PRIVACY POLICY

The AI App Factory S.à r.l.-S Version: 1.1 | Effective Date: March 2026 Applicable to: all visitors and users of www.theaiappfactory.com INTRODUCTION AND OUR COMMITMENT TO YOUR PRIVACY At The AI App Factory (TAAF), we are committed to making artificial intelligence accessible, practical, and human-centered for all. Protecting your personal data is fundamental to our mission of “democratizing AI for entrepreneurs and SMEs.” This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website or interact with us online. We use plain language, make realistic promises, and comply with the General Data Protection Regulation (GDPR) as well as Luxembourg data protection law. WHO WE ARE Legal Name: The AI App Factory S.à r.l.-S Registered Address: 30, route de Waltzing, L-8478 Eischen, Luxembourg Founder & Manager: Olivier Dubois Company Website: www.theaiappfactory.com Legal Status: SARL-S under Luxembourg law CORE PRIVACY PRINCIPLES We process your personal data in accordance with the following principles: - LAWFULNESS, FAIRNESS & TRANSPARENCY: We clearly explain why and how we process your data. - PURPOSE LIMITATION: We only collect data for specific, legitimate purposes. - DATA MINIMIZATION: We collect only what is necessary. - ACCURACY: We keep your data accurate and up to date. - STORAGE LIMITATION: We retain your data only as long as necessary. - INTEGRITY & CONFIDENTIALITY: We apply appropriate security measures to protect your data. WHAT PERSONAL DATA WE COLLECT AND WHY When you interact with our website or contact us, we may collect the following types of data: - IDENTIFICATION & CONTACT DATA (name, email, phone, company, role): To respond to your inquiries, manage waitlist registrations, or communicate with you. Legal basis: legitimate interest or pre-contractual steps. - BUSINESS CONTEXT DATA (company size, sector, AI needs): To tailor our responses and services. Legal basis: legitimate interest. - USAGE DATA (website analytics): To improve site performance and user experience. Legal basis: legitimate interest, with cookie consent where applicable. - MARKETING PREFERENCES (opt-in only): To send you updates, case studies, or newsletters. Legal basis: your consent. NOTE: Any future apps or services you access from TAAF will have their own specific privacy policies. HOW WE PROTECT YOUR DATA We use technical and organizational measures to protect your personal data, including: - Privacy-by-design and privacy-by-default in our website and tools - Secure hosting and SSL encryption - Role-based access controls within our internal systems (e.g. Odoo) WHO HAS ACCESS TO YOUR DATA - INTERNAL TEAM AT TAAF: To respond to your inquiries, manage waitlists, and improve our services. - TRUSTED TECHNOLOGY PROVIDERS: For website hosting, CRM (Odoo), analytics tools. We use GDPR-compliant and privacy-focused providers only. We do not sell your data. COOKIES & ANALYTICS Our website may use cookies to improve user experience and gather anonymous analytics. - ESSENTIAL COOKIES: Required for website functionality. - ANALYTICS COOKIES: Used only with your consent (via cookie banner). For more details, please refer to our Cookie Policy on the website. YOUR RIGHTS UNDER GDPR You have the following rights regarding your personal data: 1. RIGHT TO ACCESS your data 2. RIGHT TO RECTIFICATION if your data is inaccurate 3. RIGHT TO ERASURE (“right to be forgotten”) 4. RIGHT TO RESTRICT PROCESSING in certain circumstances 5. RIGHT TO DATA PORTABILITY 6. RIGHT TO OBJECT to processing (especially for marketing) 7. RIGHT TO LODGE A COMPLAINT with the CNPD (Luxembourg Data Protection Authority) To exercise any of these rights, please contact us (see CONTACT US section). DATA RETENTION We retain your personal data only as long as necessary for the purposes described in this policy or as required by law. CONTACT US For any privacy-related questions or to exercise your GDPR rights, please contact: Email: privacy@theaiappfactory.com Postal Address: The AI App Factory S.à r.l.-S, 30, route de Waltzing, L-8478 Eischen, Luxembourg We aim to respond to all requests within one month. UPDATES TO THIS PRIVACY POLICY We may update this Privacy Policy from time to time. All changes will be published on this page with an updated effective date. NOTE This Privacy Policy covers data collection and processing relating to the website www.theaiappfactory.com. Any additional apps or services will be subject to their own privacy terms.