Privacy Policy

Effective September 24, 2026

This policy explains:

• what information Roxstar Labs, LLC ("Roxstar," "we," "us") collects through Provendry;
• how we use it;
• the choices and rights you have.

Provendry means our feed-mill management platform, including the website at provendry.com, the Provendry mobile apps for iPhone and Android, the customer portal, and the emails and push notifications it sends (together, the "Service").

Who is responsible for your information: Roxstar Labs, LLC, 238 Garfield Ave. NW, Carrollton, Ohio 44615, USA.
Privacy Officer: support@provendry.com (subject line "Privacy").

1. Who this policy covers, and our role

The Service is used by feed mills and other businesses ("Mills") and by the people they authorize:

• their staff;
• the farms and other customers a Mill invites to its customer portal ("Customers").

A Mill's business records. These are its customers, orders, invoices, formulas and the rest. For these records:

• the Mill decides what is collected and why;
• we process the information on the Mill's behalf, as its service provider, to provide the Service.

If you are a Customer of a Mill, the Mill is responsible for your information in its records. Questions about it are best directed to that Mill, and we will help the Mill respond.

Information about the people who use Provendry. For account, billing, support and usage information, we are responsible, as described in this policy.

2. Information we collect

• Account information. Name, email address, phone number where given, organization name and role. You provide this when you sign up, are invited to a Mill's team, or are invited to a Mill's customer portal.
• A Mill's business records. What a Mill enters or generates in the Service, including:
  • ingredients and formulas;
  • customers and their contact and delivery details;
  • bins, orders, and production and lot records;
  • inventory, invoices, statements, payments and contract prices;
  • labels, and messages about orders.
• Customer portal activity. If a Mill invites you to its customer portal: the orders you place or request, the invoices and statements you view, and your messages to the Mill.
• Payments made through the Service. When a Customer pays a Mill's invoice online, Stripe processes the payment for the Mill's own Stripe account.
  • Card and bank details are entered directly with Stripe, and we never receive or store them.
  • We store the payment's amount, date, status and Stripe reference, so the invoice and the Customer's account show it.
• Subscription billing. Stripe bills a Mill's Provendry subscription. We store the subscription status and a Stripe customer reference, not card numbers.
• Files and photos you upload. Supplier spec sheets, delivery tickets, certificates, veterinary feed directives, logos, and attachments to support requests.
• Support requests. What you send us through the in-app support form or by email: your name, email, the message and any attachments. From the app, we also receive the page you were on.
• Mobile app data. A device token, so we can send you push notifications. The camera or photos, only when you choose to use them to capture a document.
• Usage and technical data. Log data, including:
  • IP address;
  • browser and device type;
  • actions taken in the Service, including an audit trail of changes.

  We use it for security, support and improving the Service.

• Sign-up check. The anti-bot check on our sign-up form receives your IP address and browser signals.

3. How we use information

We use information to:

• operate, secure, maintain and support the Service;
• carry out what Mills and Customers ask of the Service, such as sending an invoice, a statement, an order update or a notification;
• process subscriptions and keep payment records;
• send service messages, such as invitations, password resets and account notices;
• provide AI-assisted features you choose to use;
• analyze and improve the Service, using aggregated or de-identified information where practical;
• prevent fraud and abuse;
• comply with the law and enforce our Terms.

What we do not do:

• We do not sell personal information.
• We do not share it for advertising.
• We use a Mill's business records only to provide, secure, support and improve the Service for that Mill.
• We may create aggregated or de-identified information that does not identify any Mill, Customer or person.
• One Mill's records are not made available to another Mill.

4. How each Mill's data is kept separate, and who can see it

Separation between Mills. Each Mill's data is logically separated, including through row-level security at the database layer. It is designed to be accessible only to people the Mill has authorized, and to our systems acting on its behalf.

Within a Mill. Its administrators can see account, operational and activity data, including audit-trail records. They decide what each staff role can see.

Customers. A Customer invited to a Mill's portal sees only that Customer's own orders, invoices, statements and prices. A Customer does not see:

• another Customer's information;
• the Mill's costs or margins.

Our staff. Our staff access a Mill's workspace only to provide support or keep the Service running.

5. Service providers (sub-processors)

We share information with the providers below, which process it on our behalf. They do so under contract, and only to deliver the Service. We will update this list before adding a new sub-processor.

OpenAI. Content sent to these features is used to produce the result. It is not used to train OpenAI's models. OpenAI may keep it for a limited period for abuse monitoring, under its API data-retention terms.

We may also disclose information:

• when required by law or valid legal process;
• to protect the rights, safety and security of our users, the public or us;
• to a successor in a merger, acquisition or sale of assets, subject to this policy.

6. Emails and push notifications

Mills can have the Service send emails and push notifications, for example:

• when an order is ready, out for delivery or delivered;
• when an invoice or statement is issued or due.

You can stop push notifications in the app or in your device settings. To stop emails from a Mill, contact that Mill or use the unsubscribe option where one is provided. We will still send service messages about your account, such as security and billing notices.

7. Cookies and analytics

Inside the application. We use cookies and similar storage only for what the Service needs to function, such as keeping you signed in and remembering small preferences. There is no advertising or cross-site tracking in Provendry.

On our public marketing pages. These pages also load Google Analytics, which sets its own cookies to measure visits. You can block it with a standard browser setting or content blocker without affecting the application.

8. Where information is stored

Information is stored and processed in the United States. If you are in Canada or elsewhere, your information will be transferred to and processed in the United States. There it may be accessible to courts, law-enforcement and national-security authorities under U.S. law. Our service providers are bound by contract to protect it.

9. Data retention

While an account is active. We keep a Mill's data as long as its account is active or paused.

After a subscription ends. We keep the data for 12 months so the Mill can reactivate or export it. We give 30 days' notice by email before deleting it. Deleted data is removed from active systems, and from backups as they cycle.

Records we keep longer. We may keep some records longer where reasonably necessary for:

• legal, accounting and tax obligations;
• dispute resolution;
• fraud and security prevention;
• enforcing our agreements.

Your own account. When you delete your own account, your sign-in and profile are removed. Business records you created remain with the Mill as part of its records.

Support records. Support requests are kept as long as needed to resolve them and keep a reasonable service history.

10. Security

We use reasonable administrative, technical and physical safeguards designed to protect information, including:

• encryption in transit;
• access controls and row-level security;
• checks that refuse passwords known to have leaked in data breaches.

No method of transmission or storage is completely secure.

If a security breach affects your personal information, we will notify you, the relevant Mill and the appropriate regulators as required by law. That includes the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial law and applicable U.S. state law.

11. Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it.

12. Your rights

Your rights. Depending on where you live, you may have the right to:

• access, correct, export or delete your personal information;
• withdraw consent;
• object to or restrict certain processing.

Canadian residents have these rights under PIPEDA and applicable provincial law. We will not treat you differently for exercising your rights.

How to make a request. Email support@provendry.com with the subject line "Privacy." We will respond within 30 days, or as otherwise required by law. We may need to verify your identity first.

Information in a Mill's records. If your information is part of a Mill's records, we may direct your request to that Mill, or act on its instructions. A Mill's administrator can export the Mill's records from the Service at any time.

Complaints. If you are not satisfied with our response, you may complain to the privacy regulator where you live. In Canada, that is the Office of the Privacy Commissioner of Canada.

13. Changes to this policy

We may update this policy. We will post material changes here with a new effective date, and notify account owners by email or in the Service before they take effect.

14. Contact us

Privacy Officer, Roxstar Labs, LLC
238 Garfield Ave. NW, Carrollton, Ohio 44615, USA
support@provendry.com (subject line "Privacy")

See also our Terms of Service.