Privacy Policy

1.1 Information You Provide Directly

When you create an account, place an order, list an animal, or contact us, we collect:

• Account information: name, email address, password (stored as a one-way hash), and user type (buyer or producer).
• Profile information: profile photo, farm or business name, location (state/region), and a short bio.
• Transaction information: order details, listing content, pricing, and fulfillment notes you enter on the Platform.
• Messages: content of messages you send through the Platform’s in-app messaging system.
• Support communications: emails or messages you send to RangeDirect support.

1.2 Payment Information

We do not store your full credit card number, CVV, or bank account details on our servers. Payment card information is collected directly by Stripe, Inc. through their secure checkout components. We receive and store only a tokenized reference and summary data (last four digits, card brand, expiration) necessary to display your payment method. For producers, Stripe Connect onboarding data (bank account, tax ID, business details) is collected and stored by Stripe under their own privacy policy.

1.3 Information Collected Automatically

When you access the Platform, our servers and third-party tools automatically log:

• Log data: IP address, browser type, operating system, referring URL, pages visited, and timestamps.
• Session data: an encrypted session identifier stored in a cookie on your browser that keeps you signed in.
• Device information: device type, screen resolution, and language preference.

1.4 Cookies

We use a small number of essential cookies required for the Platform to function. These include:

• Session cookie: keeps you authenticated during your visit. Cleared when you sign out or your session expires.
• CSRF token: a security token that prevents cross-site request forgery attacks.

We do not use advertising cookies or third-party tracking pixels. If this changes, we will update this policy and provide notice as described in Section 8.

2.1 To Operate the Platform

• Create and manage your account.
• Process orders, deposits, and payouts via Stripe.
• Facilitate messaging between buyers and producers.
• Display producer listings and processor information on the marketplace and map.
• Provide customer support and respond to inquiries.

2.2 To Send Transactional Communications

We send emails related to your account and transactions, including order confirmations, status updates, payment receipts, and security alerts (e.g., password reset links). These emails are sent via Resend (our email delivery provider) and are necessary for Platform operation. You cannot opt out of transactional emails while you have an active account.

2.3 To Maintain Security and Prevent Fraud

We use log and session data to detect suspicious activity, enforce rate limits, identify fraudulent orders or accounts, and protect the integrity of the Platform.

2.4 To Improve the Platform

Aggregated and anonymized usage data helps us understand how users interact with the Platform so we can improve features and fix bugs. We do not sell or share individual usage data for this purpose.

2.5 To Comply with Legal Obligations

We may use or retain your information as required by applicable law, regulatory requirements, or valid legal process (such as a court order or subpoena).

3.1 With Other Users — Transaction Parties

When a transaction is initiated, the buyer’s name and contact information (as provided) is shared with the producer to facilitate order fulfillment, coordination, and record-keeping as required by California custom-exempt rules. Producers’ public profile information (farm name, location, listing details) is visible to all Platform users.

3.2 With Stripe

Payment processing on the Platform is handled by Stripe, Inc. When you make or receive a payment, relevant transaction data is shared with Stripe as necessary to complete the transaction. Stripe’s use of your information is governed by the Stripe Privacy Policy.

3.3 With Resend

Transactional emails are delivered through Resend. To send you email, we share your email address and the content of the message with Resend. Resend’s use of this data is governed by their privacy policy.

3.4 For Legal Reasons

We may disclose your information if we reasonably believe disclosure is required to: (a) comply with applicable law or legal process; (b) protect the rights, property, or safety of RangeDirect, our users, or the public; or (c) detect, prevent, or address fraud, security, or technical issues.

3.5 Business Transfers

If RangeDirect is involved in a merger, acquisition, asset sale, or similar transaction, user information may be transferred as part of that transaction. We will notify you via email or a prominent Platform notice before your information is transferred and becomes subject to a different privacy policy.

3.6 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their own marketing or advertising purposes.

5.1 Access and Correction

You may access and update most of your account information directly through your Account Settings page. If you need to correct information you cannot update yourself, contact us at the address in Section 9.

5.2 Account Deletion

You may request deletion of your account by contacting us at the address in Section 9. We will delete or anonymize your personal data within 30 days, subject to retention obligations described in Section 4 (e.g., transaction records required by law).

5.3 California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used; (b) request deletion of your personal information; (c) opt out of the sale or sharing of your personal information (we do not sell or share personal information); and (d) not be discriminated against for exercising these rights. To submit a verifiable consumer request, contact us at the address in Section 9. We will respond within 45 days.

5.4 Email Preferences

Transactional emails (order confirmations, payment receipts, security alerts) are required for account operation and cannot be disabled. If we introduce optional marketing or newsletter communications in the future, you will be able to opt out via an unsubscribe link in those emails.