California Privacy Notice (CCPA/CPRA)
Effective date: November 3, 2025
This California Privacy Notice supplements the Privacy Policy of Crop Help and applies solely to California residents in their capacity as consumers, in accordance with the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, “CCPA/CPRA”). Crop Help is owned and operated by Stem Minds Corp. (“Stem Minds”, “we”, “us”, “our”), based in Ontario, Canada.
Except as otherwise noted, the statements in this Notice describe our current practices for the preceding twelve (12) months and going forward. Capitalized terms not defined here have the meanings given in our Privacy Policy.
1) Scope & Exclusions
This Notice covers personal information of California residents collected by Stem Minds (Crop Help) as a business (or as a service provider when applicable). It does not apply to:
- Publicly available information as defined by CCPA/CPRA.
- De-identified or aggregated information that cannot reasonably be linked to you.
- Information exempt from CCPA/CPRA (e.g., certain medical, credit, or employment records regulated by other laws).
2) Categories of Personal Information We Collect
The table below identifies the CCPA/CPRA categories of personal information we may collect, typical sources, business purposes, whether we disclose for a business purpose, and whether we “sell” or “share” (for cross-context behavioral advertising) such information.
| CCPA Category | Examples | Sources | Business Purposes | Disclosed for Business Purpose | Sold or Shared* |
|---|---|---|---|---|---|
| (A) Identifiers | Name, email, account ID, IP address | You; your organization; automatic collection | Account creation, authentication, support, security, service delivery | Yes (hosting, support, security) | No |
| (B) Customer records | Billing contact, organization info | You; your organization | Billing, account administration, support | Yes (billing processors) | No |
| (C) Protected classification characteristics | Not collected by default | N/A | N/A | No | No |
| (D) Commercial information | Subscription tier, purchase history | You; automatic (receipts) | Provide Services, analytics, support | Yes (billing/analytics) | No |
| (E) Biometric information | Not collected | N/A | N/A | No | No |
| (F) Internet/Network activity | Usage logs, device/browser data, telemetry | Automatic | Security, diagnostics, improve Services | Yes (hosting/analytics) | No |
| (G) Geolocation data | Approximate location from IP; optional field coordinates if provided | Automatic; you | Security; map features you enable | Yes (map/hosting when enabled) | No |
| (H) Sensory data | Not collected (audio/visual of people) | N/A | N/A | No | No |
| (I) Professional/employment | Role or team if provided by you | You; your organization | Access control, collaboration | Yes (hosting/support) | No |
| (J) Education information | Not collected unless provided by you | You | Account context | Possible (hosting) | No |
| (K) Inferences | Service usage trends (aggregated) | Analytics | Improve Services and UX | Yes (analytics in aggregate) | No |
| Sensitive PI (CPRA) | We do not seek to collect SPI (e.g., precise geolocation, government IDs) | N/A | N/A | No | No |
3) Business & Commercial Purposes
We collect, use, and disclose personal information for the following purposes:
- Provide, maintain, and improve the Services (including AI/computer vision features you use).
- Secure the Services, prevent fraud/abuse, and debug/repair errors.
- Handle account administration, billing, and customer support.
- Analyze Service performance and develop new features.
- Comply with law, enforce terms, and protect rights and safety.
4) Sources of Personal Information
- Directly from you (e.g., account signup, uploads, support).
- Automatically (e.g., device/browser data, telemetry).
- Your organization/team if you are an authorized user.
- Service providers/integrations you connect (per your settings).
5) Disclosures of Personal Information
We disclose personal information to service providers for business purposes under written contracts that require them to use the information only to perform services for us and to protect it. Typical categories of recipients include hosting, storage, analytics, customer support tools, payment processors, and security service providers.
We may also disclose information when required by law or to protect our rights, users, or the public, and in connection with corporate transactions (subject to appropriate safeguards).
7) Sensitive Personal Information (SPI)
We do not seek to collect SPI (e.g., precise geolocation, government IDs, union membership). If SPI is processed for limited, permissible purposes (e.g., security), we restrict the use and do not use it to infer characteristics. California residents have the right to limit the use/disclosure of SPI; we will provide a self-service control if we materially process SPI beyond permitted purposes.
8) Retention
We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, to meet legal obligations, resolve disputes, and enforce agreements. Retention varies by data type (e.g., account vs. telemetry vs. uploads). When no longer needed, we delete or de-identify information consistent with our policies.
9) Your California Privacy Rights
California residents have the following rights, subject to exceptions:
- Right to Know/Access: Request disclosure of the categories and specific pieces of personal information we collected about you.
- Right to Delete: Request deletion of personal information we collected from you.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Share: If we sell or share personal information, opt-out of such activities.
- Right to Limit Use of SPI: Limit certain uses/disclosures of sensitive personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights.
We will respond within the timeframes required by law. If we deny your request (e.g., due to an applicable exception), we will explain the reason. You may submit up to two “Right to Know” requests in a 12-month period.
10) How to Exercise Your Rights
You can submit requests by:
- Email: privacy@stemminds.com
- In-product: account settings (where available)
Verification: We must verify your identity to process certain requests. Steps may include matching account details, email verification, or other reasonably necessary steps. Authorized agents may submit requests on your behalf if they provide proof of authorization and we can verify your identity directly where required.
Opt-out of sale/share: As of the effective date, we do not sell or share PI. If this changes, we will provide an online opt-out mechanism and honor GPC signals.
11) Minors Under 16
We do not knowingly sell or share personal information of consumers under 16 years of age. If we become aware of such activity, we will cease and take appropriate steps consistent with the law.
12) Notice at Collection
At or before the point of collection, we inform you of the categories of personal information to be collected, the purposes, whether the information is sold or shared, and retention periods or criteria. This Notice and our Privacy Policy together serve as our notice at collection.
13) Metrics & Recordkeeping
If we are required to publish request metrics (e.g., number of requests received, complied with, denied, and median response times), we will make them available here or upon request.
14) Do Not Track & Global Privacy Control
If we engage in activities that qualify as “sale” or “sharing,” we will treat a valid Global Privacy Control (GPC) signal as an opt-out request for the browser that sends it. We also honor other legally recognized signals where required.
15) Contact Us
- privacy@stemminds.com
- Mailing Address
-
Stem Minds Corp. (Crop Help)
212 Earl Stewart Dr, Unit #3
Aurora, ON L4G 6V7, Canada
16) Changes to This Notice
We may modify this Notice from time to time to reflect changes in practices or legal requirements. If changes are material, we will provide appropriate notice (e.g., in-product or by email) and update the effective date.