Data
Your imagery and your inventory are yours
This page explains in plain language what we do with the data you entrust to us: where it lives, who sees it, which providers we work with and how you get it back or delete it. It is the first question every client outside Mexico asks us, and it deserves a straight answer.
This document describes the technical handling of service data. Personal data (name, email, phone) is governed by the Privacy Notice, under Mexican data protection law. Privacy notice.
What data we handle
Drone imagery and the products we derive from it (orthomosaics, elevation models, bands and indices); plot and orchard polygons; per-plant inventories, recorded harvests and costs you capture on the platform; clips of public satellite imagery over your plots; and the contact details of the people who use the platform.
Who owns it
The client. The imagery you send us and everything we produce with it for you belongs to you. Citadelta keeps the right to use data in aggregated, anonymous form to improve its detection models; never to identify a client, a plot or a person, and never to share it with third parties.
Where it is stored
On Citadelta's own servers in Guadalajara, Mexico, with object storage encrypted in transit and daily backups. Part of the historical archive prior to 2026 remains in Google Cloud Storage (United States region) while the migration is completed. Every client has its own database: one client's information never lives in the same database as another's.
Who can access it
The people you authorize in your account, with the permissions you assign them; and the Citadelta staff who operate the service, with named accounts and access logs. Access is authenticated through an identity provider (Auth0) and there are no shared accounts. Nobody outside Citadelta and your organization sees your data, unless you request it in writing.
Providers involved
Cloudflare (network, protection and delivery of the site and the platform), Auth0 (identity and access), Google Cloud (historical archive under migration), public satellite imagery catalogs from Amazon Web Services and Microsoft (queried by the area of your plots; they never receive your drone imagery or your inventory) and, only when you use automatic receipt reading in the finance module, Anthropic, which processes the receipt image and does not keep it to train models.
How long it is kept
While the service is active, plus twelve months after it ends, so you can recover the history if you return. If you request deletion earlier, it is carried out within thirty days and confirmed to you in writing, including backups as their rotation expires.
How you get it back
At any time, at no cost: orthomosaics as GeoTIFF, inventories as CSV and GeoJSON, reports as PDF, from the platform itself or on request. No proprietary formats and no exit lock-in.
Security
Encryption in transit on every connection, identity-based access with role permissions, databases isolated per client, access logs and daily backups with thirty-day retention. If we detected an incident affecting your data, we would notify you within seventy-two hours with the known scope and the measures taken.
This website
The site measures visits with Plausible, which uses no cookies and identifies nobody — that is why you see no consent banner. If you arrive from an ad, we keep the click identifier Google adds to the URL for that browser session, so we know which ad produced an enquiry; it is deleted when you close the tab, it is not shared, and it cannot follow you across other sites.
Questions
Write to us at [email protected]. If your company needs a data processing agreement (DPA) or specific clauses for your country, we review them with you before signing the proposal.
Last updated: September 2026.