VAQUERO

Vaquero Technologies LLC

Privacy notice.

Version 2026-10-22-us-trial · Effective 2026-10-22

This notice describes personal information handled by Vaquero Technologies LLC across its website, browser workspace, and native app. It also describes optional services where enabled. Paid membership initially serves United States customers.

Information we handle and why

We may also use relevant records to investigate security incidents, maintain service reliability, reconcile payments, resolve disputes, and comply with legal obligations. Do not upload personal information you lack authority to provide, or information unrelated to the workflow.

Operation access and employee information

Operation information is shared with its members according to their current roles and permissions. An owner may invite or remove people and control sensitive financial, AI, export, and boundary access. Restricted advisers remain read-only. Audit and historical operation records can identify a contributor after their access ends.

If your employer or another operation owner supplied your information, that operation controls its own employment and recordkeeping decisions. Ask it about its notices, access practices, and records. You can also contact Vaquero about your personal information; being an owner does not remove another individual’s legal privacy rights.

Connected providers and other recipients

We share the information needed for the service with providers that perform hosting, storage, security, email delivery, payment processing, authorized bank connections, AI inference, mapping, weather, and device notifications. Supported providers include Railway for hosting, Supabase for private photo storage where configured, Resend and Google Workspace for account email and support, Stripe for browser billing, Apple for supported native services, Plaid for enabled bank connections, and OpenAI for connected AI where configured. An owned inference node may be used with cloud fallback when enabled.

Mapping, parcel, address, and weather features may contact public agencies or configured providers, including Census and state parcel services, USGS, Regrid, WeatherKit, NOAA, PRISM, or Open-Meteo. A provider may receive the requested location or map area and request information such as IP address. Optional providers are used only when the relevant feature and deployment configuration enable them; listing a provider does not mean you have connected that service.

We may disclose relevant information where law requires it, to protect people or the service, or in a business transaction subject to appropriate confidentiality and legal requirements. We do not sell private ranch records or use those records for targeted advertising. Optional advertising technologies on our public marketing website are described below and may constitute sharing under applicable state law. We do not grant a public marketing license to private ranch records. A customer story requires separate permission.

These providers have their own privacy terms and legal obligations. United States-only customer availability is not a guarantee that all processing stays within the United States.

When you choose to share an AI answer for quality review, authorized Vaquero reviewers can inspect the submitted question, answer, feedback and permitted supporting context. This choice is optional. Feedback does not automatically train a shared model or change your ranch records.

Banking and connected AI

A bank connection is optional. An authorized operation member connects through Plaid’s supported linking flow, rather than entering bank credentials into a Vaquero support message. Vaquero receives the authorized account and transaction information and keeps provider tokens on the server. Disconnecting stops the connection’s future imports; approved ledger entries and historical import records may remain. Bank connections and limits belong to the operation, not each seat.

Supported on-device calculations, dictation, and local photo review can run on the device. This does not mean every feature or photo stays local: saved records and Pasture Scout photos may upload through their supported workflows. When you send a connected AI question, the backend can send that question, permitted record summaries, selected history, and confirmed private memory to the configured inference provider. Avoid unrelated sensitive personal information in prompts. Financial restrictions apply to AI context and tools as well as ordinary screens.

Vaquero requests that connected OpenAI responses are not stored as provider response objects. That setting is not a promise of zero provider retention, a particular contractual training policy, or that all inference occurs locally. Provider terms and deployment configuration apply. Feedback does not automatically train a shared Vaquero model.

Cookies, device permissions, and notifications

The signed-in browser workspace uses first-party session cookies needed for authentication and security. The public marketing website loads advertising tags only after the separate advertising consent described below, when that integration is enabled. Its product illustrations use sample data. Hosting and delivery services may still process technical request information needed to deliver and protect the site.

You can control camera, photo-library, microphone, location, and notification permission in device settings. Location may be used in the background for an active field-work recording where you enable that workflow. Disabling a permission can limit the related feature. Account, invitation, payment, and security emails are service messages. Support replies are directed to support@vaquerotechnologies.com.

Optional website analytics

Optional first-party analytics stays off until you enable Website analytics. Reject optional is offered alongside acceptance. We count public page views and selected button choices on approved public pages. Unknown routes, owner pages, and private app screens are excluded.

When session acquisition reporting is enabled, we ask for the updated consent version 2026-10-23 even if you accepted earlier page-view analytics. It measures approximate country, state and city from network geography, the referring website domain, channel and approved campaign label, page views and sign-up link clicks. It can recognize search engines, social networks, forums and other websites when your browser shares that information. It does not use GPS. VPNs, mobile networks and privacy settings can affect location and attribution. A click is not a completed account or sale.

When engagement measurement is enabled, Website analytics also measures active time on approved public pages and the total active time during a visit. Only visible, focused time counts, with a 60-second idle cutoff. We send a fixed page category, a random page-view identifier and cumulative duration, never keystrokes, pointer positions, screen recordings, private app activity or customer identity. Hidden tabs and inactive periods do not accrue time. Missed events can undercount time; earlier visits have no duration history. This expanded collection requires a fresh privacy choice.

A random identifier in this tab’s session storage groups activity until 30 minutes of inactivity. The server stores only a daily hashed version and splits sessions at UTC midnight; it does not join them to accounts. Only the registrable referring domain is retained, not subdomains, the full referring URL, queries or browsing history. Campaign labels are restricted to an approved list. City/state groups smaller than five sessions are combined in reports. Raw IP addresses, names, email addresses and ranch or account identifiers are not stored in acquisition analytics. Hosting services still process network requests separately.

The earlier page-view report uses a fresh event identifier to avoid duplicate submissions, an approved page category, limited button-choice metadata, and consent version 2026-10-08. It does not contain a session identifier or referring domain.

We store your versioned privacy choices, which expire after 180 days in local storage, and a short session identifier in session storage only when acquisition reporting is enabled and accepted. Our first-party analytics uses no cookies or third-party analytics SDK. Advertising choices are separate. Global Privacy Control and Do Not Track keep collection off. Local and preview sites do not send production analytics.

Open in the footer to review or withdraw your choice. Declining stops future collection and clears the tab’s acquisition session. Previously counted first-party records are not linked to an account we can look up. Clearing local storage resets this browser’s choice. No events are queued before consent or replayed afterward. Your choice does not affect access to the website, support or membership.

Optional advertising cookies

When enabled, Google Ads and Meta (Facebook and Instagram) have independent choices, off until accepted. These providers may receive visits to approved public pages, browser and device information, network identifiers including IP address, and cookie identifiers to measure and personalize advertising. They may combine this information with information from their services. These activities may constitute sharing for targeted advertising under applicable state law. We do not send private ranch records, account details, payment amounts or completed-purchase events through these tags.

Google uses advertising cookies such as _gcl_* and Meta may use _fbp and _fbc. Read Google’s advertising information and Meta’s Privacy Policy. Provider retention and cross-device associations follow their policies and your provider settings. Our consent choice expires after 180 days; provider cookie lifetimes can differ.

Tags are blocked before consent and on private, preview, unknown, or query/fragment-bearing pages. We do not enable automatic form matching or send email addresses to ad platforms. A tag ID or provider change requires fresh consent. Withdrawing stops future use and reloads the page to unload active advertising code; we remove accessible first-party advertising cookies. Cookies on providers’ own domains and information already received by providers cannot be removed by this site. Manage those through the providers’ privacy controls.

Optional product analytics, diagnostics and email

Signed-in web workspace Settings offers separate account choices for product usage, error diagnostics and marketing email. Usage counts approved screen categories. Diagnostics counts script errors and unhandled promises by screen category; it excludes error messages, stack traces, record IDs, field values and URLs. Daily totals do not include account identifiers. The service authenticates submissions and keeps a bounded daily count with your preference to prevent loops. Consent evidence is retained with your account identifier and timestamp. These choices expire after 180 days and optional collection respects browser privacy signals.

Marketing email permission applies to product news and offers sent to your account email and can be withdrawn in Settings. It does not itself send a message. Any marketing delivery must include an unsubscribe method and valid sender address; essential service and security messages remain separate. Declining optional choices does not reduce access to your membership.

Retention, account deletion, and offline copies

We retain operation records while needed to provide the service and preserve the operation’s history, subject to legal, accounting, security, and dispute obligations. Cancellation stops billing as described in the subscription policy; it does not erase ranch records. Archiving a ranch preserves server history. Backups and provider records can remain after an active record is removed and are subject to their applicable retention processes. We do not promise a universal deletion deadline.

Saved AI history has an accessible expiry of 365 days; expired turns are excluded from normal history access and may be purged during later history maintenance. Confirmed private memories remain until deleted. Optional payroll time-punch location has a 90-day expiry and is removed by scheduled maintenance. These limits do not apply to every operation record, saved map location, or field-work path.

Account settings provide account closure where supported, with identity confirmation. An owner must first transfer ownership or archive the operation through its supported process. After successful server confirmation, closure removes account contact and profile information, disables sign-in, and revokes sessions, operation memberships, and pending invitations. An inactive account reference remains for historical authorship, billing, bank, and policy-acknowledgment records. Some retained records require support review. Contact us if closure fails or you want removal of personal information beyond the account profile. Retention remains subject to applicable obligations and rights; closing your account does not cancel a provider subscription.

Native clients can keep cached data and unsent work for offline use. Online reauthorization and removal of access revoke subsequent server access and clear or restrict supported caches. A device that is disconnected cannot be remotely erased. Local offline authorization expires, but expiry is not a promise that every local file or backup has been physically erased. Use device security and the supported sign-out and pending-work controls for shared or lost devices.

Your requests and choices

For account closure, follow our account and data deletion instructions.

Email support@vaquerotechnologies.com with “Privacy request,” your account email, and the type of request. You may ask to access, correct, delete, or receive a portable copy of your personal information, and to exercise applicable state privacy rights. An authorized agent may contact us with evidence of authority. We verify identity and authority using information appropriate to the request; do not send passwords or government documents in an ordinary email.

We will respond within the time required by applicable law, explain any lawful denial or extension, and avoid discrimination for exercising a privacy right. Where a response period of 45 days applies, an extension will be communicated as required. To appeal a denied request, reply to the decision with “Privacy appeal.” We will provide the appeal outcome and information about contacting the relevant state attorney general where required. Rights and exceptions depend on your state and the information involved; operation exports are not a substitute for a personal-information request.

You can opt out of targeted advertising by rejecting Google Ads and Meta in . Global Privacy Control and Do Not Track turn these integrations off. Account privacy requests and appeals remain available through the contact methods above.

Children, security, and changes

Vaquero accounts are intended for adults using ranch operations. The service is not directed to children under 13, and we do not knowingly collect their personal information. Contact support if you believe a child has provided personal information so we can review and remove it as appropriate.

We use access restrictions and technical safeguards appropriate to the service. No system is perfectly secure. Keep account credentials and devices protected, and report suspected exposure to support. We will provide legally required security-incident notices when applicable.

We will identify an effective date for an approved notice, update it as practices change, and provide additional notice or consent where required for a material change. For questions, requests, or an appeal, contact Vaquero Technologies LLC at support@vaquerotechnologies.com.

Privacy & advertising settings

Choose each purpose separately. Choices apply to this browser for 180 days. Required security and preference storage remain available.

Product usage, error diagnostics and marketing email choices are in your signed-in account settings. Advertising tags never run inside the private workspace. Advertising details and providers.