Privacy statement.

01 — Who we are

Infrared Platform is operated by Isoplan B.V. ("we," "us"), Alexandre Lecocqsingel 36, 3543 JE Utrecht, Netherlands, KvK 32118755. We act as a data controller for our marketing and account data, and as a data processor for the customer data you upload into the platform.

02 — What this covers

This statement describes how we collect, use, and protect personal data in connection with the Infrared Platform website (infraredplatform.com) and the Infrared Platform application.

03 — Data we collect

• Account data: name, email, organisation, role, encrypted password, language preference.
• Usage data: application logs, feature usage, error reports, IP address, device and browser metadata.
• Project data: thermal images, observations, reports, locations, and any custom fields you choose to record. We process this on your instruction as a data processor.
• Marketing data: form submissions on this website, including topic and message contents.

04 — How we use it

• Operating, securing, and improving the platform.
• Providing customer support.
• Sending essential transactional notifications (account, billing, system events).
• Sending optional product updates if you've opted in.
• Meeting our legal obligations (e.g. invoicing, tax records).

05 — Legal basis

• Performance of contract: providing the platform you've subscribed to.
• Legitimate interest: security, fraud prevention, basic analytics.
• Consent: marketing emails, optional cookies.
• Legal obligation: financial and tax records.

06 — Sharing

We never sell personal data. We share only with carefully selected sub-processors needed to operate the platform: cloud hosting, transactional email, payment processing, error monitoring. A current list is available on request.

07 — Storage location

All customer data is stored on EU-hosted infrastructure. Backups remain in the EU. We do not transfer customer data outside the EEA without an adequacy decision or appropriate safeguards in place.

08 — Retention

• Account data: kept while your account is active, deleted within 90 days of closure.
• Project data: kept for the duration of your subscription. Soft-deleted items are recoverable for 30 days, then permanently deleted.
• Audit logs: retained for 7 years as required by Dutch financial law.
• Marketing form submissions: retained for 24 months unless you ask us to delete them sooner.

09 — Your rights

Under GDPR/AVG you may request access, correction, deletion, restriction, portability, or object to processing. To exercise any right, email privacy@infraredplatform.com with proof of identity. We respond within 30 days. You may also lodge a complaint with the Dutch Autoriteit Persoonsgegevens.

10 — Cookies

We use only the cookies needed to keep you signed in and to measure aggregate site traffic. No advertising or cross-site trackers. See our cookie banner for details.

11 — Security

TLS in transit, encryption at rest, role-based access, full audit logging, and routine security reviews. We disclose any qualifying incident to affected customers and the Autoriteit Persoonsgegevens within 72 hours.

12 — Changes

We update this statement when our processing changes. Material changes are announced via the platform and email at least 14 days in advance.

13 — Contact

Privacy questions: privacy@infraredplatform.com
General contact: info@infraredplatform.com · +31 88 000 1111