This Privacy Policy explains how BelaStem, Inc. ("BelaStem", "we", "us", "our") collects, uses, and protects personal information across:
- StemTrackr™ — Inventory management platform for growers
- BelaStem Marketplace — B2B floral marketplace for U.S. buyers
- Ask Rosie™ — AI assistant available in both platforms
- Any websites, applications, or services that link to this Privacy Policy (collectively, the "Services")
BelaStem, Inc. is a Delaware C-Corporation headquartered at:
12955 Biscayne Blvd Ste 200, Miami, FL 33181, USA.
This Privacy Policy is designed to comply with:
- GDPR (EU/UK)
- Colombia Law 1581 of 2012 & Decree 1377
- Ecuador LOPDP 2021
- Applicable U.S. federal and state privacy laws
1. Who This Policy Applies To
- Growers and businesses using StemTrackr™ (including EU/UK, Colombia, Ecuador)
- U.S. buyers on BelaStem Marketplace
- Users of Ask Rosie™
- Visitors to BelaStem websites or communications
If you do not agree with this policy, please avoid using the Services.
2. Information We Collect
2.1 Information You Provide
- Account and profile details (name, email, phone, company info)
- Business and sales data in StemTrackr™ (products, pricing, inventory, orders, customers)
- Marketplace buyer data (registration, shipping, orders)
- Communications via email, chat, or support
2.2 Ask Rosie™ AI
- Query content and prompts
- Context from your account (product, order, system data)
- Logs and metadata for security and performance
2.3 Automatic Collection
- IP address, browser type, operating system
- Usage logs and session activity
- Cookies and tracking technologies (where legally permitted)
2.4 Third-Party Sources
- Payment processors
- Logistics and shipping partners
- Analytics and integration partners
- Public and marketing sources (where permitted)
3. How We Use Personal Information
- Provide and operate the Services
- Operate Ask Rosie™ AI
- Personalize user experience
- Process payments and billing
- Provide customer support
- Improve and secure the Services
- Send service notifications
- Comply with legal requirements
4. Legal Bases for Processing (EU/UK)
- Performance of contract
- Legitimate interests
- Consent (where required)
- Legal obligations
5. AI & Automated Decision-Making
- Ask Rosie™ uses machine learning to generate responses
- It does not make legally significant automated decisions
- Users may request human review
- Interaction data may be used for improvement and security
6. Cookies and Tracking
We use cookies for authentication, analytics, and security. Where required, we request consent before using non-essential cookies.
7. How We Share Information
We do not sell personal data. We may share information with:
- Service providers (hosting, analytics, support)
- Integration partners (shipping, accounting)
- Business partners for transactions
- Legal authorities when required by law
- Entities involved in mergers or acquisitions
8. International Data Transfers
Data is stored and processed in the United States. We use Standard Contractual Clauses and other appropriate safeguards where required by GDPR, Colombian law, and Ecuadorian law.
9. Security Measures
- Encryption in transit and at rest
- Role-based access controls
- Logging and monitoring
- Vendor security reviews
10. Data Retention
We retain personal information only as long as necessary for service delivery, legal obligations, dispute resolution, and enforcement of our agreements.
11. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Request human review of automated decisions
To exercise any of these rights, contact us at [email protected].
12. Country-Specific Disclosures
12.1 Colombia (StemTrackr™)
- Law 1581 of 2012 and Decree 1377 apply
- Processing may require prior, express, and informed authorization
- Rights: know, update, correct, delete, and revoke authorization
- Legal response deadlines under Colombian law apply
- International transfers require safeguards or regulatory authorization
- Databases may be registered in the RNBD where required
12.2 Ecuador (StemTrackr™)
- LOPDP 2021 applies
- Rights: access, update, deletion, portability, and objection
- Strong protections against automated decision-making
- Breach notifications follow Ecuadorian regulatory requirements
- International transfers require adequacy determination or appropriate safeguards
12.3 United States (Marketplace Buyers & Ask Rosie™)
- Categories collected: identifiers, commercial information, device data
- Some states provide rights to access, delete, correct, or know data categories shared
- We do not discriminate against users who exercise their privacy rights
13. Children's Privacy
The Services are intended for adults and businesses. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.
14. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted with a new "Last Updated" date. Continued use of the Services after changes constitutes acceptance of the revised policy.
15. Contact Us
BelaStem, Inc.
12955 Biscayne Blvd Ste 200
Miami, FL 33181, USA
Email: [email protected]