1. Data controller
TreadlyAI is a project run by a private individual, who is the controller of the personal data collected through this website, contact requests, platform use and early access programmes. Their full identification is provided on request. For any privacy-related questions or to exercise your rights, use the contact form at treadlyai.com.
2. Personal data we collect
We collect professional identification data (name, email and, if you provide them, company and phone number) when you contact us through the website form or by email. We also collect platform usage data, including technical logs, quality inspection metrics and activity records.
During app use in an industrial environment, we may process employee data associated with production orders or devices. We apply pseudonymisation and data minimisation wherever possible.
3. Purposes and legal bases
We use data to: (a) respond to contact requests and manage platform access — based on legitimate interest and contract performance; (b) provide and improve the service, including AI model refinement — based on contract and legitimate interest; (c) comply with legal obligations.
We do not carry out bulk direct marketing without explicit consent. Communications related to service evaluation or use are sent on the basis of legitimate interest.
4. Subcontractors and data sharing
We use subcontractors who process data on our behalf, including: Vercel Inc. (hosting of this website), the transactional email service Brevo (Sendinblue), which delivers requests sent through the contact form, and cloud infrastructure providers (hosting, storage and computing) for the platform. All subcontractors are subject to data processing agreements as required by the GDPR.
We do not sell personal data to third parties. If it is necessary to transfer data outside the European Economic Area, we ensure adequate safeguards, in particular standard contractual clauses approved by the European Commission or applicable adequacy decisions.
5. Retention
We retain data for the period necessary to fulfil the purposes described or applicable legal requirements. Data collected through the contact form is retained for a maximum of 24 months from the last interaction. Platform user data is deleted or anonymised within 12 months of contract termination, unless a higher legal or contractual obligation applies.
6. Data subjects' rights
Under the GDPR, you have the right to: access your data, rectify it, request its deletion, restrict processing, obtain portability and object to processing based on legitimate interest. You may also withdraw any consent given, without prejudice to the lawfulness of processing prior to withdrawal.
Requests should be sent through the contact form at treadlyai.com. We respond within 30 days. You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the competent supervisory authority in Portugal.
7. Security
We apply appropriate technical and organisational controls, including: data transmission always over HTTPS/TLS, secure authentication with role-based access control, segregation of test and production environments, and access monitoring.
In the event of a personal data breach posing a risk to data subjects, we notify the CNPD within 72 hours and affected data subjects without undue delay.
8. Cookies and tracking
The treadlyai.com website does not use third-party tracking cookies or analytics scripts. The only cookie used stores the language you chose (treadly_lang, valid for one year) and is created only when you switch language; it is strictly necessary to provide that feature and does not require consent under the ePrivacy Directive.
9. Changes to Policy
We may update this Policy to reflect legal changes, new subcontractors or operational improvements. Significant changes will be communicated by email or platform notification with reasonable advance notice. The most recent version is always available at treadlyai.com/privacy.