Open the web portal

Legal

Privacy Policy

Last updated:

This policy explains what information WeightechUSA collects when you use WSysFarm — the mobile app for Android and iOS, the web portal at app.wsysfarm.com/portal, the sync server behind them, and the website wsysfarm.com — and what we do with it. We have tried to write it in plain language.

The short version

  • Your farm records belong to you. We store them so the app and portal can work, and we do not sell them.
  • We use no advertising, no ad networks, no third-party trackers and no tracking cookies.
  • The app does not collect your GPS location. On older Android phones it asks for location permission only because Android requires it for Bluetooth scanning.
  • Our visitor statistics are self-hosted and cookieless. We do not store your IP address for them, and the raw records are deleted after 90 days.
  • You can download your data and delete your account from the web portal at any time.

1. Who we are

WSysFarm is made and operated by Weightech USA LLC, a Florida limited liability company, 10384 W State Road 84, Suite 6, Davie, FL 33324, USA (“WeightechUSA”, “we”, “us”). For the personal information described in this policy, WeightechUSA is the data controller (controlador under Brazil’s LGPD).

Privacy contact and LGPD data protection officer (encarregado): WeightechUSA, by email at sales@weightechusa.com.

2. Information we collect

2.1 Account information

  • When you sign up: your email address, a password and your farm’s name. You may also add a display name.
  • Your password is never stored in readable form. We keep only a salted PBKDF2-SHA256 hash of it, so not even we can see it.
  • Team members: if you invite people to your farm account, we store their email address, their role (owner or member), who invited them and when the invitation expires (by default, after 7 days).
  • Plan and account status: your plan, whether the account is active, and security counters such as failed sign-in attempts.

2.2 Farm data you enter

Everything you record in the app or portal, for example: farms and pastures, groups, animals (IDs, ear tags and RFID numbers, breed, sex, parentage), weights, vaccinations, treatments, illnesses and withdrawal periods, breeding, pregnancy checks, births and milkings, moves, sales and deaths, costs, the activity log, reminders and tasks, and anything you upload through a CSV import.

Some of these records can contain information about other people — for example a buyer’s or a veterinarian’s name in a note. Please only enter information you have the right to share.

2.3 Information stored on your phone

WSysFarm works offline. Your records are saved in a database on your phone and are sent to our server only when you are signed in to a WSysFarm account and the app syncs. Your sign-in tokens are kept in your phone’s secure storage (the iOS Keychain or Android Keystore). Deleting your account on our server does not erase the copy on your phone; uninstalling the app or clearing its data does.

2.4 Device and sync information

When a phone syncs, we record a random device identifier created by the app, the device name and platform (Android or iOS), the app version and the time of the last sync. We use this to keep your phones in sync and to help with support.

2.5 Bluetooth, location and notification permissions

  • Bluetooth is used to connect to WeightechUSA scales and compatible RFID readers. What the app reads from them — weights and tag numbers — becomes part of your farm data.
  • Location: on Android 11 and older, Android requires apps to hold the location permission before they can scan for Bluetooth devices, so the app asks for it. WSysFarm does not read your GPS position and does not collect or upload your location. On Android 12 and newer, and on iOS, the app does not ask for location at all.
  • Notifications: if you allow them, reminder notifications are scheduled on your phone by the app itself. They do not go through a third-party push service.

2.6 Security and server logs

To protect accounts, we keep an audit log of security-relevant events — such as sign-ins, failed sign-ins, password resets, team changes and administrative actions. Each entry records the time, the account involved (user ID and email), the action and the IP address it came from. IP addresses are also used, briefly and in memory, to rate-limit requests, and repeated failed sign-ins temporarily lock an account.

2.7 Website and portal statistics

We count visits to wsysfarm.com and to the web portal with our own, self-hosted tool. It uses no cookies and no third-party service. For each page view we store:

  • the date and time, and the page address (without any query string);
  • the domain of the website that sent you, if any (for example “google.com”, not the full address), and campaign tags (utm_source, utm_medium, utm_campaign) if the link had them;
  • device type, browser and operating system, worked out from your browser’s user-agent (the full user-agent is not stored);
  • an approximate location looked up from your IP address in a database kept on our own server — country, region, city and the approximate coordinates of that area (not your precise location) — plus the name and number of the network operator (for example your internet provider or company) and whether it is a data-center network;
  • a pseudonymous visitor code: a one-way hash of your IP address, browser user-agent and the site, made with a random key that is replaced and thrown away every day. It lets us count unique visitors within a day but cannot be reversed or linked across days.

Your IP address itself is not stored for statistics. Known bots are ignored. In the web portal, page views are counted only while you are signed in, and they are linked to your farm account. Raw page-view records are deleted after 90 days; after that we keep only daily totals.

2.8 Payments

Paid plans are billed through PayPal. You pay on PayPal’s site, so WeightechUSA never receives or stores your full card or bank details. From PayPal we keep your subscription ID, plan, status, renewal date and whether you have cancelled. PayPal’s own privacy statement covers the information you give PayPal.

2.9 When you contact us

If you email us, we keep the correspondence and the details you give us so we can help you.

3. How we use it, and our legal bases

We use information only for these purposes. The legal basis in brackets is the one we rely on under Brazil’s LGPD (Art. 7); similar principles apply elsewhere.

  • To provide WSysFarm — creating your account, storing and syncing your records, running the portal, team access, reminders and imports [performance of a contract].
  • To send service emails — password resets, team invitations and, if your farm turns them on, a daily email listing reminders that are due (task names, animal labels and dates) [performance of a contract].
  • To bill paid plans through PayPal [performance of a contract; legal obligations for tax and accounting records].
  • To keep the service secure — audit logs, rate limits, lockouts and investigating abuse [legitimate interest; exercise of rights; legal obligation where applicable].
  • To understand and improve the website and portal using the cookieless statistics above [legitimate interest].
  • To answer your questions and requests, including privacy requests [performance of a contract; legal obligation].
  • Where we ask for your consent (for example, phone permissions), we rely on it and you can withdraw it at any time in your phone’s settings [consent].

We do not use your information for advertising, we do not build advertising profiles, and we do not make decisions about you based solely on automated processing.

4. Cookies and browser storage

WSysFarm does not use cookies for tracking, and the website stores nothing in your browser. The web portal needs to keep you signed in: it holds your short-lived access token in memory only, and a refresh token in your browser’s sessionStorage, which the browser clears when you close the tab or window. Both are strictly necessary for the portal to work, and neither is used for tracking.

5. Who we share it with

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. We disclose it only to:

  • Service providers that run WSysFarm for us, under contracts that limit their use of the data:
    • DigitalOcean — server hosting and server snapshots (New York, United States);
    • Backblaze — encrypted off-site backup storage (Backblaze B2, United States);
    • Brevo (Sendinblue SAS, France) — delivery of our service emails, which contain your email address and the email’s content;
    • PayPal — payment processing for paid plans.
  • People in your farm account. Owners and members of the same farm account can see that farm’s records and the team list.
  • Authorities, when the law requires it, or when needed to protect the rights, property or safety of our users, the public or WeightechUSA.
  • A successor business, if WeightechUSA or the WSysFarm product is sold or reorganized. This policy would continue to apply to your information.

6. International transfers

Our servers are in the United States. If you use WSysFarm from Brazil or another country, your information is transferred to and stored in the United States, and service emails are processed by Brevo in the European Union. The United States may not offer the same level of protection as your country. For users in Brazil, the transfer is based on LGPD Art. 33, IX, together with Art. 7, V: it is necessary to perform the contract you ask to enter into with us — you contract directly with Weightech USA LLC for a service operated in the United States. Our service providers (DigitalOcean, Backblaze, Brevo and PayPal) are contractually bound to protect personal data and to use it only to provide their services to us, and we apply the protections described in this policy wherever the data is processed.

7. How long we keep it

  • Account and farm data: for as long as your account is active.
  • After you delete your account: the account is disabled immediately and its data is permanently purged after 30 days. Audit-log entries about the account are kept for security but anonymized (your email and IP address are removed), and page-view statistics lose their link to your farm account.
  • Backups: the database is backed up every night. Nightly copies are kept on the server for 14 days, an encrypted off-site copy is uploaded each night to Backblaze B2 (United States) and kept for 30 days, and DigitalOcean keeps the last four weekly server backups (about 4 weeks). Deleted data therefore disappears from all backups within about 30 days after it is purged — up to about 60 days after a deletion request. We do not restore deleted data from backups except to recover from a failure.
  • Security audit log: kept for as long as the account exists. When the account is purged, its entries are anonymized (email and IP address removed).
  • Website and portal statistics: raw page views for 90 days, then daily totals only.
  • Billing records: kept, as minimal and anonymized records, for as long as tax and accounting laws require (generally up to 7 years in the United States).
  • Data on your phone: until you delete it in the app, clear the app’s data or uninstall the app.

8. Security

We protect your information with encrypted connections (HTTPS/TLS), hashed passwords, single-use hashed password-reset links, sign-in rate limits and lockouts, short-lived access tokens, restricted server access and regular backups. No system is perfectly secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the authorities as the law requires.

9. Your rights and choices

  • Download your data: in the web portal, open Account and choose Download my data; in the app, go to Settings → Account → Download my data. You get a JSON file.
  • Correct your data: edit your records in the app or portal at any time.
  • Delete your account: see How to delete your account and data.
  • Turn off reminder emails: the farm owner can switch daily reminder emails off in the portal. You can turn off notifications or Bluetooth access in your phone’s settings at any time.
  • Anything else: email sales@weightechusa.com from the email address on your account. We may need to confirm your identity before acting on a request, and we will not charge you for it.

9.1 Rights for US residents

Depending on your state (for example California, Colorado, Connecticut, Virginia or Texas), you may have the right to:

  • know what personal information we collect, use and disclose, and get a copy of it;
  • correct inaccurate personal information;
  • delete personal information we hold about you;
  • opt out of the sale or sharing of personal information and of targeted advertising — we do not sell or share personal information or use it for targeted advertising;
  • not be treated differently for exercising these rights; and
  • appeal if we decline your request — reply to our decision and ask us to reconsider.

In the last 12 months we have collected these categories of personal information: identifiers (email, name, device ID, IP address), commercial information (plan and subscription records), internet or network activity (the page-view statistics and security logs described above), approximate location derived from IP address, and professional or business information (your farm records). We collected them from you, your devices and PayPal, for the purposes in section 3, and disclosed them only to the recipients in section 5. We do not collect sensitive personal information as defined by California law, and we do not knowingly sell or share the personal information of consumers under 16.

You can use an authorized agent; we may ask for proof of the agent’s authority and confirm your identity directly. We respond within 45 days, as allowed by law.

9.2 Rights for users in Brazil (LGPD)

Under Art. 18 of the Lei Geral de Proteção de Dados (Law 13.709/2018), as a data subject (titular) you may ask us for:

  • confirmation that we process your personal data, and access to it;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
  • portability of your data to another provider;
  • deletion of data processed with your consent;
  • information about the public and private entities we share your data with;
  • information about the possibility of not giving consent, and its consequences; and
  • withdrawal of your consent.

You can also object to processing based on legitimate interest if you believe it does not comply with the LGPD. Send your request to our encarregado at sales@weightechusa.com. We will respond within 15 days. You also have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

10. Children

WSysFarm is a tool for farms and ranches and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If you believe a child has given us personal information, contact us and we will delete it.

11. Self-hosted (Enterprise) servers

Enterprise customers can run the WSysFarm server on their own hardware. In that case the customer — not WeightechUSA — controls the data stored on that server, and its own privacy policy applies to it.

12. Changes to this policy

We may update this policy as WSysFarm changes. We will post the new version here with a new “Last updated” date and, if the changes are significant, tell you by email or in the portal before they take effect.

13. Contact us

Weightech USA LLC (WeightechUSA)
10384 W State Road 84, Suite 6, Davie, FL 33324, USA
Email: sales@weightechusa.com
Website: weightechusa.com

See also our Terms of Service and Accessibility Statement.