← Back to the website
This is a translation provided for convenience. The Portuguese version is the legally binding one and prevails in case of any conflict. Read the Portuguese version.

Subprocessors

Ortu Agro Platform

Last updated: October 24, 2026 · Updated whenever a vendor is added or replaced

1. What this page is

In compliance with Article 6, VI, of the LGPD (Brazil's General Data Protection Law, Law No. 13,709/2018) and with the principle of transparency, Ortu Agro LTDA publicly discloses the list of third-party subprocessors (processors) that support the operation of the Platform and that may process the personal data of data subjects for purposes strictly necessary for the service.

All subprocessors are subject to contractual obligations of confidentiality, security and data protection consistent with the LGPD. For details on the legal bases and the rights of the data subject, see the Privacy Notice.

2. List of Active Subprocessors

Vendor Purpose Data category Location
Google Cloud Platform
DPA 		Infrastructure: Kubernetes clusters (GKE), managed PostgreSQL database (Cloud SQL), image storage (Artifact Registry), secrets management (Secret Manager), AI processing (Vertex AI). All operational data entered by the user; messages and context sent to the Peão Zé agent. Brazil (region southamerica-east1) for the system and the data at rest. AI inference for the Peão Zé agent (Gemini models, on Vertex AI) is processed in the United States (us multi-region) and on Google's global network, with international transfer under the safeguards of the LGPD (Privacy Policy, section 10).
Stripe, Inc.
Privacy · DPA 		Processing of recurring payments, subscription management, issuing of receipts. Identification data of the billed data subject, card data (tokenized by Stripe; Ortu does not store the PAN, the card number), billing address. United States (with international transfer under LGPD safeguards).
Resend
Privacy · DPA 		Sending of transactional emails (registration verification, password reset, welcome messages, operational alerts). Recipient's email address and name; email body. United States (with international transfer under LGPD safeguards).
Meta Platforms (WhatsApp Business Cloud API)
Business Policy 		Opt-in communication via WhatsApp: daily herd report, health alerts, interaction with the Peão Zé agent outside the app. The data subject's WhatsApp number, messages exchanged, delivery metadata. The opt-in is recorded in FarmWhatsAppOptIn and can be revoked at any time in the Platform settings. United States / Ireland (with international transfer under LGPD safeguards).

3. How changes will be communicated

3.1. The addition of a new subprocessor or the replacement of an existing vendor will be reflected on this page and in the "Last updated" date at the top of the document.

3.2. For changes that materially expand the scope of processing, Ortu Agro will notify data subjects at least 7 (seven) days in advance, by email to the registered email address or by a prominent notice on the Platform, in accordance with item 12 of the Privacy Notice.

4. Right of the data subject to obtain the updated list

4.1. Under Article 18, VII, of the LGPD, the data subject has the right to receive information about the public and private entities with which the controller has engaged in shared use of data. This page satisfies that right proactively and free of charge.

4.2. For a formal written request, contact the Data Protection Officer (DPO) at dpo@ortuagro.com.

Questions: contato@ortuagro.com. Data protection matters: dpo@ortuagro.com.