Privacy policy
DRAFT — this privacy policy is a working draft and has not been reviewed by a lawyer. It will be finalized before public launch.
What we collect
- Account info— if you sign in, Clerk (our authentication provider) stores your email and name.
- Approximate location— only when you click “Use my location” in the farm directory. We use it to sort farms by distance. We don't store it.
- Grocery list text— when you use the grocery matcher, we save the text you submit so we can show you results. Stored in our database.
- Farm or garden submission data— if you list a farm or backyard garden, we store the details you provide (name, town, products, contact info, pickup hours). Backyard gardens also provide a precise home address — see Backyard gardens & grower addresses below for exactly how we protect it.
- Server logs— IP address, browser (user agent), and timestamps. Standard for any website.
- Rate limiting— we temporarily hold your IP address in memory to prevent abuse of the grocery matcher. This data is not written to disk and is lost when the server restarts.
Who we share it with
We use a small number of third-party services to run Tansy. Your data may pass through them:
- Clerk— handles sign-in and account management.
- Groq— when you use the grocery matcher, the text you type is sent to Groq's API so their language model can parse it into a structured list.
- OpenFreeMap— provides the map tiles you see on the farm directory and detail pages. No user data is sent beyond standard browser request information.
- Nominatim / OpenStreetMap— used to geocode a farm's town, or a backyard garden's address, into map coordinates when a listing is submitted. For gardens the resulting precise point is stored privately and never published — only a coarsened point is ever sent to map tiles.
- Hosting provider— to be determined before launch.
Backyard gardens & grower addresses
Backyard gardens are private homes, so we treat a grower's address as sensitive by default:
- We collect a garden's precise address only to make pickups possible. It is stored on our server and is never shown on any public page, map, or API response.
- On the public directory and a garden's detail page we show only a coarsened location— a point shifted roughly 400 metres from the real one — together with a neighbourhood label (for example, “Mount Pleasant”). The exact address and the grower's contact details are never browsable.
- A garden's precise address and contact information are revealed to a shopper only after a pickup request is made and the grower accepts it.
- Our reviewers can see a garden's precise address while verifying the listing, purely to confirm it's a real home garden. It is not published as part of that process.
- A grower can ask us to remove their garden listing at any time by emailing us — see Your rights below.
What we don't do
- We don't sell your data to anyone.
- We don't run ads or behavioral tracking on this site.
- We don't share farm submission data with anyone outside the Tansy team.
Cookies
If you sign in, Clerk sets session cookies to keep you logged in. These are strictly functional — we don't use cookies for advertising, analytics, or cross-site tracking. Public pages that don't require sign-in do not set cookies.
Your rights
Under Canadian privacy law (PIPEDA and BC's PIPA), you have the right to:
- Access your data— email us and we'll tell you what we have.
- Correct your data— email us with what needs fixing.
- Delete your account and data— email us and we'll remove it.
We will respond within 30 days.
Contact
For any privacy questions: yranasolutions@gmail.com or (672) 339-5483.
Last updated: June 23, 2026.