Privacy Policy

Last updated: 04.06.2026

1. Data Controller

DRENIO DOO BEOGRAD (NOVI BEOGRAD)
Jurija Gagarina 231, lokal 329, 11073 Beograd
info@drenio.rs

2. Data We Collect

Registration Data

• Display name
• Email address
• Phone number (optional)
• Password (stored encrypted)
• City and approximate location
• Selected role (Farmer, Customer, Deliverer)

Usage Data

• Photos you upload (profile, farm, plant updates)
• Messages between users
• Plant adoption history and status
• Delivery address (if applicable)

Technical Data

• IP address: stored on your user profile at registration (contract documentation) and logged at each successful login for fraud prevention. Login IPs are deleted after 30 days.
• Session cookies (for login and language preference)
• Push notification tokens (if enabled)

3. How We Use Your Data

• To create and manage your account
• To connect farmers with customers and deliverers
• To send notifications about orders and messages
• To protect the platform and verify user identity in case of disputes (rate limiting, login IP logging for 30 days, fraud prevention)

4. Third-Party Services / Data Processors

• Cloudinary – Image hosting and delivery
• Brevo – Transactional emails (verification, password reset)
• Stripe – Payment processing (if applicable)
• Render – Application hosting
• Anthropic – AI-powered support chat and content moderation. Your messages to the support chat are processed by Anthropic's AI. No personal data is stored by Anthropic.
• Sentry – Error tracking for application stability. Technical error data (no personal data) is sent to Sentry to help us fix bugs.
• Google Maps – Maps and location services for displaying farmer locations and calculating distances.
• Telegram – System monitoring alerts. No user data is sent — only technical health status of the platform.
• wttr.in – Weather data for regional farming information. No personal data is shared.

5. International Data Transfer

Some of the data processors listed above are based outside Serbia — specifically Anthropic (USA), Cloudinary (USA), Google (USA), Render (USA), Sentry (USA), and Stripe (USA). Under Articles 64–66 of the Serbian Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti, ZZPL), such transfers are permitted where the recipient country provides an adequate level of protection or where appropriate safeguards (e.g. standard contractual clauses) are in place. The USA is not currently on Serbia's adequacy list; transfers rely on contractual safeguards offered by the providers and on your acknowledgement when using the service. By using Drenio you consent to this transfer to the extent required by Art. 65(4)(a) ZZPL.

6. Data Retention

Your account data is stored as long as your account is active. The IP address recorded at registration is kept with your user profile as contract documentation (legal basis: Art. 12(1)(2) ZZPL — performance of a contract). IP addresses logged at each successful login are automatically deleted after 30 days (legal basis: Art. 12(1)(6) ZZPL — legitimate interest / fraud prevention). You can delete your account at any time in Settings — all personal data will be permanently removed.

7. Automated Decisions and Content Moderation

Drenio uses automated content moderation (powered by Anthropic Claude Haiku) to scan text you submit — chat messages, listings, plant descriptions, reviews, dispute reports — for hate speech, spam, and abuse. The system either accepts or blocks the text; it does not produce legal effects on you and does not affect your account standing. The optional support chat at /chat is also AI-powered. None of these systems perform automated decision-making producing legal effects on you within the meaning of Art. 38 ZZPL. Decisions about account suspension or content removal are always made by a human moderator.

8. Your Rights

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Request a copy of your data
• Object to data processing

To exercise your rights, contact us at the email address above or use the account deletion feature in Settings.

9. Right to Lodge a Complaint

If you believe your personal data has been processed in breach of applicable law, you have the right to lodge a complaint with the competent supervisory authority. In Serbia: Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti), Bulevar kralja Aleksandra 15, 11000 Beograd, https://www.poverenik.rs. You also retain the right to a judicial remedy under Art. 84 ZZPL.

10. Cookies

Drenio uses only essential session cookies to keep you logged in and remember your language and currency preferences. We do not use tracking or advertising cookies.

11. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via the app.

12. Image Credits

Illustrations by Storyset.