Skip to Content
IndustrAI START A PILOT
HOMEPRODUCTSTHE PILOTCONTACT US

Privacy Policy

Last updated: 8 November 2026

1. Who we are

IndustrAI S.à r.l., 20, rue Mathias Cungs, L-3446 Dudelange, Luxembourg (RCS Luxembourg B280546) is the controller of the personal data described in this policy. For any privacy question or request: contact@industrai.eu.

2. Scope

This policy covers the personal data we process when you visit our website, contact us, do business with us, use the IndustrAI platform or receive our communications. Data that customers load into the platform is processed on their behalf, under their contract and data processing agreement with us: for that data, the customer is the controller and IndustrAI acts as processor.

3. What we collect, why, and on what legal basis

  • Website visits: IP address, device and browser data, pages viewed — to run and secure the website (legitimate interest); audience measurement with Google Analytics, only with your consent, and Plausible, which uses no cookies (legitimate interest); spam protection on forms with Google reCAPTCHA (legitimate interest).
  • Contact, demo and pilot requests: name, work email, company, company size and message — to answer you and prepare an offer (steps prior to a contract, legitimate interest). Fields marked * are needed to reply.
  • Customers, suppliers and partners: contact details, contracts, orders, invoices and correspondence — to perform the contract (contract) and keep accounting records (legal obligation).
  • Platform users: name, business email, role, login and security logs, usage data — to provide and secure the service our customer has subscribed to (legitimate interest).
  • Support requests: ticket content and exchanges — to resolve your request (contract, legitimate interest).
  • News and product updates: email address and engagement data — with your consent, or for existing customers about similar services (legitimate interest). You can unsubscribe at any time.

We do not sell personal data and do not use it to train our ML models.

4. Who receives your data

  • Authorized IndustrAI staff.
  • Service providers acting on our instructions: cloud hosting (Amazon Web Services); website, CRM, helpdesk and accounting (Odoo); email and collaboration (Microsoft); audience measurement and spam protection (Google, Plausible).
  • Our team in Atlanta, USA, when it serves your account.
  • Professional advisers and public authorities, when required by law.

5. Transfers outside the EEA

Some recipients are located in, or may access data from, the United States. These transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or otherwise on the European Commission's standard contractual clauses. Platform data is hosted in the customer's region.

6. How long we keep data

  • Contact requests without follow-up: 3 years after the last contact.
  • Customer, supplier and partner data: for the duration of the relationship, then 10 years for accounting and legal records.
  • Platform accounts: for the duration of the customer contract, then deleted as set out in the data processing agreement.
  • Support tickets: 3 years after closure.
  • Newsletter: until you unsubscribe.
  • Analytics data: up to 14 months.
  • Security logs: up to 12 months.

7. Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing (including, at any time, to direct marketing), and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time, without affecting processing carried out before.

To exercise your rights, write to contact@industrai.eu. We reply within one month. You can also lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg — cnpd.public.lu.

8. Cookies

Essential cookies keep the website working. Analytics cookies are only set if you accept them in the cookie banner. See our Cookie Policy.

9. Security

We protect data with encryption, access control and authentication, and each customer's platform data is kept in its own environment.

10. Automated decisions

We make no decisions about you based solely on automated processing that produce legal or similarly significant effects.

11. Changes to this policy

We may update this policy. The date at the top shows the current version.