Privacy Policy

Effective date: May 10, 2026 · Last updated: May 10, 2026

This Privacy Policy explains how CalyxBox LLC ("CalyxBox," "we," "us," or "our") collects, uses, and shares information when you use TurboBatch (the "Service"). We are committed to handling your data responsibly and giving you meaningful control over it.

1. What we collect

1.1 Information you give us

• Account info — name, email, password (stored as a one-way hash, never in plaintext).
• Farm data — farm names, branding, batches, strains, locations, harvest weights, team members, and other production records you enter or upload.
• Support correspondence — content of emails or messages you send to support@turbobatchmushrooms.com or via the in-app contact form.
• Billing details — when you subscribe, our payment processor (Stripe) collects your payment method, billing address, and invoice information. CalyxBox does not store full card numbers.

1.2 Information collected automatically

• Usage data — pages visited, actions performed (e.g. batch created, status changed, label printed) for the audit trail and analytics.
• Technical data — IP address, browser type, operating system, referring URL, and timestamps. Used for security, rate-limiting, and troubleshooting.
• Cookies and similar technologies — see our Cookie Policy.

1.3 Information from third parties

If you sign up via an invite token created by another user, we receive your assignment metadata (which farm, what role) from that user.

2. How we use information

We use the information we collect to:

• operate, maintain, and secure the Service;
• process payments and manage your subscription;
• send transactional and account email (password resets, billing receipts, scheduled production reports you've configured);
• respond to support requests;
• maintain accountability and audit trails on team actions inside your farm;
• analyze how the Service is used in aggregate so we can improve it;
• comply with legal obligations and enforce our Terms of Service.

3. Legal basis (for users in the EEA / UK)

• Contract — to provide the Service you signed up for.
• Legitimate interests — to operate, secure, and improve the Service, prevent fraud, and respond to support.
• Consent — for non-essential cookies and any optional marketing communications, where required.
• Legal obligation — to meet tax, accounting, and compliance requirements.

4. Sharing

We do not sell your personal information. We share it only with:

• Service providers who help us operate the Service — including our hosting provider, our payment processor (Stripe), our email-delivery infrastructure, our error monitoring (Sentry), and our marketing analytics (Google Analytics 4 — public marketing pages and signup funnel only; the authenticated app does not run analytics). These vendors are bound by contract to use your data only on our instructions.
• Other users on your farm — your name and the actions you perform are visible to teammates on the same farm as part of the audit trail.
• Legal authorities — when required to comply with a valid legal request, court order, or to protect rights, property, or safety.
• Successors — in the event of a merger, acquisition, or asset sale, your information may be transferred subject to this Privacy Policy.

5. Data retention

We retain your account and farm data while your account is active and for a reasonable period afterward to allow account recovery and meet legal obligations. You can permanently delete your account at any time from Settings → Manage My Account → Delete My Account; once confirmed, your account record and any farms where you are the sole Manager are erased without archive.

6. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your information ("right to be forgotten");
• export your data in a portable, machine-readable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• lodge a complaint with a data-protection authority.

You can exercise most of these rights directly from Settings → Manage My Account: Download My Data exports a JSON file with everything we hold for your account, and Delete My Account permanently removes it. For anything else, email support@turbobatchmushrooms.com.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect your information — including HTTPS for all traffic, hashed passwords, audit logging, rate limits, and access controls. No system is perfectly secure, however, and we cannot guarantee that unauthorized access will never occur. If we become aware of a security incident affecting your data, we will notify you as required by applicable law.

8. International data transfers

The Service is hosted in the United States. If you access TurboBatch from outside the United States, your information will be transferred to and processed in the United States, which may have data-protection rules different from your home country. By using the Service you consent to this transfer.

9. Children

TurboBatch is not intended for children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

10. California & other US-state privacy rights

If you are a California resident or live in another US state with comparable privacy laws (e.g., Virginia, Colorado, Connecticut, Utah), you may have specific rights including the right to know, delete, and correct personal information, and the right to opt out of "sales" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise your rights, use the in-app data-export and account-deletion tools or email support@turbobatchmushrooms.com.

11. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app notice at least 14 days before the changes take effect. The most recent version is always at this URL.

12. Contact

For privacy questions, requests, or complaints:

CalyxBox LLC
Privacy & Data Protection
5667 Notting Hill Rd
Gurnee, IL 60031
USA
support@turbobatchmushrooms.com