Effective Date: 24.2.2026

1. Introduction

[Lehtosarvi Labs / MAASAMPO] (”we,” ”us,” or ”our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform, including our IoT sensors and blockchain-based services.

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you (”Personal Data”).

• Account Information: Name, email address, farm location, and contact details provided during registration.
• Operational Data: Data generated by MAASAMPO IoT sensors, including nutrient levels (N−P−K), manure volume, flow rates, and GPS coordinates of fertilization and composting events.
• Technical Data: IP addresses, device identifiers, and log data related to your use of our software platform.
• Financial Data: Wallet addresses and transaction history related to the issuance and exchange of tokens/credits on the blockchain.

3. How We Use Your Information

We use the collected data for the following purposes:

• Service Delivery: To generate ”Digital Twins” of manure assets and facilitate tokenization.
• Automation: To enable ”Zero-Click Compliance” for regulatory reporting.
• Calibration & R&D: To improve our Edge-AI models and sensor accuracy through our ”Master & Apprentice” calibration process (using anonymized datasets).
• Compliance: To fulfill legal obligations and verify the authenticity of environmental credits (e.g., carbon credits).

4. Data Ownership and Sovereignty

At Lehtosarvi Labs, we believe in Data Sovereignty:

• Your Data: You remain the owner of the raw operational data originating from your farm.
• Anonymization: We reserve the right to anonymize and aggregate your data. Once anonymized (so that it can no longer be linked to you), this data may be used for industry benchmarking and system optimization.

5. Blockchain and Data Permanence

Please be aware that our Platform utilizes blockchain technology.

• Immutability: Data recorded on a blockchain (such as token IDs and transaction timestamps) is generally permanent and cannot be deleted.
• Privacy by Design: We minimize the amount of Personal Data stored directly on the blockchain. Most personal details are stored ”off-chain” in secured servers, while the blockchain only contains cryptographic hashes and asset IDs.

6. Data Sharing and Disclosure

We do not sell your Personal Data. We may share information with:

• Industry Partners: (e.g., Valio, Suomen Lantakaasu Oy) Only with your explicit consent or as part of a pre-agreed supply chain verification process.
• Authorities: When required by law (e.g., Ruokavirasto/ELY-keskus) to facilitate your regulatory compliance.
• Service Providers: Third-party vendors who assist in hosting, analytics, and maintenance.

7. Data Security

We implement robust technical and organizational measures, including encryption and Secure Element (HSM) protection in our hardware, to protect your data against unauthorized access or loss.

8. Your Rights Under GDPR

As a resident of the European Economic Area (EEA), you have the following rights:

• Access & Rectification: The right to access and correct your personal data.
• Erasure (”Right to be Forgotten”): The right to request deletion of your personal data (excluding data permanently stored on the blockchain).
• Data Portability: The right to receive your data in a structured, machine-readable format.
• Withdrawal of Consent: You may withdraw your consent for data processing at any time.

9. International Transfers

If data is transferred outside the EEA, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your privacy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the ”Effective Date.”

11. Contact for more informatio

If you have any questions or wish to exercise your rights, please contact us: contact@lehtosarvi.io