PolyTakt Limited Privacy Policy

We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.

We collect, use and are responsible for certain personal data about you. When we do so we are subject to applicable data protection laws, including the EU General Data Protection Regulation (EU GDPR) in relation to goods and services we offer to individuals and our wider operations in the European Economic Area (EEA).

PolyTakt is intended for trained professionals working in injection moulding and related manufacturing environments. Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

1. Key Terms

It would be helpful to start by explaining some key terms used in this policy:

2. Personal Data We Collect About You

We may collect and use the following personal data about you:

• your name and contact information, including email address and telephone number and company details
• billing and transaction information relating to your subscriptions (full payment card details are handled by our payment providers and app stores, not stored by us)
• your contact history and subscription/entitlement history
• information about how you use our website, mobile app and related systems (including device type, operating system, app version, and crash/error logs)
• work email, name, and role of individuals invited to a Team Pro organisation by an administrator; process and manufacturing data entered into calculators, studies, and organisation libraries; and Community Hub content (display name, posts, replies, images, and reports), where you use that feature

We collect and use this personal data to provide our products and/or services to you. If you do not provide personal data we ask for, it may delay or prevent us from providing our products and/or services to you.

3. Team Pro, Individual Pro and Subscriptions

Individual Pro subscriptions are purchased through the Apple App Store or Google Play (orchestrated via RevenueCat). Payment and certain subscription data are handled by Apple/Google and their payment systems; we receive entitlement status from the relevant store to enable Pro features.

Team Pro is a business subscription. The billing contact creates and administers the organisation on the Team Pro web portal, and organisation data (shared machines, tools, materials, studies) is scoped to that organisation. Work email, name, and role of invited individuals are provided by the organisation administrator.

For Team Pro, the customer company is the data controller for its employees' personal data and process/manufacturing records (including org-internal Community Hub content held for that organisation), and PolyTakt Limited acts as a data processor under a separate Data Processing Agreement. PolyTakt Limited is the data controller for website visitors, free and Individual Pro accounts, platform security/abuse prevention, product analytics, and the public Community Hub.

4. Community Hub

Our mobile app includes a Community Hub (forum/Q&A), not private chat or direct messages. It is available free to signed-in users, subject to organisation policy. We collect and store Community Hub content you submit (posts, replies, optional images), together with your account identity and optional community display name, timestamps, votes, and moderation/report metadata. Content may be public to other signed-in users, or limited to your organisation (org-internal knowledge base). Team Pro organisations default to org-internal only; public participation is opt-in by an organisation administrator. We use this data to provide the Community Hub and to moderate misuse (including automated text moderation and user reports) under our Acceptable Use Policy. Community Hub content is retained while your account/content remains, and may be removed or anonymised on a valid erasure request where feasible.

The Community Hub is not directed at, and must not be used by, individuals under the age of 16. If we become aware that someone under 16 has provided personal data through the Community Hub, we will take steps to remove that content and delete the associated data.

5. How Your Personal Data Is Collected

We collect most of this personal data directly from you via our website, our mobile app, and the Team Pro portal. We also receive limited data from Apple/Google (Individual Pro entitlement status), Stripe (Team Pro billing status), and organisation administrators who invite Mobile Users.

However, we may also collect information from other sources such as:

• directly from a third party, e.g. our payment processor (Stripe) or app store platforms (such as Apple, Google);
• from cookies on our website—for more information on our use of cookies, please see our cookie policy at https://polytakt.app/cookie-policy (or the Cookie Policy linked in the website footer);
• via Team Pro administrators, who submit invite data (name, work email, role) on behalf of their organisation;
• via app store platforms (Apple App Store, Google Play), which provide subscription entitlement status for Individual Pro.

6. How and Why We Use Your Personal Data

Under data protection law, we can only use your personal data if we have a proper reason or 'lawful basis', such as:

• where you have given consent (which can be withdrawn at any time);
• to comply with our legal and regulatory obligations;
• for the performance of a contract with you or to take steps at your request before entering into a contract; or
• for our legitimate interests or those of a third party.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own.

The table below explains what we use your personal data for and our reasons for processing it.

7. Marketing

We may use your personal data to send you updates (by email, text message, telephone or post) about our products and/or services, including exclusive offers, promotions or new products and/or services.

We have a legitimate interest in using your personal data for marketing purposes (see above 'How and why we use your personal data'). This means we do not usually need your consent to send you marketing information. However, where consent is needed, we will ask for this separately and clearly.

You have the right to opt out of receiving marketing communications at any time by:

• contacting us at support@polytakt.app; or
• using the 'unsubscribe' link in marketing emails.

We may ask you to confirm or update your marketing preferences if you ask us to provide further products and/or services in the future, or if there are changes in the law, regulation, or the structure of our business.

We will always treat your personal data with the utmost respect and never sell or share it with other organisations for marketing purposes.

8. Who We Share Your Personal Data With

We routinely share personal data with:

• payment and subscription providers who help us deliver our products and/or services (Stripe for Team Pro; Apple, Google and RevenueCat for Individual Pro);
• infrastructure and hosting providers who help us run our business, including Supabase (application data hosting, authentication and storage), UnlimitedWebHosting.co.uk (website hosting), and Blacknight (domain name services);
• OpenAI, where used to help moderate Community Hub text content;
• professional advisers (legal, accounting, under confidentiality); and authorities, where required by law.

We only allow our service providers to handle your personal data if we are satisfied they take appropriate measures to protect your personal data. We also impose contractual obligations on service providers to ensure compliance with applicable data protection laws and that they can only use your personal data to provide services to us and to you.

We may also need to:

• share personal data with external auditors, e.g. in relation to the audit of our accounts;
• disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations;
• share some personal data with other parties, such as potential buyers of some or all of our business or during a restructuring—usually, information will be anonymised but this may not always be possible, however, the recipient of the information will be bound by confidentiality obligations.

If you would like more information about who we share our data with and why, please contact us (see 'How to contact us' below).

9. Where Your Personal Data is Held

We will use all reasonable endeavours to keep the personal information we collect and use in a secure environment, and we have implemented appropriate technical, administrative and physical security measures that are designed to protect personal information from unauthorised access, disclosure, use and modification.

We use Supabase for data hosting and storage as set out in the table below. Our primary database is hosted in West EU (Paris) (EEA).

10. How Long Your Personal Data Will Be Kept

We will keep your personal data while you have an account with us or we are providing our products and/or services to you.

Thereafter, we will keep your personal data for as long as is necessary:

• to respond to any questions, complaints or claims made by you or on your behalf;
• to show that we treated you fairly;
• to keep records required by law.

We will not keep your personal data for longer than necessary. Different retention periods apply for different types of personal data. When it is no longer necessary to keep your personal data, we will delete or anonymise it.

For Team Pro organisation data, access may continue on a read-only basis for a period after a subscription lapses, as set out in the Team Pro Terms. Indicative retention periods (which we may refine): account data while the account is active and for 24 months after closure or a deletion request; website analytics for 13 months; support tickets for 3 years from last correspondence; Team Pro billing/invoice records for 6 years; crash/error logs for about 90 days; Community Hub content while the account/content remains (or until removed/anonymised on a valid erasure request). Process and organisation library data follows the Team Pro Terms (including read-only access after lapse), and is deleted or returned on customer offboarding within 90 days of archive unless a legal hold applies.

11. Transferring Your Personal Data

Under the GDPR, we can only transfer your personal data to a country or international organisation outside the EEA/UK where:

• the European Commission or the UK government has decided the particular country or international organisation ensures an adequate level of protection of personal data (known as an 'adequacy decision');
• there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for data subjects; or
• a specific exception applies under data protection law

Your personal information is uploaded to and stored on servers that are maintained by third party providers, including Supabase West EU (Paris), at the locations outlined in section 9 above. As we operate globally, with affiliates and service providers within and outside the EEA, we may transfer your personal data amongst these parties outside the EEA for purposes consistent with this privacy policy, including to countries with data protection laws which are not comparable to those within the EEA. As our mobile app is available globally via the Apple App Store and Google Play, personal data may also be transferred to and processed in countries outside the EEA in connection with your use of those platforms. In such circumstances we take appropriate steps to ensure that transfers of personal information are in accordance with applicable law and carefully managed to protect your privacy rights and interests, including through the use of standard contractual clauses.

12. Your Rights

You have the following rights, which you can exercise free of charge:

For further information on each of those rights, including the circumstances in which they apply, please contact us (see 'How to contact us' below) or see guidance available from the Data Protection Commission at https://www.dataprotection.ie

If you would like to exercise any of those rights, please:

• email, call or write to us—see below: 'How to contact us'; and
• provide enough information to identify yourself (e.g. your full name, address and customer or matter reference number) and any additional identity information we may reasonably request from you;
• let us know what right you want to exercise and the information to which your request relates.

13. Keeping your personal data secure

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

These measures include encryption in transit (TLS), encryption at rest provided by our hosting providers, access controls and row-level security on application data, encrypted local vaults on Desktop where configured, and limiting access to personal data to those with a genuine business need.

14. How to complain

Please contact us if you have any query or concern about our use of your information (see below 'How to contact us'). We hope we will be able to resolve any issues you may have.

You also have the right to lodge a complaint with any relevant European data protection supervisory authority.

15. Changes to this privacy policy

This privacy notice was published on 7 August 2026 and last updated on 7 August 2026.

We may change this privacy notice from time to time. When we do we will inform you via our website.

16. How to contact us

You can contact us by post, email or telephone if you have any questions about this privacy policy or the information we hold about you, to exercise a right under data protection law or to make a complaint.

Our contact details are shown below: