1. Who controls your data
TSS Travnik, Cabrusa 4F, 72270 Travnik, Bosnia and Herzegovina, registration number 4338159130008, operates Farweo and is the controller of personal data processed through the Farweo website, Windows applications, web console, and remote-support service. Privacy questions and rights requests can be sent to [email protected].
2. Data we process
- Account data: email address, password hash, account status, declared Personal or Business usage, subscription entitlement, Business trial activation date, Personal device selection, account creation date, and security tokens.
- Managed-device data: device identifier, display name, group, notes, machine and operating-system details, application version, IP address, online status, CPU and memory use, disk capacity, uptime, and pending-restart status.
- Wake-on-LAN data: when the feature is enabled, wired adapter identifiers, MAC addresses, adapter type and link status, local IPv4 addresses and subnet prefixes, available wake-support evidence and observation times. We also store approved network membership, selected target adapters, relay participation settings, and wake requests with actor/target identifiers, relay attempts, deadlines and outcomes. Network inventory is available through personal owner authorization or scoped organization permissions; routine wake audit events use identifiers and safe outcome codes rather than MAC addresses or local IPs.
- Support and security records: connection time, duration, outcome, account or client identity, client IP address, device events, enrollment activity, and security logs.
- Session content: screen images, keyboard and mouse input, audio, clipboard content, and files selected for transfer are processed to deliver a live session. They travel through encrypted WebRTC channels, directly when possible or through a relay. Quick Support text chat is delivered through the authenticated signaling connection and displayed temporarily in participant windows. Farweo does not record chat or transferred content in application logs or audit records, or intentionally retain session content on its application server. Participants may save messages or received files themselves.
- Purchase data: Freemius processes checkout and payment details. Farweo may receive purchaser email, product, plan, license, subscription, transaction status, and billing-cycle details, but does not receive or store full payment-card details.
- Recovery email data: email address, a hashed single-use recovery token, creation and expiry times, and delivery status required to reset a password.
Organization data: workspace names and settings, memberships and roles, team and device-group assignments, access grants, invitation email addresses and delivery status, enrollment records, MFA policy, and audit records identifying actors, affected resources, actions, and outcomes. Organization Quick Support records identify the operator's organization and consent outcome. Capability-use audit events contain identifiers, not clipboard contents, keystrokes, or file contents.
Quick Support data: temporary session state includes operator identity, organization where applicable, customer-approved clipboard/file permissions, deadlines, and hashed support codes or recovery tickets in server memory. Lifecycle audit records include identity, permission choices and outcomes, never the codes, tickets or chat content. Approved restart recovery writes an encrypted, single-use ticket on the customer's PC and a one-shot startup entry to reopen visibly after sign-in; it does not enroll the device.
3. How and why we use data
We process data to create and secure accounts, register and monitor managed devices, coordinate authorized Wake-on-LAN requests when enabled, establish remote sessions, provide file and clipboard features, operate trials and subscriptions, deliver password recovery, prevent abuse, diagnose failures, respond to support requests, and meet legal and accounting obligations.
Depending on the context, processing is based on performance of our contract with you, our legitimate interests in operating and securing Farweo, compliance with legal obligations, or consent where applicable.
4. Browser storage and tracking
The Farweo admin and web clients store an authentication token and interface preferences in your browser's local storage. Farweo does not currently use advertising cookies, third-party analytics pixels, or cross-site behavioral tracking on farweo.com. A payment provider may use its own necessary storage when you open its checkout.
5. Service providers and recipients
We share only the data needed with infrastructure hosting and network providers, the configured transactional-email provider, Freemius for checkout and subscription processing, and professional advisers or authorities when legally required. These providers process data under their own terms or on our instructions, depending on their role.
Within an organization, owners and admins can view membership and device administration information and manage access grants. Owners, admins, and Auditors can read and export organization audit records. Other members receive device information according to their permissions. Organization membership does not expose your Personal workspace.
6. International transfers
Some providers may process data outside your country or the European Economic Area. Where required, we use an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism.
7. Retention
- Account and managed-device records are kept while the account is active and as reasonably necessary to provide the service.
- Expired recovery-token records are periodically removed; recovery links expire after 30 minutes.
- Application log files are normally rotated after seven days. Security and connection audit records may be kept longer where needed to protect accounts, investigate misuse, or meet legal obligations.
- Billing and transaction records are retained for the periods required by tax, accounting, fraud-prevention, and payment rules.
Organization audit records retain historical attribution after a member leaves or a device is released. Audit retention is configured by the service administrator and defaults to no automatic expiry. Mutation retry records are normally retained for 48 hours and invitation delivery records for 30 days; bearer secrets in these records are encrypted at rest.
Quick Support chat history is held temporarily in participant windows. Restart recovery requires redemption and fresh consent within five minutes, never beyond the original support expiry. The customer app removes matching recovery metadata when consumed or canceled and attempts expired-file cleanup on a later normal launch. If the customer never signs in or opens the app again, encrypted recovery files or the one-shot startup entry may remain locally, but expired tickets cannot authorize access. Restarting the signaling server invalidates outstanding tickets.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing, and may withdraw consent where consent is the basis. You may also complain to your competent data-protection authority. We may need to verify your identity before fulfilling a request.
9. Security
Farweo uses access controls, encrypted transport, password hashing, short-lived recovery links, audit records, and restricted production access. No system is completely secure, so please use a unique password and protect host credentials.
10. Children
Farweo is a business-oriented service and is not directed to children. Users must be at least 18 years old or otherwise legally able to enter a binding agreement.
11. Changes and contact
We may update this policy as Farweo changes. Material changes will be identified by a revised date and, when appropriate, an in-product or email notice. Contact [email protected] with questions or rights requests.