Home / Legal / GDPR
LegalEU data rights

GDPR & your data rights.

If you're in the EU/EEA (or the UK), data‑protection law gives you specific rights over your personal data. Here's how those rights work with RubberAI.

Last updated: 3 June 2026 · Private beta draft

The short version: you have rights over your personal data — access, correction, deletion, portability and more. Email info@rubberai.io to use any of them and we'll handle it within the legal timeframe.

01Data controller

RubberAI is the data controller for personal data collected through this website and the beta. We process it in line with the EU General Data Protection Regulation (GDPR) and applicable local law. Our platform is hosted in the EU.

02Legal bases for processing

  • Consent — when you submit a form or opt in to data sharing.
  • Legitimate interests — responding to your enquiries and securing our service.
  • Contract — providing the platform once you become a customer.
  • Legal obligation — where we're required to keep or disclose data.

03Your rights

Under GDPR you can:

  • Access the personal data we hold about you.
  • Rectify data that's inaccurate or incomplete.
  • Erase your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Port your data to another provider.
  • Withdraw consent at any time, without affecting prior processing.

04International transfers

We keep personal data in the EU where possible. If data is ever transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses.

05Recipes, federated learning & consent

Your formulations and lab data stay in your workspace. Any cross‑lab learning uses federated learning and happens only with your opt‑in. Consent is held at the account‑administrator level and can be revoked at any time, with the change taking effect going forward.

06How to exercise your rights

Email info@rubberai.io or use our contact form and choose “Security / data handling”. We may need to verify your identity, and we'll respond within one month as required by GDPR.

07Complaints

If you believe we've mishandled your data, please contact us first so we can put it right. You also have the right to lodge a complaint with your local data‑protection authority.

Beta note. This notice is a working draft for our private beta and will be expanded into a full data‑processing agreement (DPA) for customers. Need a DPA now? Talk to us.