Privacy Policy

Last updated: 6 June 2026

This Privacy Policy explains how Realtime Agritech Ltd ("Archer", "we", "us" or "our") collects, uses, shares and protects your personal information when you use the Archer mobile application (the "App"), our related cloud services and APIs, and our website (together, the "Service").

Archer is a vineyard and agricultural work-management tool for businesses. We are based in New Zealand and the Service is operated under New Zealand law, including the Privacy Act 2020. Where you use the Service from another country, additional local privacy laws may also apply, and we describe the main ones below.

If you have any questions, contact us at privacy@archer.live.

1. Who this policy is for, and who controls your data

The Service is a business tool. It is intended for people aged 18 or over who use it for work, and it is not directed at children.

You will usually access Archer because the business you work for or contract to (your "Organisation") has an Archer account and has invited you to join it. In that situation:

• Archer controls the personal information described in this policy that we collect to run the Service.
• Your Organisation decides who is invited, what work is assigned, and who within the Organisation can see your work records and location history. Your Organisation administers that information and has its own responsibilities to you. If you want to know how your Organisation uses your information, please contact them directly.

2. A quick summary of what we collect

We explain each of these below, and we do not sell your personal information.

3. Information we collect

3.1 Information you and your Organisation provide

• Account and profile information: your name, email address, and optionally a phone number and profile colour or photo. Your Organisation may set your role (such as administrator, manager, member or contractor) and related flags (for example, whether you are a contractor or have been cleared for certain work).
• Content you create in the App: vineyards, blocks, work orders, work plans, trouble spots, field features, measurements, notes and the photos you attach to them.
• Feedback and support requests: if you contact us or submit feedback in the App, we collect the message, any attachments, and your contact details so we can respond.
• Organisation and billing details: your Organisation's name and address, subscription plan, declared area (hectares) and the nominated billing contact.

3.2 Information we collect automatically when you use the App

• Precise location information. Archer is a field tool, so location is central to how it works. When you are logged in and using the App for work, we collect precise GPS location — including latitude and longitude, and at times speed and heading — from your device and from any high-precision GPS receiver you pair with the App (such as a ByNav X8 or Emlid Reach device connected over Bluetooth). During an active job this can be sampled frequently to map your work accurately. This location data is stored as part of your Organisation's work records and is associated with your user account. We only collect location while the App is in use; we do not track your location in the background when you are not using the App.
• Bluetooth connections. We use Bluetooth to find and connect to supported GPS hardware. We use Bluetooth only to connect to these devices and to exchange positioning data with them; we do not use it to track your location for advertising or any unrelated purpose.
• Device and technical information. Device model, operating system and version, app version, language and region settings, network status, and IP address.
• Usage and diagnostic information. We collect events about how the App is used (for example, which features are used and session start and end times), together with performance, error and crash information, so we can keep the App reliable and improve it. Crash and error reports may include technical details such as the device state and a diagnostic identifier.

3.3 Information from sign-in providers

You sign in to Archer using your Google or Microsoft account. When you do, that provider confirms your identity and shares a limited set of details with us — typically your name, email address and a unique account identifier — based on the permissions you grant. We never see or store your Google or Microsoft password. Your use of those accounts is also governed by Google's and Microsoft's own privacy policies.

4. How we use your information

We use your information to:

• Provide the Service — authenticate you, set up your account, map vineyards and blocks, plan and track work, and record where and when work was carried out.
• Connect to GPS hardware and deliver high-precision positioning.
• Support your Organisation's operations — produce work records, job history and reporting for the Organisation you belong to.
• Communicate with you — respond to feedback, send service and account messages, and provide support.
• Keep the Service secure and reliable — detect, investigate and prevent fraud, abuse, errors and security incidents.
• Improve the Service — understand how features are used and diagnose and fix problems.
• Create aggregated, de-identified data — we may combine and de-identify information so it no longer identifies you, and use that aggregated data to analyse, benchmark, improve and develop our products and services, including the analytical and machine-learning models that power Archer's features. Aggregated, de-identified data is not personal information, and we do not sell or share it in a form that identifies you.
• Handle billing — administer subscriptions and process payments through our payment provider.
• Comply with the law — meet our legal and regulatory obligations and enforce our agreements.

Under the New Zealand Privacy Act 2020 we collect and use personal information for these related business purposes. Where another applicable law requires a specific legal basis or consent, we will rely on the appropriate basis or obtain your consent.

5. How we share information

We share personal information only as described here. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

• Within your Organisation. Your profile, work records and associated location history are visible to authorised people in your Organisation (for example, your managers and administrators), consistent with their roles.

• Service providers (sub-processors) who run the Service for us. We use trusted providers to host and operate Archer. They may process your information only on our instructions and to provide their service to us:

  Provider	What they do	Where they process data
  Microsoft (Azure)	Cloud hosting, databases, file/photo storage, telemetry analytics, map tiles, and "Sign in with Microsoft"	Australia (and Microsoft data centres)
  Google (Firebase / Google Cloud)	Crash and error reporting (Firebase Crashlytics) and "Sign in with Google"	United States
  Stripe	Subscription billing and payment processing	United States / global
  Apple & Google	App distribution through the App Store and Google Play	Global

  We do not send your personal information to the makers of the GPS hardware (such as ByNav or Emlid); those devices connect locally to your phone over Bluetooth.

• Professional advisers and a business transfer. We may share information with our advisers (such as lawyers and accountants) under confidentiality, and if Archer is involved in a merger, acquisition or sale of assets, in which case we will require the recipient to honour this policy.

• Legal and safety reasons. We may disclose information if required by law or legal process, or where reasonably necessary to protect the rights, safety or property of Archer, our users or the public.

6. Where your information is stored and sent

Archer is operated from New Zealand, but our service providers store and process information in Australia and the United States, as set out in the table above. This means your information may be transferred to, stored in and accessed from countries other than the one you are in.

When we transfer personal information overseas, we take reasonable steps (as required by the New Zealand Privacy Act 2020) to ensure it is protected by comparable safeguards, including through our contracts with our service providers.

Service availability. At launch, Archer is offered in New Zealand, Australia, the United States, Canada and other countries, but it is not offered to, and is not intended for, individuals located in the European Economic Area (EEA) or the United Kingdom. If we make Archer available in those regions in the future, we will update this policy with the additional rights and protections that apply there.

7. How long we keep information

We keep personal information only for as long as we need it for the purposes described in this policy, and to meet legal, accounting and reporting obligations.

• Account information is kept while your account is active and for up to 12 months after it is closed, then deleted or anonymised.
• Work records and location history form part of your Organisation's operational records and are retained for as long as the Organisation's account is active, unless the Organisation deletes them sooner or asks us to remove them.
• Diagnostic, usage and crash data is kept for a limited period (typically up to 24 months) and then deleted or aggregated.
• Billing records are kept for as long as required by tax and financial-records law (generally 7 years in New Zealand).

When we no longer need information, we delete it or irreversibly anonymise it.

8. How we protect your information

We use reasonable technical and organisational measures to protect personal information, including:

• Encryption in transit for data sent between the App and our servers (HTTPS/TLS);
• Secure, encrypted storage of your sign-in tokens on your device;
• Access controls so that information is available only to authorised people and systems; and
• Secrets management for credentials (using a secured key vault).

No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly if a problem occurs. If a privacy breach occurs that is likely to cause serious harm, we will notify those affected and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

9. Your privacy rights and choices

You have rights over your personal information. Depending on where you live, these may include the right to:

• access the personal information we hold about you and request a copy;
• correct information that is wrong or out of date;
• request deletion of your personal information;
• withdraw consent where we rely on it; and
• complain to a privacy regulator.

To exercise any of these, contact us at privacy@archer.live. We will respond within the time required by law. We may need to verify your identity first, and some information may be retained where the law allows or requires it (for example, billing records). If your information is administered by your Organisation, we may direct your request to them or ask them to act on it.

Device permissions. You can control the App's access to location, camera and Bluetooth at any time through your device settings (see Section 10). Turning off a permission may stop related features from working.

New Zealand: if you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (privacy.org.nz).

United States: if you are a resident of a US state with a comprehensive privacy law (such as California), you may ask us to access or delete your information and to confirm that we do not sell it. We honour these requests as described above and will not discriminate against you for making one.

10. Permissions the App requests

11. Children's privacy

Archer is a workplace tool intended for users aged 18 or over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@archer.live and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the App or by email. Your continued use of the Service after an update means you accept the revised policy.

13. How to contact us

Realtime Agritech Ltd, New Zealand

Privacy enquiries: privacy@archer.live Support: support@archer.live