At a glance: Your ranch records are private to your ranch. We use them only to run, protect and support the service. We don't sell them, show ads or send them to AI providers. Payments are handled by Stripe, which keeps your card details; we never see the full number.
Who we are and how to contact us
Cattle Command is a ranch-record management service operated from Georgia, United States, by an individual under the business name Cattle Command; this policy does not represent it as an LLC or corporation. Contact [email protected] for privacy requests, account closure, data-access assistance or security reports, and [email protected] for help with the app.
Information you provide
Account details include your name, email address and authentication information. Ranch content includes ranch names, operation types, settings, cattle identifiers and histories, pasture boundaries, locations, memberships, activities, health and breeding entries, feed records, expenses, sales, notes and documents you choose to upload. Documents may contain personal information, so upload only information you are authorized to provide. Customer support includes your messages, saved replies, status and timestamps. Please do not provide government identifiers, payment-card numbers, human medical records or unrelated sensitive information.
Information collected as you use the service
We store account status, email-verification status, login timestamps, the days you used the service (to decide trial-extension offers), plan, trial and renewal dates, saved-action audit records, security events and administrative changes. Registration records the versions of the Terms and Privacy Policy you acknowledged, adult eligibility and acceptance time, with a hashed source IP, plus the optional herd-size range you choose. Passwords and single-use verification/reset tokens are stored as hashes; active session tokens are separately stored for authentication. If you answer an in-app feedback question or join a waitlist, we keep your answer or email with your ranch. Requests necessarily expose network information such as IP address, device/browser details and requested URLs to the transport infrastructure. We do not claim every provider avoids logging these details.
Purposes of processing
We use this information to create and protect accounts, verify email, provide ranch-scoped access, save and export records, perform calculations, manage plans, answer support requests, investigate failures and prevent abuse. Operational analytics count actual sign-ins and saved actions. We may also use necessary information to comply with applicable obligations, respond to valid legal requests and protect the service and users. We do not currently use third-party advertising analytics or sell personal or ranch data.
Email verification and service messages
Verification is required for new customer access. Verification and password-reset links are single-use and expire. We use account email addresses for requested authentication, invitations, Help replies and other service messages. These emails are sent through Google's Gmail service from our business account, so Google receives the recipient, subject, message and link. A configured sender does not guarantee inbox placement. We do not treat required service notices as a subscription to marketing mail, and we do not currently send marketing email.
Ranch sharing and administrator access
Ranch owners and invited members access ranch information according to assigned roles. Owners are responsible for authorized invitations and for information about other people included in ranch records. The business manager is restricted to active exec/developer accounts with site-management permission. Authorized administrators and the operator may access information needed for support, security, hosting or other legitimate operations, including stored records and backups; the product is not end-to-end encrypted from the operator. Ranch records are not made public by default. Exports you share outside Cattle Command are under your control.
Cookies, preferences and storage on your phone
An essential HttpOnly session cookie maintains sign-in. Browser storage holds preferences. So the app works without signal, your browser keeps a copy of the app and of your ranch's recent records (about the last two years of activity) on the device, plus any changes saved without signal until they sync. Signing out removes that ranch copy from the device. If some changes have not synced yet, the app asks you to sync first; signing out anyway discards them. Protect the device and browser profile, and clear this site's browser storage when disposing of or sharing a device. We do not set advertising cookies. Future nonessential cookies or tracking require updated disclosures and any applicable choices or consent.
Hosting and service providers
The website, database and uploaded documents run on a Google Cloud server in the United States. Cloudflare provides the website address, HTTPS and the secure connection to that server, and stores encrypted daily backups in its R2 storage; older backups are rotated out automatically, and copies kept on the server are deleted after about 30 days. Backups are encrypted before they leave the server. Google sends account email. Stripe processes payments. We share information with providers only as needed for the service functions described here, or as required or permitted by applicable law. Provider policies and processing locations can change, and material changes in our use will be reflected here.
Maps, weather, prices and location
Optional map tiles and location lookups use external providers, including OpenStreetMap/Photon, U.S. Census address lookup, Esri and U.S. Geological Survey map services depending on the selected view. Weather uses the U.S. National Weather Service. If you set up local cattle prices, our server sends the USDA Market News key and market report you entered to USDA to fetch prices; it sends none of your records. These providers may receive the requested address, city, coordinates, map area and network request details needed to return results. Device location is used only after you choose the location action and allow the browser prompt. You can enter a city or location manually instead. Do not enter precise private locations you do not want processed for that feature.
Subscriptions and payment information
Paid Plus subscriptions are sold through Stripe Managed Payments, with Stripe as the merchant of record. Stripe collects your payment details, billing address and tax information directly and handles them under its own privacy policy (stripe.com/privacy). We receive and store a Stripe customer and subscription identifier, the plan, billing interval, status, renewal and cancellation dates, and payment success or failure. We never receive or store your full card number. The free trial collects no payment details.
Manual records and advertising
Cattle Command uses manual entry. Ranch records, uploaded documents and audio are not sent to an AI provider. Your documents remain private to your ranch and can be downloaded or used for manual record entry. Historical draft, review, usage and audit records may remain subject to the retention practices described above. No advertising network is connected.
Other disclosures
We may disclose information when reasonably necessary to comply with valid legal process, enforce lawful agreements, investigate fraud or security incidents, protect rights and safety, or carry out a business transfer subject to applicable law and appropriate notice. We may share information with your direction or consent. We will not describe records as anonymous merely because direct identifiers are removed when re-identification remains reasonably possible.
Retention, archiving and deletion
Active and archived ranch records are retained to provide history, continuity and recovery until deletion is requested and assessed, or they are no longer needed for the stated purposes. Moving to the Free plan or canceling a subscription does not delete records. Archiving an account blocks sign-in but does not erase its ranch content. Verification/reset tokens expire and may remain as expired/used audit rows; sessions expire after their configured lifetime. Immutable command history and associated security/legal records may be retained where necessary for integrity, dispute resolution or lawful obligations. Billing records are kept as long as tax and accounting rules require. A verified deletion request will address the active system, shared-ranch responsibilities, legal exceptions and backup copies; deleted data leaves encrypted backups as they rotate out, and any restore must respect previously approved deletion. We do not promise instant deletion from every copy.
Access, correction, export and privacy requests
You can edit supported records, use available export tools and request help with access, correction, portability, account closure or deletion by emailing the contact above. Applicable law may give you additional rights, including restrictions, objection, appeal or complaint rights. Identify the request and account email; do not email passwords or sensitive identity documents unless a secure method is specifically arranged. We may verify identity and authority before disclosing or changing data and respond within applicable legal time limits. Shared-ranch and third-party rights or legal exceptions may limit a request. We do not require you to waive nonwaivable rights to use these procedures.
Security and incidents
Safeguards include password hashing, expiring single-use authentication links, active-account/session checks, origin and request-verification checks, ranch-scoped permissions, email verification, restricted business- manager access, administrative auditing, HTTPS for every remote connection, and encrypted off-site backups with tested restores. No security measure guarantees confidentiality or availability. Keep credentials private, use a secured device, review membership access and report suspected incidents promptly. We will investigate and provide notifications when applicable law requires them.
Children and geographic availability
The service is intended for adults at least 18 years old and is not directed to children. Do not knowingly submit a child’s personal information. Contact us if such information was provided so we can investigate and take appropriate action. The operator is in the United States; provider infrastructure may process requests internationally. This public-beta policy does not claim the service is approved for all countries or that every regional notice/rights mechanism has been implemented. Public availability outside the intended U.S. launch requires review of applicable requirements.
Policy updates
The effective date and version identify this policy. We will make updated policies available in the service and provide appropriate notice of material changes before they take effect where required. New signups acknowledge the applicable policy version. Changes do not override nonwaivable rights or permit misleading retroactive use of information. Contact [email protected] with questions about the current policy.