Privacy Policy

1. Introduction

Manufacturing Intelligence ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.

This policy complies with multiple privacy regulations worldwide, including but not limited to:

• General Data Protection Regulation (GDPR) — European Union
• California Consumer Privacy Act (CCPA) — California, USA
• Lei Geral de Proteção de Dados (LGPD) — Brazil
• Protection of Personal Information Act (POPIA) — South Africa
• Personal Information Protection and Electronic Documents Act (PIPEDA) — Canada
• Privacy Act 1988 — Australia
• Personal Data Protection Act (PDPA) — Singapore
• Act on the Protection of Personal Information (APPI) — Japan

2. Information We Collect

2.1 Personal Information We Collect

We may collect the following categories of personal information:

• Contact Information: Name, email address, phone number, company name, job title
• Account Information: Username, password, preferences, and settings
• Payment Information: Billing address, payment card details (processed securely through third-party processors; we do not store full card numbers)
• Communication Data: Customer support inquiries, feedback, survey responses
• Technical Data: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent on pages, links clicked, referring/exit URLs
• Cookies and Tracking Technologies: See Section 7 (Cookie Policy) below

We do not intentionally collect special category or sensitive personal data as defined under GDPR Article 9 (such as health data, biometric data, racial or ethnic origin, political opinions, religious beliefs, or trade union membership). If you voluntarily provide such information, we will treat it with the heightened protections required by applicable law and will seek your explicit consent before processing it.

2.2 How We Collect Information

We collect information through:

• Direct interactions (forms, email, phone, chat)
• Automated technologies (cookies, web beacons, analytics)
• Third-party sources (business partners, service providers)
• Publicly available sources

3. How We Use Your Information

3.1 Primary Purposes

We use your personal information for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI RAG implementation services
• Account Management: To create and manage your account and process transactions
• Communication: To respond to inquiries, provide customer support, and send service updates
• Marketing: To send promotional materials (with your consent where required by applicable law)
• Analytics: To analyze usage patterns and improve our website and services
• Security: To detect, prevent, and address fraud, security issues, and policy violations
• Legal Compliance: To meet our obligations under applicable laws and regulations

3.2 Legal Bases for Processing (GDPR)

Under GDPR, we process your personal information based on one or more of the following lawful bases:

• Consent (Article 6(1)(a)): Where you have given explicit, freely given, specific, and informed consent
• Contract (Article 6(1)(b)): Where processing is necessary to perform a contract with you or to take steps at your request prior to entering a contract
• Legal Obligation (Article 6(1)(c)): Where processing is required by EU or Member State law
• Vital Interests (Article 6(1)(d)): Where processing is necessary to protect someone's life
• Legitimate Interests (Article 6(1)(f)): Where processing serves our legitimate business interests and is not overridden by your rights and freedoms

Where we rely on legitimate interests, you have the right to object. See Section 5 for details.

3.3 Automated Decision-Making and Profiling

We may use automated processing, including profiling, to analyze usage patterns and improve our services. We do not make decisions that produce legal or similarly significant effects on you solely by automated means without human review. If this practice changes, we will update this policy and, where required by GDPR Article 22, seek your explicit consent or ensure another lawful basis applies.

4. Information Sharing and Disclosure

4.1 Sale of Personal Information

We do not sell your personal information to third parties. California residents may exercise their right to confirm this and opt out of any future sale under the CCPA — see Section 5.2.

4.2 Third-Party Sharing

We may share your information with carefully selected third parties only as necessary:

• Service Providers: Hosting providers, payment processors (e.g., Stripe or equivalent PCI-DSS compliant processor), analytics providers, email delivery services, and customer support platforms. These parties process data only on our instructions and under binding data processing agreements.
• Business Partners: Only with your prior consent, for joint marketing or co-branded services
• Professional Advisors: Lawyers, accountants, and auditors, under confidentiality obligations
• Legal Authorities: When required by law, court order, or government regulation, or to protect our rights and the safety of others

We do not share your personal information with third parties for their own independent marketing purposes without your explicit consent.

4.3 International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home country. When we transfer data internationally, we ensure adequate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where the destination country has been deemed to provide adequate protection
• Binding Corporate Rules or equivalent mechanisms where applicable

You may request details of the specific safeguards applied to your data by contacting us at 22z381iw6@mozmail.com.

4.4 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Our standard retention periods are:

When data is no longer required, we securely delete or anonymize it.

5. Your Rights

5.1 Universal Rights

Regardless of your location, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal information ("right to be forgotten"), subject to legal retention obligations
• Restriction: Request that we limit the processing of your data in certain circumstances
• Portability: Receive your data in a structured, commonly used, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing purposes
• Withdrawal of Consent: Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at 22z381iw6@mozmail.com. We will respond within 30 days (or sooner as required by applicable law).

5.2 Regional-Specific Rights

EU / UK Residents (GDPR / UK GDPR)

In addition to the rights above, you may:

• Lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national supervisory authority in the EU)
• Designate an authorized representative to exercise rights on your behalf
• Not be subject to solely automated decision-making that produces significant legal effects (see Section 3.3)

California Residents (CCPA / CPRA)

You have the right to:

• Know what personal information we collect, use, disclose, or sell
• Request deletion of your personal information (subject to certain exceptions)
• Opt out of the sale or sharing of your personal information — we do not sell personal information; no opt-out is currently required
• Correct inaccurate personal information
• Limit use of sensitive personal information
• Non-discrimination for exercising your CCPA rights

For CCPA requests, contact: 22z381iw6@mozmail.com

Brazilian Residents (LGPD)

You have the right to:

• Confirm the existence of processing activities involving your data
• Access your personal data
• Correct incomplete, inaccurate, or outdated data
• Anonymize, block, or delete unnecessary or unlawfully processed data
• Request data portability to another service or product provider
• Obtain information about third parties with whom we share data
• Revoke consent and be informed of the consequences of doing so
• File a complaint with the Brazilian Data Protection Authority (ANPD)

South African Residents (POPIA)

You have the right to:

• Request access to your personal information held by us
• Request correction or deletion of personal information
• Object to the processing of your personal information
• Submit a complaint to the Information Regulator of South Africa

Canadian Residents (PIPEDA)

You have the right to:

• Access your personal information held by us
• Challenge the accuracy and completeness of your information and request amendment
• Withdraw consent (with reasonable notice), subject to legal and contractual restrictions
• File a complaint with the Office of the Privacy Commissioner of Canada

Australian Residents (Privacy Act 1988)

You have the right to:

• Request access to your personal information (subject to certain exceptions under the APPs)
• Request correction of personal information that is inaccurate, out of date, incomplete, or misleading
• Make a complaint to the Office of the Australian Information Commissioner (OAIC)

Japanese Residents (APPI)

You have the right to:

• Request disclosure of your retained personal data
• Request correction, addition, or deletion of your personal data
• Request suspension of use or provision to third parties where there has been a breach of the APPI
• File complaints with the Personal Information Protection Commission (PPC) of Japan

Singaporean Residents (PDPA)

You have the right to:

• Request access to your personal data held by us
• Request correction of personal data that is inaccurate or incomplete
• Withdraw consent for the collection, use, or disclosure of your personal data

6. Security Measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. These measures include:

• Encryption of data in transit (TLS) and at rest (AES-256 or equivalent)
• Role-based access controls and multi-factor authentication
• Regular security assessments and penetration testing
• Employee training on data protection and security practices
• Documented incident response procedures
• Vendor security assessments and data processing agreements

No transmission over the internet is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6.1 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach (GDPR Article 33)
• Notify you without undue delay if the breach is likely to result in a high risk to your rights and freedoms (GDPR Article 34)
• Comply with applicable breach notification timelines under CCPA, PIPEDA, POPIA, and other relevant laws

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

7.2 Cookie Consent

In accordance with the EU ePrivacy Directive and GDPR, we obtain your prior consent before placing non-essential cookies. You can manage your preferences through:

• Our cookie consent banner displayed on your first visit
• Your browser settings (note: blocking all cookies may affect site functionality)
• The Google Analytics Opt-Out Browser Add-on for analytics cookies
• Contacting us at 22z381iw6@mozmail.com

Withdrawing consent does not affect processing that occurred before withdrawal.

8. Children's Privacy

Our services are not directed at children. The minimum age thresholds we observe are:

• 16 years (GDPR default — EU Member States may lower this to 13)
• 13 years (COPPA — USA)
• Other jurisdictions: we comply with locally applicable digital consent ages

We do not knowingly collect personal information from children below the applicable age threshold. If we become aware that we have collected such information without valid parental consent, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at 22z381iw6@mozmail.com.

9. Third-Party Links

Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we update this policy, we will:

• Post the updated policy on this page with a revised "Last Updated" date
• Notify you of material changes by email or a prominent notice on our website at least 30 days before the change takes effect (where required by law)
• Where required, seek your renewed consent

We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels:

11.1 Regional Privacy Contacts

We will respond to all privacy requests within 30 days of receipt, or sooner where required by applicable law.