and cryptographic hash chains to protect compliance records.
Retention periods depend on the record type and legal obligation. Production retention language must be approved by counsel before customer signature or public launch.