1. The Collection of Data or Information
We collect and use information when necessary for our legitimate interests and in a fair, balanced way. We collect both non‑personally identifiable information (from visitors) and personally identifiable information (from users).
1.A Non‑Personally Identifiable Information
We may collect: browser type, language preference, referring site, timestamp of requests, pages viewed before/after using our Solutions or site, interactions with the site and other users via server log files, and other information a visitor chooses to provide. We use this to understand site usage and may publish aggregate, non‑identifying statistics.
In addition, we use Microsoft Clarity, a behavioral analytics service provided by Microsoft Corporation. Microsoft Clarity may automatically collect and record the following information when you use our mobile app or website: session recordings (video replays of your in-app interactions), heatmaps, mouse movements, clicks, scrolls, and tap gestures on mobile; pages and screens visited; time spent on pages; device type, operating system, and browser information; and approximate geographic location (country/region level) derived from IP address. This data is collected in an aggregated and pseudonymized form to help us understand how users interact with our app and to improve usability and performance.
1.B Personally Identifiable Information (PII)
We may collect PII necessary to access and use the Solutions/website, including (as applicable):
- First/last name (natural persons) or company name (juristic persons)
- Active mobile number and email address
- Location and area (farm/field location)
- Job title and department
- Phone numbers (business, fax, mobile)
- Company postal code
- Corporate website URL(s) and social media URL(s)
- Metadata such as IP addresses, dates messages are sent/received, subject lines
- Encrypted account password
We use this information to understand users, and to test, develop, improve, and enhance our Solutions and website; to contact customers about Solutions/promotions/opportunities; and to investigate potential security or license breaches.
1.C Purpose for Collecting and Processing
- Detect, investigate, and prevent fraud or illegal activities
- Respond to comments, questions, requests; provide support
- Fulfill access/correction/deletion requests and other legal rights
- Review employment applications
- Protect rights and property of ORTH, customers, and others
- Provide notice of important changes and policy updates
- Provide/deliver Solutions; send related communications and invoices
- Communicate about offers, promotions, rewards, and events
- Send technical notices, updates, security alerts, admin messages
- Comply with legal/contractual obligations; resolve disputes; enforce agreements
- Use in relevant legal proceedings
- Analyze user behavior, in-app interactions, and app performance through session recording, heatmaps, and behavioral analytics (via Microsoft Clarity) to improve the usability and functionality of our Solutions
1.D Data Retention
We follow industry standards and ISO requirements to protect information during transmission and at rest. We retain data as long as needed for purposes in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Retention periods consider amount, nature, sensitivity, and purposes. After the period ends, we delete personal information.
1.E Cookies and Tracking Technologies
We use cookies and similar technologies to enhance functionality, analyze usage, personalize content, and deliver relevant advertising. Non‑essential cookies (analytics/personalization/marketing) are set only after clear, affirmative consent via our cookie banner, per GDPR/ePrivacy. You can manage preferences anytime via “Cookie Settings.” Strictly necessary cookies are always active. We do not respond to browser “Do Not Track” signals; control cookies via your browser or our consent tool. Disabling certain cookies may affect features.
We also use Microsoft Clarity, a behavioral analytics and session recording technology provided by Microsoft Corporation (“Microsoft”). Microsoft Clarity uses cookies and similar tracking technologies within our mobile app and website to capture how you interact with our Solutions, including session replays, heatmaps, tap and scroll behavior, and click tracking. The data collected by Microsoft Clarity is processed by Microsoft and is subject to Microsoft’s Privacy Statement, available at https://privacy.microsoft.com/privacystatement. Microsoft may also use this data to improve its own products and services. We have entered into a data processing agreement with Microsoft governing their use of data on our behalf. You may opt out of Microsoft Clarity data collection at any time by visiting https://clarity.microsoft.com/optout. Please note that opting out may affect your experience with certain features of our app.
2. The Disclosure of Data or Information
2.1 Disclosure to Third Parties
We may use third‑party services (e.g., payment gateways). Your PII may be disclosed where necessary and will be subject to those third parties’ privacy policies. Payments processed by third‑party processors are not accessible or controlled by us; we are not liable for third‑party service/data privacy failures. Our site may contain links to third‑party sites; review their privacy policies—we do not control their content or practices.
2.2 Disclosure for Legal Reasons
We may disclose information to comply with lawful requests or orders; address legal violations; protect rights/property/safety; exercise legal rights or respond to claims; or respond to data subject access requests as required by law.
2.3 Disclosure to a Buyer
If ORTH or substantially all assets are acquired, or in a merger/bankruptcy, your information may be transferred.
2.4 Disclosure to Affiliates
We may share non‑personal information with affiliates (current/future parents, subsidiaries, and companies under common control) for the purposes in this Policy.
2.5 Disclosure to Service Providers
We may disclose information to service providers solely to operate the site/Solutions (e.g., payment processors, analytics). These providers may set cookies and receive browsing data to deliver their services. In particular, we use Microsoft Clarity for behavioral analytics and session recording. Microsoft Clarity receives interaction data (including session recordings, heatmaps, and device/browser information) solely to provide these analytics services on our behalf. Microsoft acts as a data processor under a data processing agreement with us and is not permitted to use this data for its own unrelated purposes, except as described in Microsoft’s Privacy Statement
2.6 Other Disclosures
Testimonials (with consent) may display names; to update/delete, email dpo@aydi.com. Public blogs/forums may expose content to others; request removal via dpo@aydi.com (removal may not always be possible).
If needed, we may request your consent to share personal data with third parties not covered above; you may decline (which may limit website use).
3. Users’ and/or Visitors’ Rights ("Individual Rights")
Residents of the EEA, UK, Switzerland, or UAE are entitled to the following rights under GDPR and UAE Federal Decree‑Law No. 45/2021 (identity verification may be required):
- Access, Correction, Restriction: Request access to/copies of personal information (free), and details of processing; request correction/completion; restrict processing while accuracy is verified.
- Data Portability: Receive data in a machine‑readable format and request transmission to another entity where technically feasible.
- Erasure: Request deletion where data is no longer necessary, consent is withdrawn, or rights override our interests.
- Objection: Object where processing is based on legitimate interests/public interest, for direct marketing, or for research/statistics.
- Complaint: Lodge complaints with the relevant supervisory authority.
4. Privacy by Default
We apply Privacy by Design and Default (GDPR Art. 25) and ISO standards. By default, we collect/process/store/share the minimum personal data necessary. Non‑essential data collection (e.g., marketing, analytics, AI recommendations) is disabled until you provide active, informed consent.
- No non‑essential cookies/tracking without explicit consent
- New accounts and profiles default to private/limited visibility
- Email subscriptions and promotions are opt‑in
- AI features use the least data necessary
- Retention settings auto‑delete/anonymize data when no longer needed
- Role‑based access controls restrict internal access
- Ongoing reviews to maintain/enhance data protection
5. GDPR / UAE Compliance
We process personal information only where we have a lawful basis: consent; contract performance; legal obligation; or legitimate interests (e.g., marketing, sales, recruiting, organizing user/visitor profiles). We provide required notices (GDPR Arts. 13/14) and honor rights in Arts. 12–23, including the right to be forgotten. For privacy requests, visit aydi.com or email dpo@aydi.com.
6. Data Protection Impact Assessments (DPIAs)
We conduct DPIAs (GDPR Art. 35; ISO requirements) when processing is likely to result in high risk (e.g., innovative technologies like AI Agronomist, large‑scale profiling, or sensitive data). DPIAs assess nature/scope/context/purposes; necessity/proportionality; risks to individuals; and measures to mitigate risks. We consult our DPO and supervisory authorities where appropriate.
7. Automated Decision‑Making and Profiling
ORTH does not make decisions based solely on automated processing that produce legal or similarly significant effects, unless necessary for a contract, authorized by law, or based on explicit consent. Where used, we will inform you of the logic, significance, and consequences, and ensure your right to human intervention, to express your view, and to contest decisions.
8. Data Protection Officer (DPO)
Contact our DPO for data protection matters under GDPR and UAE law: dpo@aydi.com.
9. Children’s Privacy
Our website is not intended for individuals under 16. We do not knowingly collect personal information from anyone under 16. If we learn we have, we will delete it as soon as possible. Contact dpo@aydi.com if you believe we collected such data.
10. Privacy Policy Changes
We may modify this Policy periodically. Material changes will be announced here, by email, and/or via a homepage notice before taking effect. Continued use of the website after updates constitutes acceptance.
11. Governing Law & Dispute Resolution
Disputes should first be settled amicably. If unresolved within 30 days, disputes shall be finally settled by arbitration under DIAC rules, seat at DIFC, Dubai, language English, by a sole arbitrator. UAE law governs.
12. Language
If translated, the English version prevails.
13. Contact Us
Email: dpo@aydi.com
Website: https://www.aydi.com/