Privacy Policy

This Privacy Policy explains how Veld Wyser collects, uses, and protects personal data when you use our platform and services.

We process personal data in accordance with the General Data Protection Regulation (GDPR).

Our role depends on the type of data:

• Account and usage data (name, e-mail, login details, log data, billing data) — Veld Wyser is the data controller. This policy applies.
• Farm data you enter or upload (field boundaries, herds, observations, labels) — you are the controller and Veld Wyser acts as processor on your behalf. The Data Processing Agreement applies to this.

Contact for both roles: info@veldwyser.com

We collect personal data you provide directly, including account information such as your name, email address, and login credentials. We also collect usage data including log files, IP addresses, and interaction data.

We process location-based and agricultural data such as field boundaries, satellite-derived indices (e.g. NDVI), and environmental inputs. While much of this data is not personal by nature, it may become personal data when linked to an identifiable user.

We process personal data to:

• provide and operate the Service;
• generate analyses and recommendations for your own farm;
• improve shared models and algorithms — only using aggregated or anonymised data;
• ensure security and prevent misuse;
• handle payments and invoicing;
• comply with legal obligations.

Your farm-specific data is not used to train models that serve other customers. See section 5 of the Terms of Service.

We use a separate legal basis for each purpose:

• Performance of a contract — providing the Service, your account, analyses for your own farm, payments and support;
• Legal obligation — the tax retention obligation for invoices, and responding to lawful requests from authorities;
• Legitimate interest — security and abuse prevention, and improving shared models using aggregated or anonymised data. We have documented an assessment of these interests against your rights and you may object at any time;
• Consent — analytics cookies and session recording, and any use of your farm data beyond what is described above. You may withdraw consent at any time without affecting processing already carried out.

We use automated systems and AI models to process data and generate outputs. These systems support decision-making but do not independently make legally binding decisions, and there is no automated decision-making within the meaning of article 22 GDPR.

The AI advisor in the app runs on Anthropic's Claude models. When you ask a question, that question and the relevant farm context are sent to Anthropic in order to generate an answer. Anthropic acts as a processor and does not use this data to train its models.

You are always told when you are interacting with AI, and outputs are advisory — see our AI Policy.

We engage the following processors. Each is bound by a processing agreement and may use the data only for our instructions:

• Supabase — database, authentication and file storage (EU, Frankfurt);
• Vercel — hosting and delivery of the application (EU region);
• PostHog — product analytics and session replay, EU Cloud. Only with your cookie consent;
• Anthropic — the AI advisor. Your question and the relevant farm context are sent to generate an answer. Anthropic does not use this data to train models;
• Mollie — payment processing and mandates for direct debit (Netherlands);
• Resend — sending transactional e-mail (notifications, password reset).

In addition we use public data sources (Copernicus/Sentinel-2, CHIRPS rainfall data) which do not receive any personal data from us.

We do not sell personal data and do not share your farm data with other users.

We update this list when processors change; the current version always applies.

Your data is stored on servers within the European Union (Supabase, Frankfurt). Two situations involve a transfer outside the EEA:

• Anthropic (AI advisor) is established in the United States. This transfer is covered by Standard Contractual Clauses and additional safeguards;
• If you use the Service from outside the EEA — for example from South Africa — your data travels to your own device. That access is inherent to using the Service.

For transfers to countries without an adequacy decision, we conclude Standard Contractual Clauses and assess whether additional measures are required.

We apply the following retention periods:

• Account and farm data — for as long as your account is active. After you delete your account, the data is removed within 30 days;
• Invoices and payment records — 7 years, because of the statutory tax retention obligation;
• Server and security logs — 12 months;
• Analytics data (PostHog) — 12 months; session recordings 30 days;
• Cookie consent records — 12 months after the choice was made;
• Support correspondence — 24 months after the last contact.

After these periods the data is deleted or irreversibly anonymised. Anonymised data can no longer be traced back to you and may be retained for statistics and model improvement.

We implement appropriate technical and organizational measures to protect personal data, including encryption, access controls, and monitoring systems.

You have the right to access, correct, delete, or restrict your personal data, and to object to processing or request data portability. Where processing is based on consent, you may withdraw it at any time — for cookies via the “Cookie preferences” link in the footer.

You can delete your account yourself at any time via Account settings; this removes your data as described in section 9.

Requests can be submitted to: . We respond within one month.info@veldwyser.com

If you believe we are not handling your data properly, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the supervisory authority in your country of residence.

We may update this Privacy Policy from time to time. Continued use of the Service constitutes acceptance of the updated policy.

For any questions or complaints: info@veldwyser.com