Privacy Policy.

This Privacy Policy explains how Neodustria collects, uses, shares, and protects your personal data when you use our platform, products, and services.

Transparent Clear data usage and purpose
Secure Your data is protected and never sold
Compliant Aligned with GDPR, ePrivacy & EU AI Act

Information We Collect

We collect personal information you provide to us, automatically collected data, and information from third parties to deliver and improve our services.

Account & Identity Data: Name, email address, corporate affiliation, professional role, and geographical region.
Usage & Activity Data: Logs of platform activity, simulation queries, and module utilization statistics.
Financial & Billing Data: Subscription tier, detailed invoices, and payment status.
Technical & Diagnostic Data: Browser information, IP address, device type, and network diagnostics.

How We Use Your Information

We use your data to operate and improve our platform, personalize your experience, communicate with you, ensure security, and comply with legal obligations.

Platform Operations: Deliver, maintain, and improve our services and AI-powered engineering features.
Personalization: Adapt dashboards, recommendations, and AI-driven simulations to your needs.
Security & Compliance: Detect fraud, enforce access controls, and satisfy legal obligations.
Communication: Send essential service updates, billing notices, and support responses.

Information Sharing

We do not sell your personal data. We share information only with trusted partners and service providers who help us operate our platform, under strict confidentiality agreements and legal requirements.

Cloud Processors: Third-party cloud providers engaged exclusively under fully executed Data Processing Addendums (DPAs).
Internal AI Use: Usage data may be used internally for AI model refinement — fully anonymized prior to processing.
Lawful Disclosure: Substantiated regulatory or governmental requests, strictly in compliance with GDPR provisions.

Data Security

We implement industry-standard technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

Certified Data Centers: ISO 27001-certified infrastructure situated exclusively within the European Union.
Encryption: AES-256 for data at rest; TLS 1.3 for all data transmitted over networks.
Access Control: Role-based access (RBAC), Multi-Factor Authentication (MFA), and comprehensive audit logging.
Security Audits: Regularly scheduled penetration testing and independent security audits.

Your Rights

You have the right to access, update, correct, or delete your personal data, and to object to or restrict certain processing activities. You can exercise these rights at any time.

Right of Access: Obtain confirmation and a copy of all personal data we hold about you.
Right to Rectification: Correct inaccurate or incomplete personal data.
Right to Erasure: Request deletion of personal data under specific statutory conditions.
Right to Object: Opt out of processing for direct marketing or certain analytics activities.
Right to Portability: Receive your personal data in a structured, machine-readable format.

International Transfers

Your data may be transferred to and processed in countries outside your own. We ensure adequate safeguards are in place to protect your information in accordance with applicable data protection laws.

EU Data Centers: All primary data is stored within ISO 27001-certified EU-based infrastructure.
Standard Contractual Clauses: Transfers outside the EU are governed by EU-approved Standard Contractual Clauses (SCCs).
Data Processing Agreements: All international processors operate under signed DPAs aligned with GDPR requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes and update the "Last Updated" date at the top of this page.

Notification: Significant changes are communicated via email or a prominent notice on the platform.
Effective Date: The updated policy becomes effective immediately upon publication on this page.
Review: We encourage you to periodically review this policy to stay informed about how we protect your data.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact our Data Protection Officer using the details provided below.

Response Time: We aim to respond to all privacy inquiries within 30 business days.
GDPR Complaints: You also have the right to lodge a complaint with your local Data Protection Authority.

Your Privacy. Our Priority.

Privacy-First
by Design.

We believe in transparent data practices that put you in control. Your trust drives everything we build.

Contact Us