Version 1.0 · Effective 27 September 2026 · Forms part of the AgroConectSH Terms of Service
This Data Processing Agreement ("DPA") forms part of the Terms of Service between the Customer (controller) and hQube LLC, acting through its AgroConectSH division (processor). It applies where hQube processes personal data on the Customer's behalf when providing AgroConectSH, in accordance with Article 28 of the EU General Data Protection Regulation (GDPR) and equivalent laws, including the Brazilian LGPD.
hQube processes personal data only to provide the AgroConectSH service under the Terms, for the duration of the subscription and the deletion period in Section 9.
Hosting, storage and analysis of field, sensor and farm data; user account management and authentication; AI-assisted agronomic analysis; customer support; and billing administration.
hQube processes personal data only on documented instructions from the Customer, which are given by the Terms, this DPA and the Customer's use of the service. hQube will inform the Customer if it believes an instruction infringes applicable data protection law.
Persons authorised to process personal data are bound by confidentiality. hQube maintains appropriate technical and organisational measures, including encryption in transit (TLS), encryption at rest by our hosting provider, row-level access controls in the database, role-based administrative access, logging, regular backups and secure development practices.
The Customer authorises the following sub-processors. hQube will give at least 30 days' notice of new sub-processors by updating this page and notifying account owners by email; the Customer may object on reasonable data protection grounds and, if no solution is found, cancel the subscription.
Where personal data is transferred outside the EU/EEA, hQube ensures appropriate safeguards, in particular the European Commission's Standard Contractual Clauses or an adequacy decision (including the EU-US Data Privacy Framework where the recipient is certified).
hQube assists the Customer, taking into account the nature of processing, with responding to data subject requests and with data protection impact assessments where required. hQube will notify the Customer without undue delay, and in any case within 48 hours, after becoming aware of a personal data breach affecting Customer personal data, with the information reasonably available.
Within 30 days after the end of the subscription, hQube will, at the Customer's choice, return Customer personal data in a common format or delete it, unless retention is required by law. Backups are overwritten within a further 30 days.
hQube will make available information necessary to demonstrate compliance with this DPA and allow audits, including inspections, by the Customer or an auditor it mandates, with at least 30 days' notice, no more than once per year, during business hours and subject to confidentiality.
Liability under this DPA is subject to the limitations in the Terms, except where mandatory law provides otherwise. In case of conflict between this DPA and the Terms regarding personal data, this DPA prevails. Contact: support@agroconect.com.
