Privacy and data protection
Farvex AI complies with the European General Data Protection Regulation (GDPR / AVG), the European AI Act and the Dutch Telecommunications Act.
Who the data controller is (GDPR Art. 13 and 14)
| Legal entity | Farvex AI |
|---|---|
| Chamber of Commerce (KvK) | 89412084 (Rotterdam register) |
| VAT / BTW identification | NL864982103B01 |
| Official seat | Vlaardingen, The Netherlands |
| Data Protection Officer (DPO) |
privacy@farvex.ai farvexai@gmail.com |
01 How we process data
Farvex AI processes enterprise data under the principles of purpose limitation, data minimisation and sovereign European data residency. We act strictly as a Data Processor (Verwerker) for enterprise clients and as a Data Controller (Verwerkingsverantwoordelijke) only for our direct customer inquiries and website interactions.
02 Our guarantee: no training on client data
We give a legally binding guarantee that client data, parsed OCR documents, financial ledgers and API payloads are NEVER used to train, fine-tune, or calibrate public or third-party AI models. All neural inference is ephemeral or stored exclusively inside dedicated sovereign client VPCs or on-premise hardware.
This guarantee is written into every processing agreement we sign. The technical controls behind it are set out on the security page.
03 What we collect, and on what legal basis (GDPR Art. 6)
We collect and process personal and commercial data solely on the following lawful bases:
- Contractual Execution (Art. 6(1)(b)): Enterprise names, corporate emails, billing information and system telemetry necessary to deploy and maintain custom AI pipelines.
- Legitimate Interests (Art. 6(1)(f)): Maintaining cybersecurity, preventing DDoS and fraudulent API usage, and meeting uptime SLAs.
- Explicit Consent (Art. 6(1)(a)): For scheduling consultations, newsletter subscriptions and optional functional analytics.
04 Your statutory rights (GDPR Articles 15–22)
Under European law, you have the right to request access to your data, rectification of errors, immediate erasure (“Right to be Forgotten”, Art. 17), restriction of processing, data portability, and the right to object to automated individual decision-making.
To exercise any statutory right, send your request directly to farvexai@gmail.com.
Requests are fulfilled within 30 days without fee.
05 Contacting the supervisory authority
If you believe your personal data is being processed in breach of the GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
Related documents
The cookie notice lists what we store in your browser, the terms cover the commercial agreement, and the security page covers the technical controls behind the guarantees above.