Privacy Policy

1. Controller

The controller of personal data processed through this website and SCIENTYCA commercial flows is Brands Alliance Service s.r.o., Lazianska 1045/22, 039 01 Turcianske Teplice, Slovakia, Company ID 46723285, EU VAT SK2023545546. Contact: privacy@brandsalliance.eu.

2. Data we collect

We may process name, surname, email, phone number, billing address, company name, company address, company ID, VAT ID, country, website, order details, subscription details, AI credit purchases, payment status, support messages, demo form details, IP address, browser data, device data, security logs, and service usage records.

3. Purposes

We process data to provide demos, respond to enquiries, create and manage orders, operate subscriptions, provide tenant access, deliver LabRat AI features, manage AI credit ledgers, issue invoices, meet accounting and tax obligations, prevent abuse, improve security, and communicate service information.

4. Legal bases

Processing is based on contract performance, pre-contractual steps requested by the user, legal obligations, legitimate interests in service security and business administration, and consent where required for optional communication or cookies.

5. Payments and processors

Payments are intended to be processed through Stripe. We do not store full payment card data on this public site. Hosting, email delivery, payment, analytics strictly necessary for operations, support, accounting, and infrastructure providers may process data on our behalf under appropriate contractual safeguards.

6. Lab and formulation data

Customer formulation, material, sample, file, and report data belongs to the customer. SCIENTYCA processes this data to provide the service. Customers are responsible for ensuring they have a lawful basis to upload personal data, confidential business data, or third-party content into their tenant.

7. AI processing

When LabRat features are used, selected prompts, formulation context, material fields, or research text may be processed to generate AI assistance. Production implementation should avoid sending unnecessary personal data to AI providers and should keep AI event logs for audit and credit accounting.

8. Retention

Demo leads are kept as long as needed for follow-up or until deletion is requested. Order, invoice, and accounting data is kept according to Slovak legal retention obligations. Security logs are kept for a limited period unless needed for investigation. Tenant data is retained according to the subscription agreement and deletion/export procedures.

9. International transfers

Some processors may operate outside Slovakia or the EEA. Where required, transfers are protected by adequacy decisions, standard contractual clauses, or other safeguards under GDPR.

10. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, objection to processing, and withdrawal of consent. You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

11. Security

We use organizational and technical measures such as access control, secure transport, logging, least privilege, backups, and encryption where appropriate. No internet service can be guaranteed to be completely secure.

12. Contact

Privacy requests may be sent to privacy@brandsalliance.eu or by post to Brands Alliance Service s.r.o., Lazianska 1045/22, 039 01 Turcianske Teplice, Slovakia.