Privacy Policy

Last updated: January 14, 2026

EU data sovereignty and green infrastructure

All your data stays in the European Union. GreenPT processes all personal data exclusively within EU data centres located in France, powered by 100% renewable energy. We do not transfer data outside the EEA without explicit authorization and valid transfer mechanisms.

For organizations requiring full data sovereignty, we offer on-premise deployment options where you maintain complete control over your data infrastructure.

Data Processing Agreement for businesses

Business customers can request a signed Data Processing Agreement (DPA) to formalize our data processing relationship under GDPR. The DPA provides detailed information about:

• Legal basis and purposes for data processing
• Technical and organizational security measures
• Sub-processor agreements and authorizations
• Data subject rights and breach notification procedures
• Liability limitations and insurance coverage

To request a signed DPA, contact us and specify that you need a Data Processing Agreement for your organization, or use the custom DPA request form if you need tailored terms.

Introduction

GreenPT BV ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you use our AI productivity platform, including our web chat service, API, and Speech-to-Text functionality.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

What data we collect

We collect and process the following types of personal data:

• Account data: first name, last name, optional company name, email address, authentication identifiers.
• Chat content: message prompts and responses within GreenPT Chat (API payloads are processed in-memory only and not stored).
• Audio input: voice recordings for Speech-to-Text are processed in RAM and discarded immediately after transcription.
• Usage statistics: aggregated energy-consumption metrics (kWh) linked to user account.
• Billing data: token usage counts and related metadata for fee calculation.

How we use your data

We process your personal data for the following purposes:

• Provision, maintenance, and optimization of our AI services
• User authentication and account management
• Billing and payment processing
• Customer support and technical assistance
• Compliance with legal obligations and fraud prevention
• Anonymized research and service improvement
• Displaying environmental impact metrics (energy consumption)

Data retention

We retain your personal data only as long as necessary for the purposes outlined above:

Upon account termination, you have 30 days to export your data, after which we will delete or anonymize it as described in our Data Processing Agreement.

Security measures

We implement comprehensive technical and organizational measures to protect your data:

• All data hosted exclusively in EU data centres (France) powered by 100% renewable energy
• TLS 1.3 encryption for all traffic and AES-256 encryption at rest
• Multi-factor authentication and role-based access control
• Daily encrypted backups with 24-hour recovery point objective
• Regular vulnerability scans and annual penetration testing
• ISO 27001, ISO 50001 and HDS certified infrastructure

Sub-processors

We engage the following authorized sub-processors:

We provide 30 days advance notice of any changes to our sub-processors and maintain the right to object on reasonable data protection grounds.

GreenPT Search

When you use our search service at search.greenpt.ai, we utilize an additional sub-processor to provide search functionality.

Brave Search API. We use Brave Search API to power our search index. When you perform a search on GreenPT Search, your search queries are processed through Brave's infrastructure to retrieve relevant results. Brave Search is used only on search.greenpt.ai. It is not used in the GreenPT API, apps.greenpt.ai, or any other GreenPT service.

For more information about how Brave handles your data, please review their Privacy Policy.

Your rights under GDPR

As a data subject, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Erase your personal data
• Restrict processing of your personal data
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, please contact us. We will respond to your request within one month.

Data sharing

We do not sell, trade, or otherwise transfer your personal data to third parties except:

• To our authorized sub-processors listed above for service provision
• When required by law or legal process
• To protect our rights, property, or safety, or that of others
• With your explicit consent
• To advertising partners (Google and Meta), but only when you arrive at our website via their ads. In those cases, they learn that you visited a specific landing page and, if applicable, a thank-you page (only those two pages). We do not share any other personal data or browsing activity with them.

Cookies and tracking

We place tracking cookies only on special landing pages and thank-you pages for visitors who arrive via Google or Meta ads. These cookies are used exclusively to measure whether an advertisement led to a visit on those pages. No tracking cookies are placed on the rest of our website.

For all other visitors, no tracking cookies are set.

The AI use calculator on our Advisory page

The calculator on our Advisory page runs entirely in your browser. The figures you enter stay on your device, and we store none of them. We do record the coarse, anonymous properties listed below, which includes your employee count rounded to the nearest hundred.

We do record, through the same self-hosted, cookieless Plausible Analytics described above, a small set of anonymous properties so we can see how the calculator is used: the number of employees rounded to the nearest hundred, the usage profile you selected, whether you opened the sector list and which sector you picked, whether you opened the assumptions panel and which slider you moved, and whether you clicked through to request a gap analysis.

This is deliberately coarse. We store no IP address, set no cookie or other persistent identifier, and do not link these events to a session, to each other, or to any person. Rounding the employee count to hundreds is part of that: it keeps the figure useful to us while it cannot identify an organisation. There is no form and no email field between you and the result, so using the calculator requires no personal data at all.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website or by email at least 30 days before they take effect. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

GreenPT BV Plompetorengracht 4, 3512 CC Utrecht, Netherlands Chamber of Commerce: 97084360

• Email: mail@greenpt.ai
• Data Protection Officer: mail@greenpt.ai