Data Processing Agreement

This agreement forms part of our Terms & Conditions. It applies whenever we handle personal data on your behalf while providing the Far & Wide platform. You accept it together with the Terms when you create your account.

• You (the customer) are the controller of the personal data described in section 3.
• Vector Labs B.V., trading as Far & Wide, Gustav Mahlerlaan 647, 1082MK Amsterdam, KvK 99771438 ("we"), is the processor.
• For your own account data (your login email, billing) we are the controller; that is covered by our Privacy Policy, not this agreement.

We process personal data only to provide the services you use: measuring how AI engines see your brand, reporting which AI assistants and visitors reach your site, and preparing and publishing the fixes you approve. We do this only on your documented instructions — these Terms, your settings, and what you approve in the platform — unless EU or Dutch law requires otherwise, in which case we tell you first where the law allows.

• Your website visitors, when you connect the AI-visibility log drain: IP address, user-agent, the page requested and the time. Used only to produce your attribution reporting. IP addresses are replaced by a scrambled code after 30 days.
• People named on your website or in content you connect (for example staff names on an about page or a blog byline), as far as they appear in pages we read or content we draft and publish for you.
• Your team members you invite: name and email.

You agree not to send us special categories of personal data (health, religion, and so on) or data about children.

For as long as your account is open. When you close your account we delete the personal data above, including website-visitor data, within 30 days, and from backups when those backups expire, unless the law requires us to keep it. You can ask us for a copy before closing. The retention periods in our Privacy Policy (billing records, our own website analytics, security logs) cover data we control ourselves, not the data in section 3.

• Confidentiality: everyone at Far & Wide with access to the data is bound to confidentiality.
• Support access: to help you, the founders of Far & Wide can view your account's data (audits, fixes, brand facts, uploaded files and billing) read-only, without signing in to your account. Every such view is recorded.
• Security: we keep appropriate technical and organisational measures (GDPR Article 32), including encryption in transit, access limited per customer, and hosting of the database in the EU.
• Help with requests: we help you answer requests from people exercising their rights (access, deletion, and so on) and with data-protection impact assessments, as far as our processing is concerned.
• Breaches: we tell you without undue delay, and in any case within 48 hours, after we become aware of a personal-data breach affecting your data, with what we know and what we are doing about it.
• Audits: we give you the information needed to show we meet this agreement, and allow a reasonable audit, at your cost, once a year with 30 days' notice.

You give us general permission to use the sub-processors listed by category at www.farandwide.io/sub-processors. The named list is available on request. We tell you at least 14 days before adding or replacing a sub-processor; you may object on reasonable data-protection grounds, and if we cannot resolve it you may end the subscription without penalty. We bind every sub-processor to the same data-protection duties and remain responsible for them.

Some sub-processors are outside the European Economic Area (see the locations at www.farandwide.io/sub-processors). Such transfers rely on an EU adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or on the European Commission's Standard Contractual Clauses.

Liability under this agreement follows the limits in the Terms & Conditions. If this agreement and the Terms disagree about personal data, this agreement wins. Dutch law applies.

Questions about this agreement: hello@farandwide.io.