Privacy Policy

1. Information we collect

• Account information: email address, password (stored hashed), phone number, role (buyer, foundry, or supplier), and company name.
• Profile and business content: company profile details, descriptions, requests for quotation (RFQs), and casting specifications you choose to publish.
• Uploaded media: photos and drawings of castings, and any documents you attach to your profile or RFQs.
• Device permissions, when granted: access to your camera and photo library, used only when you actively choose to upload an image.
• Technical data: session tokens issued by our authentication provider, language preference, and locally cached images stored on your device for performance.

2. How we use your information

• To operate and provide the AllFoundries service.
• To authenticate you and keep your account secure.
• To match buyers with foundries and suppliers based on the information you and they provide.
• To analyze uploaded casting images using AI in order to suggest specifications (see section 3).
• To send service-related notifications and respond to your support requests.
• To comply with legal obligations.

3. AI-based image analysis

When you upload a casting image, it is sent through our backend to Anthropic’s Claude Vision API to extract casting specifications and assist you in creating an RFQ. Anthropic processes the image transiently to return the analysis and does not use it to train its models.

4. How we share your information

• With other AllFoundries users: only what you choose to publish, such as your public profile and RFQs.
• With service providers acting on our instructions: Supabase (database, authentication, storage, and serverless functions) and Anthropic (image analysis as described in section 3).
• With authorities or other parties when required by law or to protect our rights.
• We do not sell your personal data.

5. International transfers

Our service providers may process your data outside the European Economic Area. In those cases we rely on Standard Contractual Clauses or equivalent legal safeguards to protect your data.

6. Data retention

We keep your personal data for as long as your account is active. When you delete your account, we remove your personal data from our active systems within 30 days. Residual copies in routine backups roll off within 90 days.

7. Your rights

Under the EU General Data Protection Regulation (GDPR) and equivalent laws, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of your data.
• Request portability of your data in a structured, machine-readable format.
• Restrict or object to certain processing of your data.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at info@allfoundries.com. You may also lodge a complaint with your national data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

8. Security

Your data is transmitted over TLS and stored encrypted at rest by our infrastructure provider. Access to personal data is restricted to authorized personnel and service accounts on a need-to-know basis.

9. Children’s privacy

AllFoundries is intended for business users and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to this policy

We may update this policy from time to time. We will announce material changes in the app and on the website and update the “Last updated” date at the top of this page.

11. Contact

Questions about this policy or about your personal data? Email us at info@allfoundries.com. The data controller is AllFoundries.