Farben.ai ("Farben", "we", "our", "us") is an AI-powered finance automation platform operated by the TechFarben Group. We are committed to protecting the privacy, security, and confidentiality of personal data processed through www.farben.ai and our related applications (the "Platform").

This Privacy Policy describes how we collect, use, disclose, and safeguard personal data when you visit our website, create an account, or use the Platform.

1. Controller, Processor, and Scope

Website & marketing activities (Controller). For personal data collected via our website, lead forms, events, or marketing communications, the relevant TechFarben Group entity identified below is the data controller.

Platform activities (Processor). When we process personal data uploaded to or generated within the Platform by our customers, we act as a data processor on behalf of the customer (the customer is the controller). This processing is governed primarily by our contract and Data Processing Addendum (DPA).

This policy applies to individuals who:

visit our website,
request demos or information,
create user accounts,
or use the Platform as an authorised user.

2. Who We Are

TechFarben Group entities (Controller and/or Processor). The applicable TechFarben entity acting as Controller (website/marketing) and/or Processor (Platform) will be identified in your Order Form/Agreement.

TECHFARBEN LIMITED (UK) — 71–75 Shelton Street, Covent Garden, London, England, WC2H 9JQ.
TECHFARBEN PTE. LTD. (Singapore) — 122 McNair Road, #02-49, Singapore 320122.
TechFarben India Pvt Ltd (India) — Cyber City, DLF Phase 2, Sector 25, Gurugram, Haryana 122001, India.

Privacy contact: support@techfarben.com

Security contact: support@techfarben.com

If required by law, we will designate a Data Protection Officer (DPO) and/or an EU/UK representative and publish those details here.

3. Personal Data We Collect

3.1 Data you provide (Controller)

Identifiers and contact details: name, business email, phone number
Professional information: job title, company, department, country
Communications: messages, meeting notes, support requests
Preferences: marketing and communication preferences

3.2 Data collected automatically (Controller)

Device and network data: IP address, device identifiers, browser type, OS
Website interaction data: pages viewed, timestamps, referral source
Cookies and similar tracking data (see Cookies section)

3.3 Customer data processed in the Platform (Processor)

Depending on customer configuration and use cases, the Platform may process:

Business documents and records (e.g., invoices, bills, receipts, contracts, POs, statements)
Accounting and transactional metadata (e.g., supplier/customer identifiers, amounts, GL coding, tax/VAT/GST fields)
Workflow and approvals data (e.g., approver names, comments, timestamps)
System integration data (e.g., identifiers and event logs from ERP/accounting tools)
Audit trail and logs (e.g., user actions, access logs, change history)

Customer data is processed only on customer instructions, and customers control what data is uploaded, connected, or generated.

4. How We Use Personal Data

4.1 Website and sales (Controller)

We use personal data to:

respond to inquiries and provide requested materials (demos, assessments, content)
manage leads, customer relationships, and account administration
communicate operational notices and product updates
conduct marketing to business contacts (where permitted)
analyse and improve our website and outreach effectiveness

4.2 Platform delivery (Processor)

We use customer data to:

provide Platform features (document ingestion, extraction, reconciliations, controls, exception management, reporting)
operate integrations and automated workflows configured by the customer
provide customer support and troubleshooting
maintain security, audit logs, and platform reliability

4.3 What we do not do

We do not sell personal data.
We do not use customer data to train public or third-party AI models.
Any optional program to use customer data to improve our models/prompting would require explicit agreement and documented safeguards.

5. Legal Bases for Processing (GDPR/UK GDPR)

Where applicable, we rely on: contract, legitimate interests, consent (where required), and legal obligations.

Customers using the Platform determine their own legal bases for customer data they upload or connect.

6. AI and Automated Processing

Farben.ai uses AI agents to support finance operations (e.g., extract structured data from documents, recommend classifications, highlight exceptions, flag anomalies).

AI outputs are assistive and may contain errors.
The Platform supports human review/approval and audit logging.
Customers remain responsible for final accounting decisions and compliance.

7. Disclosures and Subprocessors

We may share data with vetted service providers (subprocessors) to support delivery of the Platform (e.g., hosting, monitoring). Subprocessors are bound by contractual obligations that are no less protective than our obligations to customers.

We maintain an up-to-date list of subprocessors and/or provide it on request at support@techfarben.com.

8. International Data Transfers

Data may be processed in the UK, EU/EEA, Singapore, India, or other locations where we or our providers operate. Where required, we use safeguards such as EU SCCs and the UK IDTA/Addendum.

9. Data Retention

We retain personal data only as long as necessary:

Leads/contact data: typically up to 24 months from last meaningful interaction (unless you object earlier)
Customer data in the Platform: per contract/DPA and customer configuration; export and deletion available on termination (subject to legal retention and backup cycles)
Logs/audit data: typically 12–24 months (or longer for security or contractual needs)

10. Security

We apply technical and organisational measures designed to protect personal data, including encryption (where supported), RBAC/least privilege, monitoring, and incident response processes.

11. Incident / Breach Notification

If we become aware of a personal data breach affecting customer data processed as a processor, we will notify the customer without undue delay in accordance with our DPA and applicable law.

12. Your Rights

When we act as controller, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent, and lodge a complaint.

When we act as processor for customer data, we will refer requests to the relevant customer (controller) and support them under the DPA.

13. Cookies

We use cookies for authentication, security, and analytics. Where required, we provide a cookie banner/consent mechanism.

14. Children

The Platform is intended for business use and is not directed to children.

15. Third-Party Links

Links to third-party sites are governed by those third parties' policies.

16. Updates

We may update this policy periodically. Updates will be posted with a revised "Last updated" date.

17. Contact Us

For privacy questions, requests, or complaints:

Farben.ai (TechFarben Group)

Email: support@techfarben.com