Last updated: 29 July 2026
Welcome to Xloora.
Xloora ("Xloora", "we", "our", or "us") is an agricultural intelligence platform developed and operated by XpectralTEK. We are committed to protecting your privacy and processing your personal information fairly, lawfully, and transparently.
This Privacy Policy explains how we collect, use, store, disclose, and protect information when you access or use:
Our goal is to provide precision agriculture solutions while respecting your privacy and complying with applicable data protection laws, including:
By accessing or using our Services, you acknowledge that you have read this Privacy Policy.
Unless otherwise specified, the Data Controller responsible for processing your personal information is:
XpectralTEKIf you have any questions regarding this Privacy Policy or our processing of personal information, you may contact us using the above details.
This Privacy Policy applies to all information processed through:
This Policy does not apply to third-party websites that may be linked from our Services.
For the purposes of this Privacy Policy:
Depending on how you interact with Xloora, we may collect the following categories of information.
When you create an account, request information, subscribe to our Services, or communicate with us, we may collect:
Your account may include:
To provide our Services, Xloora may process agricultural information, including:
Where this information identifies or can reasonably be linked to an individual, it may constitute Personal Data under applicable law.
When connected devices are used, we may collect:
Depending on your use of Xloora, we may process:
These datasets are processed to provide analytical insights and recommendations through the Xloora platform. They may also be used to improve service quality where permitted by applicable law and contractual arrangements.
When you access our Website or Services, we may automatically collect technical information about your device and usage.
This may include:
This information helps us operate, secure, maintain, and improve the Services.
Xloora uses cookies and similar technologies to enhance user experience, maintain security, analyze website traffic, and improve our Services.
Cookies may include:
These cookies are necessary for:
These cookies cannot be disabled without affecting the operation of the Services.
Functional cookies remember your preferences, including:
With your consent where required by law, we may use analytics technologies to understand:
Analytics information is generally aggregated and used to improve the Services.
Security cookies help detect:
You may configure your browser to:
Please note that disabling essential cookies may prevent parts of the Services from functioning correctly.
We process information only where necessary for legitimate business purposes and in accordance with applicable law.
We may use your information to:
To provide:
AI-generated outputs are intended to assist users and should not be considered professional agronomic, legal, or regulatory advice.
We may use information to:
Where Personal Data is used for model improvement, we will do so only where permitted by applicable law or with appropriate consent or contractual authorization.
We may contact you regarding:
Where required by law, marketing communications will only be sent with your consent or another valid legal basis.
We process information to:
Where the GDPR applies, we process Personal Data on one or more of the following legal bases:
Processing necessary to:
We may process information where necessary to:
When relying on legitimate interests, we consider and balance your rights and freedoms against our legitimate business interests.
We rely on consent for certain processing activities, including where required for:
You may withdraw your consent at any time. Withdrawal does not affect processing already carried out before withdrawal.
We may process Personal Data to comply with:
We do not sell your Personal Data.
We may disclose information only in the circumstances described below.
We may share information with trusted service providers assisting us with:
All such providers are contractually required to process information only on our instructions and to implement appropriate security measures where they act as processors under the GDPR.
Where necessary to provide requested services, we may share limited information with:
We may disclose information when required:
If XpectralTEK undergoes:
Personal Data may be transferred as part of that transaction, subject to applicable law. Users will be notified where required by law.
We retain Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.
Retention periods may include:
| Category | Typical Retention Period |
|---|---|
| Account Information | While the account remains active and up to 5 years after closure where required by law |
| Subscription & Billing Records | As required by applicable accounting and tax laws (generally up to 10 years in Portugal) |
| Customer Support Records | Up to 3 years after the support request is resolved |
| Device & Diagnostic Logs | Up to 24 months unless needed for security investigations |
| Authentication Logs | Up to 12 months |
| Sensor & Environmental Data | Until deleted by the Customer or according to the applicable service plan |
| Spectral Images & AI Analysis | Until deleted by the Customer or account termination, unless otherwise agreed |
| Backup Copies | Automatically deleted according to our backup retention schedule |
When retention is no longer necessary, Personal Data will be securely deleted, anonymized, or irreversibly aggregated.
Xloora primarily stores and processes data within the European Economic Area (EEA). However, some service providers or technical infrastructure may involve transfers of Personal Data outside the EEA.
Where such transfers occur, we implement appropriate safeguards in accordance with Chapter V of the GDPR, including:
We implement appropriate technical and organizational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
Our security measures may include:
Although we strive to use commercially reasonable means to protect Personal Data, no method of electronic transmission or storage can be guaranteed to be completely secure.
If you are located in the European Economic Area or another jurisdiction providing similar rights, you may have the right to:
Request confirmation of whether we process your Personal Data and obtain a copy of that data.
Request correction of inaccurate or incomplete Personal Data.
Request deletion of your Personal Data where permitted by applicable law ("Right to be Forgotten").
Request that we temporarily suspend processing of your Personal Data in certain circumstances.
Receive your Personal Data in a structured, commonly used, machine-readable format and, where technically feasible, request that we transmit it to another controller.
Object to processing based on our legitimate interests or to direct marketing communications.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
If you believe that our processing violates applicable data protection law, you may lodge a complaint with your local supervisory authority.
For users in Portugal, this is generally the Comissão Nacional de Proteção de Dados (CNPD).
Xloora uses artificial intelligence, computer vision, statistical models, and machine learning to generate analyses, predictions, alerts, and recommendations regarding crop conditions, environmental factors, and agricultural management.
These AI Services may process:
AI-generated outputs are intended to support agricultural decision-making and should be interpreted as advisory information only.
Unless explicitly stated otherwise, Xloora does not make decisions producing legal effects or similarly significant effects solely through automated processing. Where Article 22 of the GDPR applies, users may request human review, express their point of view, and contest a decision.
Xloora is intended for professional and business use by farmers, agronomists, agricultural organizations, researchers, cooperatives, educational institutions, and commercial customers.
Our Services are not directed to children under the age of 16, and we do not knowingly collect Personal Data directly from children.
If we become aware that Personal Data relating to a child has been collected without appropriate legal authorization, we will take reasonable steps to delete that information.
Our Services may integrate with or link to third-party services, including:
These third parties maintain their own privacy policies and are responsible for their own processing activities.
Depending on how the Services are used, Xloora may act either as a Data Controller or a Data Processor under the GDPR.
XpectralTEK acts as the Data Controller for Personal Data relating to:
In these cases, XpectralTEK determines the purposes and means of processing the Personal Data.
Where customers upload or manage Personal Data relating to their own employees, contractors, consultants, farm workers, or other individuals through the Xloora platform, XpectralTEK generally acts as a Data Processor, processing such information solely on the documented instructions of the customer, who acts as the Data Controller. This relationship should be governed by a separate Data Processing Agreement (DPA), where required under Article 28 of the GDPR.
Customers retain ownership of all data they upload to or generate through the Services, including, where applicable:
By using the Services, customers grant XpectralTEK a limited, non-exclusive, worldwide, royalty-free license to host, store, reproduce, transmit, process, and analyze such data solely as necessary to:
This license terminates when the customer permanently deletes the data or the agreement ends, except where continued retention is required by law or reasonably necessary to resolve disputes, enforce agreements, or maintain backups for a limited period.
Xloora uses artificial intelligence and machine learning to assist users in monitoring crop conditions and generating agronomic insights.
Unless expressly agreed otherwise in writing:
Where identifiable Personal Data would be used for model improvement, we will rely on an appropriate legal basis under applicable law and, where required, obtain consent or enter into contractual arrangements.
If XpectralTEK becomes aware of a Personal Data Breach affecting Personal Data processed on behalf of customers, we will respond in accordance with applicable law.
Where required, we will:
Customers are responsible for assessing whether notification to affected individuals is required when they act as the Data Controller.
We may update this Privacy Policy from time to time to reflect:
When material changes are made, we will publish the revised version on our website and update the "Last updated" date. Where required by law, we will provide additional notice (such as by email or an in-platform notification).
Your continued use of the Services after the revised Privacy Policy becomes effective constitutes acknowledgment of the updated Policy, to the extent permitted by applicable law.
If you have any questions regarding this Privacy Policy, your Personal Data, or your rights under applicable data protection laws, you may contact us:
XpectralTEKIf XpectralTEK appoints a Data Protection Officer (DPO) or an EU Representative in the future, the relevant contact details will be published on the Xloora website.
If you believe that the processing of your Personal Data infringes applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority.
For Portugal, this is generally the Comissão Nacional de Proteção de Dados (CNPD).
You may also contact the supervisory authority in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
This Privacy Policy is effective as of the date indicated above and supersedes any previous versions.
By accessing or using Xloora, you acknowledge that you have read and understood this Privacy Policy.
