AIDEALT EUDR BRIDGE

Privacy Policy

Last updated: 2 September 2026

Standard B2B service terms for the current AIDEALT EUDR Bridge. A customer-specific order form or executed agreement may supplement or override these pages where expressly stated.

1. Who we are

AIDEALT operates EUDR Bridge, CarbonProof and their public product pages. The products organise supplier and industrial evidence for customer workflows. Contact: contact@aidealt.global.

2. Data we process

We may process company and contact details, shipment and lot references, production-property information, geolocation data, industrial reporting-period records, source references, uploaded documents, access records and communications required to operate the service. The public product pages do not use advertising analytics or account cookies. Their contact form prepares a draft locally; it does not submit or store that form data. If you choose to send the draft using your email application, we receive the resulting email. Hosting providers may process technical request data to deliver and protect the pages.

3. Why we process data

We process data to provide the service requested by an importer, maintain security, support users, create evidence exports, administer billing and meet legal obligations. Customer-submitted evidence is not used to train general-purpose AI models or for unrelated marketing.

4. Roles and lawful basis

The customer normally determines why supplier or industrial evidence is collected and acts as controller. AIDEALT normally acts as processor under the customer's instructions. For account, billing, service-security and business-administration data, AIDEALT may act as an independent controller.

5. Hosting, service providers and retention

The primary application, database and evidence storage are configured in Frankfurt. Cloudflare provides the public pages and the HTTPS application gateway on its global network. The gateway processes application traffic, including authentication and uploaded evidence in transit, and forwards it to Render; private application responses are configured not to be cached. Transactional email and billing providers may process the limited communication, account or payment data needed to provide those services. Evidence is retained while needed to provide the customer workspace and according to the applicable order or Data Processing Agreement; customers can archive requests and permanently delete request records and their stored evidence from the product.

6. Your rights

Depending on applicable law, individuals may request access, correction, deletion, restriction, portability or objection. Requests can be sent to contact@aidealt.global. We may need to coordinate with the customer that initiated the supplier request.

7. Security

Current controls include authenticated customer access, private evidence storage, workspace-level tenant scoping, encryption in transit, restricted owner-only administration, activity logging, expiring supplier links and limits on uploads and reminder activity. No internet service can guarantee absolute security.