Privacy Policy

Welcome to Agrixia. This privacy policy explains how ANUBRIS (PRIVATE) LIMITED ("we," "us," or "our") collects, uses, protects, and shares your information when you use the Agrixia mobile application and web platform ("Agrixia" or "the platform").

Agrixia is an agricultural marketplace and networking platform designed for farmers, dealers, harvester operators, agricultural workers, service providers, and traders across Pakistan. We are committed to protecting your privacy and being transparent about how we handle your data.

By creating an account or using Agrixia, you agree to this privacy policy. If you do not agree, please do not use the platform.

2.1 Account Information

When you create an account, we collect:

• Phone number — Required for account creation and OTP-based login.
• Name — Your display name shown to other users.
• Username — A unique handle you choose for your profile.
• City and province — Used to show you relevant local listings, jobs, and market prices.
• User type — Farmer, dealer, equipment owner, worker, service provider, or trader.
• Profile photo and bio — Optional information you add to your profile.

2.2 Identity Verification

CNIC numbers are encrypted using AES-256-GCM before storage and are never stored in plaintext. Only authorized administrators can access CNIC data for verification and dispute resolution. Providing your CNIC or dealer license is voluntary but unlocks a verified trust badge.

2.3 Content You Create

Listings, job postings, messages, shorts, statuses (24-hour retention), and reviews.

2.4 Location Data

GPS is only accessed with your explicit permission (for example during land measurement). City-level filtering does not require GPS.

2.5 Usage & Device Data

View counts, interaction patterns, FCM/web-push tokens, and device type.

2.6 Payment Information

Payments are processed through Safepay, JazzCash, and EasyPaisa. We do not store your wallet PINs or payment credentials.

To provide and improve services, verify identity, facilitate transactions and communication, send notifications, and prevent fraud or abuse. You control which notifications you receive through in-app settings.

• AES-256-GCM encryption for CNIC; TLS for all data in transit.
• Short-lived JWT access tokens (15 min) plus refresh tokens (7 days).
• httpOnly secure cookies; CSRF protection on every state-changing request.
• Rate limiting, input validation, parameterized queries, and upload validation.
• Admin authentication is separate from the public user auth system.

We do not sell your data. We do not rent, trade, or share personal information with data brokers or ad networks.

Publicly visible profile fields: name, username, photo, bio, city, user type, listings, reviews, verification status, follower count, and online status (unless your profile is private).

Service providers receive only the minimum data necessary: Safepay/JazzCash/ EasyPaisa for payments, Firebase Cloud Messaging for push, SMSGate for OTP.

We may disclose information under Pakistani law (PECA 2016, Personal Data Protection Bill) when required by court order or to protect user safety.

• Access your data from the profile page.
• Update or correct your profile any time in settings.
• Delete your account — enters a 30-day soft-delete grace period before permanent deletion.
• Control notifications in app or device settings.
• Control profile visibility — set private to limit what non-followers see.
• Block users you no longer want to interact with.
• Report content that violates our community guidelines.

Agrixia uses only first-party cookies: access_token and refresh_token (both httpOnly + secure) for authentication, and csrf_token (non-httpOnly) for CSRF protection. We do not run third-party tracking, advertising, or cross-site cookies.

Active account data is retained while the account is active. Deleted accounts are purged 30 days after soft-delete. Statuses auto-delete after 24 hours. Transaction records are retained for 7 years per Pakistani tax law.

Agrixia is not intended for anyone under 18. We do not knowingly collect data from minors. If we become aware of such an account, we will delete it.

Agrixia's servers are located to serve Pakistan. Access from outside the country means your data is processed under Pakistani law, which may differ from your local law.

When we change this policy we update the "Last Updated" date and post an in-app notice. Continued use after changes constitutes acceptance.

Email: support@agrixia.com
Tech: tech.dev@quiztalent.com
Company: ANUBRIS (PRIVATE) LIMITED, Lahore, Pakistan.

This policy is governed by the laws of Pakistan, with exclusive jurisdiction in the courts of Lahore.