Privacy Policy

This Privacy Policy explains how Veld Wyser collects, uses, and protects personal data when you use our platform and services.

We process personal data in accordance with the General Data Protection Regulation (GDPR).

Our role depends on the type of data:

• Account and usage data (name, e-mail, login details, log data, billing data) — Veld Wyser is the data controller. This policy applies.
• Farm data you enter or upload (field boundaries, herds, observations, labels) — you are the controller and Veld Wyser acts as processor on your behalf. The Data Processing Agreement applies to this.

Contact for both roles: info@veldwyser.com

We collect personal data you provide directly, including account information such as your name, email address, and login credentials. We also collect usage data including log files, IP addresses, and interaction data.

We process location-based and agricultural data such as field boundaries, satellite-derived indices (e.g. NDVI), and environmental inputs. While much of this data is not personal by nature, it may become personal data when linked to an identifiable user.

We process personal data to:

• provide and operate the Service;
• generate analyses and recommendations for your own farm;
• improve shared models and algorithms — only using aggregated or anonymised data;
• ensure security and prevent misuse;
• handle payments and invoicing;
• comply with legal obligations.

Your farm-specific data is not used to train models that serve other customers. See section 5 of the Terms of Service.

We use a separate legal basis for each purpose:

• Performance of a contract — providing the Service, your account, analyses for your own farm, payments and support;
• Legal obligation — the tax retention obligation for invoices, and responding to lawful requests from authorities;
• Legitimate interest — security and abuse prevention, improving shared models using aggregated or anonymised data, and counting visits anonymously without cookies when you decline analytics cookies. We have documented an assessment of these interests against your rights and you may object at any time;
• Consent — analytics cookies and session recording, and any use of your farm data beyond what is described above. You may withdraw consent at any time without affecting processing already carried out.

We use automated systems and AI models to process data and generate outputs. These systems support decision-making but do not independently make legally binding decisions, and there is no automated decision-making within the meaning of article 22 GDPR.

The AI features in the app run on models from OpenAI. The following data is sent to OpenAI for this:

• AI advisor — your question and the relevant data of your active farm (such as camps, herds and rainfall, drought, fire and water data), to generate an answer;
• Voice messages in a study group — the recording is automatically sent to OpenAI to be converted into text; the transcript is shown to the group with the message;
• Summaries of minutes in a study group — when a group admin asks for a summary, the uploaded document (PDF, photo or text) is sent to OpenAI; the summary, decisions and proposed action items are stored with the document;
• Photo recognition — photos of ear tags (to read the tag number) and transect photos (to identify plants).

OpenAI acts as our processor. Under its API terms, OpenAI does not use this data to train its models. It may keep the data for up to 30 days to detect misuse, after which it is deleted.

You are always told when you are interacting with AI, and outputs are advisory — see our AI Policy.

We engage the following processors. Each is bound by a processing agreement and may use the data only for our instructions:

• Supabase — database, authentication and file storage (EU, Frankfurt);
• Vercel — hosting and delivery of the application (EU region);
• PostHog — product analytics and session replay, EU Cloud. Only with your cookie consent; if you decline, PostHog only counts your visits anonymously, without cookies;
• OpenAI — the AI features: the AI advisor, transcription of voice messages, summaries of minutes and photo recognition (see section 6). OpenAI does not use this data to train models;
• Mollie — payment processing and mandates for direct debit (Netherlands);
• Mail server mail.veldwyser.com (EU, Finland) — sending e-mail such as account confirmation, password reset, invitations, notifications and study group digests.

For our own analyses we also retrieve public data sources (Copernicus/Sentinel-2, CHIRPS rainfall data). This happens on our servers; no personal data is sent along.

To show maps, satellite imagery and weather forecasts, your browser also retrieves content directly from the following services:

• Map and satellite imagery — Esri (ArcGIS), OpenStreetMap, NASA GIBS and ISRIC SoilGrids;
• Historical satellite imagery (time travel on the analysis map) — the Sentinel-2 catalogue of Element 84 and the open Sentinel-2 archives on Amazon Web Services;
• Weather forecasts — Open-Meteo;
• Map icons — cdnjs (Cloudflare);
• The bot check when signing in and registering — Cloudflare Turnstile.

These services receive your IP address and technical browser information, and for maps also the map area you are viewing. When searching for historical satellite imagery we deliberately send only a rounded area of about 11 km, not the exact boundaries of your farm. These are not processors acting on our behalf: they process this data under their own privacy policies.

We do not sell personal data. We do not share your farm data with other users, unless you choose to do so yourself within a study group:

• Benchmarking — key figures of your farm (rainfall over the past 12 months, area and number of camps, grazing capacity and stocking rate, and operating costs in total, per hectare and per LSU). Other members only see group figures (such as average, median and spread) once at least three members take part; your own figures are shown with your name only if you choose that;
• Farm visit — as host of a farm visit you can show the members the boundary and camps of your farm on a map (with name, area and grazing capacity per camp), together with key figures of your farm.

This happens only at your own request and only within the group you choose. You can stop sharing at any time; your figures or map are then no longer shown to the group. Nothing is shared by default.

Network & Services: when you list a business, its name, description, service area and contact details are shown to all signed-in users. If you recommend a business, other users see your first name and the first letter of your surname with it. A request you post is shown to service providers in that category and area, with the area of your farm rounded to about 1 km, without your name or contact details. Service providers only see how often their listing was contacted, not by whom. Contacts you save are also kept on your own device so you can call them without internet; they are removed from it when you sign out.

We update this list when processors change; the current version always applies.

Your data is stored on servers within the European Union (Supabase, Frankfurt). The following situations involve a transfer outside the EEA:

• OpenAI (AI features, see section 6) processes data in the United States. This transfer is covered by Standard Contractual Clauses in OpenAI's data processing agreement, supplemented by encryption in transit and the limited retention described in section 6;
• Some of the map and satellite services listed in section 7 are established in the United States (Esri, NASA, Element 84, Amazon Web Services). Your browser connects to them directly, sending only your IP address, browser information and the map area being viewed. As these are not processors acting on our behalf, we do not conclude Standard Contractual Clauses with them;
• If you use the Service from outside the EEA — for example from South Africa — your data travels to your own device. That access is inherent to using the Service.

For transfers to countries without an adequacy decision, we conclude Standard Contractual Clauses and assess whether additional measures are required.

We apply the following retention periods:

• Account data — for as long as your account is active; after you delete your account, your personal data is erased within 30 days;
• Farm business data (camps, herds, rainfall, satellite analyses) — kept after your account is deleted, without any link to you, so the farm can later be linked to an account again;
• Contributions to groups and the forum — remain in place after your account is deleted, without your name;
• Listings in Network & Services, recommendations, saved contacts, requests and replies — deleted together with your account;
• Invoices and payment records — 7 years, because of the statutory tax retention obligation;
• Server and security logs — 12 months;
• Analytics data (PostHog) — 12 months; session recordings 30 days;
• Cookie consent records — 12 months after the choice was made;
• Support correspondence — 24 months after the last contact.

After these periods the data is deleted or irreversibly anonymised. Anonymised data can no longer be traced back to you and may be retained for statistics and model improvement.

We implement appropriate technical and organizational measures to protect personal data, including encryption, access controls, and monitoring systems.

You have the right to access, correct, delete, or restrict your personal data, and to object to processing or request data portability. Where processing is based on consent, you may withdraw it at any time — for cookies via the “Cookie preferences” link in the footer.

You can delete your account yourself at any time via Account settings; this removes your data as described in section 9.

Requests can be submitted to: . We respond within one month.info@veldwyser.com

If you believe we are not handling your data properly, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the supervisory authority in your country of residence.

We may update this Privacy Policy from time to time. Continued use of the Service constitutes acceptance of the updated policy.

For any questions or complaints: info@veldwyser.com