Privacy Policy

1. Introduction

INNOVATION THREESIXTY (PRIVATE) LIMITED ("Innovation Threesixty", "Innovation 360", "Company", "we", "our", or "us") is committed to protecting the privacy, confidentiality, integrity, and security of personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, process, store, transfer, and protect information obtained through our websites, applications, cloud platforms, managed services, digital solutions, and related technologies (collectively, the "Services").

This Privacy Policy applies to all products, platforms, and services offered by Innovation Threesixty, including but not limited to:

• Govi.ai and related smart agriculture platforms;
• Mobile applications;
• Artificial Intelligence (AI) and Machine Learning (ML) solutions;
• Internet of Things (IoT) platforms and connected services;
• Agricultural ERP, CRM, and traceability systems;
• Disease detection and crop monitoring services;
• Budgeting, accounting, and financial management modules;
• Weather intelligence and forecasting solutions;
• Analytics and business intelligence platforms;
• Blockchain-enabled supply chain solutions;
• Managed services and cloud-hosted platforms;
• Customer support and service management systems;
• Corporate websites and customer portals.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Policy

This Privacy Policy governs information collected through:

• Our website and online platforms;
• Mobile applications;
• Customer portals;
• Cloud-hosted environments;
• IoT devices and sensors;
• Artificial Intelligence and analytics systems;
• Service desk and support channels;
• Email, messaging, and communication systems;
• Digital products and managed services.

This Policy does not apply to third-party websites, applications, or services that may be linked from our Services.

3. Information We Collect

Depending on the nature of the Services used, we may collect the following categories of information.

A. Personal Information

Personal information may include:

• Full name;
• Contact details;
• Email address;
• Telephone number;
• Postal address;
• Job title;
• Employer or organisation details;
• User account credentials;
• Identification information where required.

B. Business and Operational Information

We may collect:

• Business records;
• Supplier information;
• Customer information;
• Operational records;
• Service management information;
• Inventory records;
• Production and logistics information;
• Enterprise resource planning (ERP) data.

C. Agricultural and Farm Information

For Govi.ai and related agriculture services, we may collect:

• Farm profiles;
• Farm ownership or management details;
• Crop information;
• Plantation records;
• Yield information;
• Fertilizer and pesticide usage records;
• Harvest records;
• Livestock information;
• Agricultural operational data.

D. Financial and Accounting Information

Depending on the services used, we may collect:

• Budgeting records;
• Accounting information;
• Financial transaction records;
• Invoices;
• Purchase and sales records;
• Tax-related information;
• Financial reports and forecasts.

E. Images, Videos and Uploaded Content

Users may upload:

• Crop images;
• Disease detection photographs;
• Drone imagery;
• Videos;
• Documents;
• Reports;
• Audio recordings;
• Other digital content.

F. Device and Technical Information

We may automatically collect:

• IP addresses;
• Device identifiers;
• Browser information;
• Operating system information;
• Session information;
• Log files;
• Application telemetry;
• Usage analytics;
• Network information.

G. Location and Environmental Information

Where applicable, we may collect:

• GPS coordinates;
• Geographic location data;
• Farm mapping information;
• Weather information;
• Sensor readings;
• Environmental monitoring data.

H. IoT and Sensor Data

Connected devices may generate:

• Soil sensor readings;
• Climate measurements;
• Irrigation information;
• Equipment telemetry;
• Operational diagnostics;
• System health monitoring information.

4. How We Collect Information

We may collect information:

• Directly from users;
• Through website forms;
• Through mobile applications;
• Through IoT devices and sensors;
• Through customer support interactions;
• Through uploaded documents, images, and videos;
• Through automated technologies;
• Through authorised third-party integrations;
• Through service usage and platform interactions.

5. How We Use Information

We may process information for legitimate business purposes including:

Service Delivery

• Providing products and services;
• Managing customer accounts;
• Delivering platform functionality;
• Processing transactions;
• Supporting business operations.

Smart Agriculture Services

• Disease detection;
• Crop monitoring;
• Yield forecasting;
• Precision agriculture;
• Farm management;
• Weather intelligence;
• Traceability and compliance monitoring.

Artificial Intelligence and Analytics

• Generating AI-driven insights;
• Machine learning model improvement;
• Image recognition and computer vision;
• Predictive analytics;
• Performance analysis;
• Operational optimisation.

Customer Support

• Responding to enquiries;
• Troubleshooting issues;
• Managing service requests;
• Delivering technical support.

Security and Compliance

• Fraud prevention;
• Threat detection;
• Access management;
• Security monitoring;
• Regulatory compliance;
• Incident investigation.

Business Operations

• Product development;
• Service improvement;
• Research and innovation;
• Quality assurance;
• Business intelligence.

6. Artificial Intelligence, Machine Learning and Automated Processing

Certain Services may utilise Artificial Intelligence (AI), Machine Learning (ML), Computer Vision, predictive analytics, and automated processing technologies.

These technologies may analyse:

• Images;
• Videos;
• Crop records;
• Financial records;
• Operational data;
• Sensor data;
• Environmental information;
• User-submitted content.

7. Lawful Basis for Processing

Where required by applicable law, we process personal information based on one or more of the following legal grounds:

• Consent;
• Performance of a contract;
• Compliance with legal obligations;
• Protection of vital interests;
• Legitimate business interests;
• Other lawful grounds recognised under applicable law.

8. Information Sharing and Disclosure

We do not sell personal information.

We may share information with:

Service Providers

• Cloud hosting providers;
• Infrastructure providers;
• Analytics providers;
• Security service providers;
• Communications providers;
• Payment processors;
• Customer support providers.

Business Partners

Where required to deliver Services.

Professional Advisors

• Lawyers;
• Auditors;
• Accountants;
• Consultants.

Legal and Regulatory Authorities

Where disclosure is required by law, court order, regulatory request, or to protect legal rights and security.

9. User Responsibilities

Users are solely responsible for ensuring that they have the necessary legal rights, permissions, notices, and consents required to upload, process, store, and share information through the Services.

This includes:

• Employee information;
• Supplier information;
• Customer information;
• Farm worker information;
• Images and videos;
• Third-party personal information;
• Business records.

Users agree not to upload information unlawfully or in violation of applicable laws.

10. Data Security

Innovation Threesixty implements commercially reasonable technical, organisational, and administrative safeguards designed to protect information.

Security measures may include:

• Encryption in transit and at rest;
• Multi-factor authentication;
• Role-based access controls;
• Secure cloud infrastructure;
• Network security controls;
• Security monitoring;
• Audit logging;
• Vulnerability management;
• Backup and disaster recovery procedures.

Despite our efforts, no system, network, software application, cloud platform, or method of electronic transmission can be guaranteed to be completely secure.

11. Data Retention

We retain information only for as long as necessary to:

• Deliver Services;
• Fulfil contractual obligations;
• Meet legal and regulatory requirements;
• Resolve disputes;
• Enforce agreements;
• Protect business interests.

Retention periods vary depending on the nature of the information and applicable legal obligations.

12. International Data Transfers

Information may be processed, stored, or transferred to countries outside the user's country of residence.

Where international transfers occur, we implement appropriate safeguards consistent with applicable privacy laws, including:

• Contractual protections;
• Data processing agreements;
• Security measures;
• Regulatory transfer mechanisms.

13. Cookies and Similar Technologies

Our Services use cookies and similar technologies to:

• Enable platform functionality;
• Improve user experience;
• Maintain security;
• Analyse usage patterns;
• Support operational performance.

For further information, please refer to our Cookie Policy.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

• Right of access;
• Right to correction;
• Right to deletion;
• Right to restriction of processing;
• Right to object to processing;
• Right to data portability;
• Right to withdraw consent;
• Right to lodge a complaint with a supervisory authority.

We may request verification of identity before responding to certain requests.

15. Children's Privacy

Our Services are not intended for children under the age required by applicable law to provide valid consent.

We do not knowingly collect personal information from children without appropriate legal authority or parental consent where required.

16. Limitation of Liability

To the fullest extent permitted by applicable law:

• Information is submitted voluntarily and at the user's own risk.
• Users acknowledge that no security system can provide absolute protection.
• Innovation Threesixty does not guarantee uninterrupted, error-free, or completely secure operation of the Services.
• We are not responsible for unauthorised access, cyberattacks, service interruptions, or security incidents beyond our reasonable control.

Nothing in this Privacy Policy excludes or limits rights or obligations that cannot lawfully be excluded under applicable law.

17. Compliance with Applicable Laws

This Privacy Policy is intended to support compliance with applicable privacy and data protection laws, including where relevant:

• The UK General Data Protection Regulation (UK GDPR);
• The EU General Data Protection Regulation (EU GDPR);
• The Sri Lanka Personal Data Protection Act (PDPA);
• Applicable consumer protection and electronic communications laws;
• Other applicable privacy and data protection legislation.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in legal requirements;
• New technologies;
• Service enhancements;
• Operational changes;
• Regulatory guidance.

Updated versions will be published on our website with the revised effective date.

19. Contact Us

For questions regarding this Privacy Policy or privacy-related requests, please contact: