1. Scope and who we are
This Privacy Policy applies to stookag.com and Stook services that link to it. In this policy, “Stook,” “we,” “us,” and “our” refer to the operators of the Stook grain-marketing decision-support service.
Stook is currently a pilot-stage product. Some account, farm-record, feedback, and cost-ledger features may be disabled, use pilot storage, or be available only to invited users. The public demo uses deterministic fixture data rather than an authenticated farm record.
2. Information we collect
The information we collect depends on the feature you use. We seek to collect only information reasonably needed to operate, secure, evaluate, and improve Stook.
- Account information. If you sign in with Google, we may receive your name, email address, profile image, provider account identifier, and authentication status. Google controls the information it provides under your Google settings and its own privacy terms. The current pilot does not intentionally persist Google access or refresh tokens in a Stook application database.
- Farm and operational information. If an enabled account or pilot feature allows you to submit it, this may include farm profile details, state or region, crops, acreage, APH or expected production, storage characteristics, risk preferences, costs, input bookings, sales or sale records, quantities, prices, dates, and plan activity.
- Communications and feedback. We may collect an email address submitted for a waitlist or pilot, responses about clarity or trust, whether you acted on a displayed recommendation, comments, and support or privacy correspondence. Sale details and free-text pilot feedback are stored only through flows that request consent.
- AI request data. Only after you explicitly request an AI explanation or briefing, Stook may send the displayed market snapshot, crop, state or region, action, and deterministic reasoning to OpenRouter and an underlying model provider. A just-in-time notice appears before sending. Provider retention and training practices may vary, so do not include unnecessary personal or confidential information.
- Technical and security information. Our hosting, authentication, and security infrastructure may process IP address, browser or device information, request time, requested URL, referrer, and error or security events. Stook does not currently embed an independent advertising or behavioral analytics SDK on the public site.
- Device storage. Stook stores a theme preference in localStorage. Essential session cookies may be used when you sign in and may remain valid for up to 30 days unless you sign out or the session is otherwise ended. These are used for interface preference, authentication, security, and service operation, not targeted advertising.
3. How we use information
We may use information for the following purposes:
- Provide, personalize, and maintain requested Stook features.
- Authenticate users and protect accounts, services, and records.
- Calculate plans, breakevens, cost status, plan adherence, and decision-support outputs requested by the user.
- Respond to support, waitlist, pilot, privacy, and legal requests.
- Evaluate reliability, clarity, safety, and product usefulness, including through consented pilot feedback.
- Debug, prevent misuse, enforce our Terms, and comply with law.
- Create aggregated or de-identified analysis that is not reasonably linked to an individual, subject to safeguards against re-identification.
5. Browser privacy signals and cross-site activity
Stook does not currently embed cross-site behavioral analytics, advertising pixels, or session-replay technology on the public site. Because Stook does not currently sell personal information or use it for targeted advertising, browser Do Not Track and Global Privacy Control signals do not change those public-site practices. If covered opt-out processing is introduced, we will update this policy and honor recognized signals where required by applicable law.
6. Public and third-party market data
Stook uses public or licensed agricultural and market information from government, university, vendor, and elevator sources. That market data is generally not personal information about a Stook user. Source websites and linked third-party services have their own privacy practices, which Stook does not control.
7. Retention
We retain information only for as long as reasonably necessary for the purposes described above, including service operation, pilot evaluation, security, dispute resolution, and legal obligations. Current pilot or local-file storage may be ephemeral and is not represented as durable account storage.
Retention can vary by record type and deployment. When production account storage is enabled, Stook will document the applicable retention and deletion schedule before relying on it for real farm records. You may request deletion using the contacts below; some information may be retained where reasonably required for security, legal compliance, fraud prevention, or an active dispute.
8. Security
We use administrative, technical, and organizational safeguards appropriate to the service’s current stage, including transport security, browser security headers, input validation, access controls where enabled, and separation of public demo fixtures from real-farm records. No system or transmission method is completely secure, and we cannot guarantee absolute security.
Do not submit Social Security numbers, financial-account credentials, health information, precise government identifiers, or other information Stook has not specifically requested.
9. Your choices and privacy requests
You may ask to access, correct, delete, or obtain a copy of personal information associated with you, or object to or restrict certain processing where applicable. You may also withdraw consent for future consent-based processing. Withdrawal does not affect processing completed before withdrawal.
Residents of certain U.S. states may have additional rights, including rights to confirm processing, correct inaccuracies, delete information, obtain portable data, opt out of certain sales, targeted advertising, or profiling, and appeal a denied request. Stook does not currently sell personal information or use it for targeted advertising. We may need to verify your identity and authority before completing a request.
Send requests to both or either of the contact addresses below. If we deny an appealable request, reply with “Privacy Appeal” in the subject line and explain why you believe the decision should be reconsidered.
10. Children
Stook is intended for adults involved in farm or agricultural operations and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information, contact us so we can review and delete it as appropriate.
11. United States processing
Stook is operated from the United States. If you access it from another country, information may be processed in the United States or other locations used by our service providers, where privacy laws may differ from those in your location.
12. Changes to this policy
We may update this policy as the service and its data practices change. We will update the date above and provide additional notice when required by law or when a change materially affects how previously collected personal information is used.
13. Contact
Privacy questions and requests may be sent to surya@stookag.com or rehaan@stookag.com. Please do not send sensitive farm records by ordinary email.