This policy covers the website you are reading and the Froniva platform at portal.froniva.ai. It is written to be read, not to be survived. Where a sentence could be vague or precise, we chose precise.
Froniva is a product brand of Valstan GmbH, a Swiss limited liability company. Valstan GmbH is the controller for the personal data described in this policy.
For visitors to this website and for the people who hold a Froniva account, we are the controller: we decide what is collected and why, and this policy is the answer. For the commercial data inside a customer's platform — their prices, their invoices, their buyers — we are a processor: the customer organisation is the controller, we act on their documented instructions, and a data processing agreement governs it. Both roles are described below.
There is no cookie banner here because there is nothing to consent to. We use Plausible Analytics, which is cookieless, collects no personal data, does not track you across sites, and is hosted in the EU. We do not use Google Analytics, Meta pixels, or any advertising tag. Our web server keeps short-lived technical logs — IP address, browser user agent, the page requested, the timestamp — to keep the service running and to investigate abuse. Your language and market preference are stored in your own browser and never reach us.
One disclosure we owe you: this site loads a typeface from Google Fonts, so your IP address reaches Google when a page renders. If you would rather that did not happen, a content blocker will stop it and the site still works.
The platform at portal.froniva.ai is for authorised people at customer organisations. For each account we hold a name, an email address, a role, and the record of which sign-in methods it may use. There are four doors: Zoho single sign-on, an email and password, a passkey, and Google sign-in. Passwords are stored only as a salted scrypt hash, never in readable form. For a passkey we store only the public key — the fingerprint or face scan stays on your device and is never sent to us.
A session is a signed cookie that your browser returns to us, marked HttpOnly and Secure so that scripts cannot read it. Alongside it we keep a session record: an identifier, which door you came through, a device label derived from your browser's user agent such as iPhone or Chrome, the IP address, and when the session was created and last used. That record exists so that you can see every device holding a live session and end any of them, and so that we can revoke access immediately when someone leaves. Sessions last at most thirty days and end the moment they are revoked.
If you choose to sign in with Google, we ask Google for three things and nothing more: that you are signed in, your email address, and basic profile information such as your name. We use them for exactly one purpose — to confirm that the person at the keyboard is someone who already holds an active Froniva account. Signing in with Google never creates an account. If the address is not already authorised, we refuse the sign-in and keep nothing.
Froniva's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell that information, do not use it for advertising, do not transfer it to anyone except where the law compels us, and do not use it to train artificial intelligence models. You can revoke our access at any time from your Google account's third-party access settings.
Inside the platform we process commercial records on behalf of the customer organisation: products and prices, invoices and payment status, harvest and inventory movements, and contact records for their buyers. Where a customer switches on the WhatsApp sales channel, that includes their buyers' phone numbers and the content of the messages exchanged. All of it stays the customer's property. We process it to run the service they bought, never for our own purposes, and never to build a product for someone else.
Recommendations are produced with the help of a frontier language model reached over an API under terms that forbid training on our customers' data. The model receives the structured figures a recommendation needs — channel prices, segment bands, historical margins, the day's wholesale prints. Our infrastructure, encryption and audit posture is set out in detail on the security page. Read the security page →
We are established in Switzerland, so the Federal Act on Data Protection applies to us; where we serve people in the European Economic Area, the GDPR applies as well. We rely on the performance of a contract for everything needed to give you an account and run the platform; on our legitimate interest in keeping the service secure, available and measurable for server logs and cookieless analytics; on legal obligation for records we are required to keep; and on your consent where we ask for it, which you may withdraw at any time.
We do not sell personal data and we do not share it for anyone else's marketing. A small set of providers process data so that the service can exist: Railway for application hosting on Google Cloud infrastructure in the EU; Plausible Insights for cookieless analytics in the EU; Google for the typeface on this site and, where enabled, for sign-in; Anthropic for the language model behind recommendations; and Zoho for accounting and CRM integration where the customer has connected it. We disclose data to authorities only where the law requires it, and we tell the affected customer unless we are forbidden to.
Customer data is stored and processed in the European Union. Where a provider is based outside Switzerland or the EEA, we rely on the transfer mechanisms those laws permit, including the European Commission's standard contractual clauses.
Server logs are short-lived and used for operations and abuse investigation. Session records live at most thirty days and are pruned after that; a revoked session stops working immediately. Account records last as long as the account does. The pricing audit trail — who approved which price, and when — is kept for the life of the contract plus seven years, because that is what makes the record defensible. Analytics data is aggregate and holds nothing personal to delete. When a contract ends, the customer receives a complete export and we delete the rest on confirmation, keeping only what Swiss and EU fiscal law obliges us to.
You can ask what we hold about you, have it corrected, have it deleted, restrict or object to how we use it, take it with you in a portable form, and withdraw any consent you gave. Write to us and we will answer within thirty days; if a request is complex we will say so and give you a date. If your data sits inside a customer's platform, we will route the request to that customer, since they are the controller there, and we will help them answer it.
If you think we got it wrong, you can complain to the Swiss Federal Data Protection and Information Commissioner, or to the supervisory authority of your country if you are in the European Economic Area. We would rather you told us first.
Froniva is a tool for agricultural businesses. It is not directed at children and we do not knowingly collect data about them. If you believe a child's data reached us, write to us and we will remove it.
This page changes when our practice changes, not on a schedule, and the date below always says when. If a change materially affects people with an account, we tell them before it takes effect. The English version is the authoritative one; the Spanish and German versions are provided for convenience and, in case of any discrepancy, English prevails.
Last updated 9 September 2026 · Questions about this policy go to daniel@froniva.ai · Security reports go to security@froniva.ai · See also the terms of service