Find My Factory horizontal logo black - supplier sourcing platformPlus icon for expanding content sections
Product+
Platform OverviewSpeyaSourceEnrichEngageSecurity
Solutions+
RetailIndustrialPharmaceuticalMedical DevicesAutomotiveManufacturingDirect SpendIndirect SpendConsulting
PricingCustomersAboutContact
Legal

Terms of Use

Last updated: 2025-11-13

These Terms of Use (“Terms”) govern your access to and use of the Find My Factory platform and related services.

By creating an account, creating or joining a workspace, using the Enrich function, or otherwise accessing or using our platform, you agree to be bound by these Terms.

If you do not agree to these Terms, do not use the platform.

1. Company Information & Contact Details

Controller / Service Provider

2. Definitions

  • “Account”: User account created with full name, email, password, or third-party identity provider
  • “Workspace” / “Company Profile”: Digital workspace associated with a company with multiple users
  • “User”: Any natural person using the platform who has accepted these Terms
  • “Information” / “Customer Data”: Data provided, uploaded, or ingested into the platform
  • “Enrich Data”: Customer Data uploaded via Enrich function for enriching supplier data
  • “Global Supplier Database”: Find My Factory’s own database from web crawling and data purchasing
  • “Related Services”: Additional services including integrations, APIs, and third-party collaborations
  • “Website”: www.findmyfactory.eu and related domains

3. Scope of Services

Find My Factory provides an AI-driven sourcing platform allowing users to:

  • manage supplier information and relationships
  • discover and evaluate potential suppliers
  • interact and collaborate with suppliers
  • enrich and analyze supplier data using AI-based tools

The company may update features and maintain the Global Supplier Database through data crawling and purchasing activities.

4. Eligibility & Account Registration

  • Users must be at least 18 years old with legal capacity to enter binding contracts
  • Company representatives must be authorized to bind their organization
  • Registration information must be accurate and kept up to date
  • Users are responsible for maintaining login credential confidentiality
  • Account sharing is prohibited; each user must have their own Account

5. Use of the Platform — User Responsibilities

Users agree to:

Provide Accurate Information

  • Ensure company profiles and supplier data are accurate
  • Keep information reasonably up to date

Respect Content Standards

Users may not upload content that is:

  • illegal, infringing, or fraudulent
  • pornographic, racist, discriminatory, harassing, or offensive
  • malicious code, malware, or disruptive

Protect Access

  • Use reasonable security on devices
  • Notify the company promptly of suspected unauthorized access

Not Misuse the Platform

Users may not:

  • scrape, copy, or systematically harvest data to build competing services
  • resell, redistribute, or publicly publish obtained data without explicit permission
  • use data for bulk unsolicited marketing or spam
  • bypass or interfere with security controls
  • reverse engineer or derive source code

Permitted Use

Users may use obtained data internally within their organization for legitimate business purposes including supplier discovery, evaluation, qualification, and sourcing decisions.

6. Platform Availability & Disclaimer

  • The company strives to provide secure and reliable service but does not guarantee error-free or uninterrupted operation
  • Maintenance and updates may temporarily affect availability
  • Advanced data gathering methods do not warrant complete accuracy or current information
  • Users remain responsible for independently verifying information before making business decisions

7. Intellectual Property

  • All software, algorithms, content, designs, and data remain Find My Factory intellectual property
  • Users receive a limited, non-exclusive, non-transferable, revocable license for internal business purposes
  • Users retain rights to their own Customer Data
  • By uploading Customer Data, users grant a worldwide license limited to providing and improving services

8. Data Protection & GDPR

8.1 Roles

  • For platform usage data and Global Supplier Database, Find My Factory acts as independent data controller
  • For uploaded Customer Data, the company typically acts as processor

8.2 Categories of Personal Data

The platform may process:

  • Account and user data (name, email, role, company, login data)
  • Usage and analytics data (IP address, device, browser, timestamps, search queries)
  • Supplier-related data (contact names, emails, phone numbers)
  • Support communications (messages, support tickets, emails, chat)

8.3 Special Categories (GDPR Article 9)

The platform is not intended for processing special categories of personal data such as health data, political opinions, religious beliefs, trade union membership, or biometric identification data. Users agree not to upload such information.

8.4 Purposes & Legal Bases

Personal data is processed for:

  • Providing services and fulfilling contracts (Art. 6(1)(b)): operating the platform, authenticating users, processing Customer Data, providing support
  • Maintaining and improving the platform (Art. 6(1)(f)): monitoring usage, detecting abuse, improving performance, developing features
  • Analytics and product improvement (Art. 6(1)(f)): aggregated analytics, usage statistics, AI model training
  • Service communications (Art. 6(1)(b) or 6(1)(f)): updates about changes, incidents, or needed information
  • Marketing communications (Art. 6(1)(a) or 6(1)(f)): newsletters with opt-out available

8.5 Data Retention

  • Active data: Customer Data retained while Account/Workspace is active
  • Deletion after termination: Data deleted or anonymized from active systems within 90 days of termination request
  • Backups: Encrypted backups persist up to 3 years for disaster recovery; access is strictly limited
  • Logs and analytics: Retained only as long as necessary for security and troubleshooting
  • Models and aggregated statistics: May be retained beyond stated periods but no longer identify users

Historical models are generally not retrained to remove data influence, but future training excludes information once opt-out or deletion is exercised.

8.6 Your Rights

GDPR provides rights to:

  • access personal data
  • rectify inaccurate or incomplete data
  • erase personal data
  • restrict processing
  • object to processing based on legitimate interests
  • data portability

To exercise rights or opt out, contact dpo@findmyfactory.eu. Users may lodge complaints with supervisory authorities including Sweden’s IMY or their country’s authority.

9. AI, Logs, and Use of Customer Data

9.1 Customer-Specific Models

The company may train or fine-tune customer-specific AI models using Customer Data at user request or as part of service provision. These models are not shared with other customers, though underlying infrastructure may be.

9.2 Global Models & Product Improvement

Non-Enrich Customer Data, logs, and usage information may improve general models and services, subject to:

  • Removal or masking of personal data and direct identifiers before training
  • No use of Enrich Data for global model training or Global Supplier Database augmentation unless suppliers existed independently in the database

Typical data used for product improvement includes search queries, filters, click patterns, interaction logs, performance metrics, and non-Enrich AI feature inputs.

Users may request opt-out of product improvement data use by contacting dpo@findmyfactory.eu, though this may limit advanced functionalities.

9.3 Queries and Prompts

Queries, prompts, and inputs to AI features may be:

  • logged for security and abuse detection
  • used after de-identification and aggregation to evaluate and improve models, relevance-ranking, and user experience

9.4 Enrich Data — Strict Separation

Enrich Data (own supplier lists and internal supplier information):

  • is stored in logically separate database from Global Supplier Database
  • is not visible or searchable by other customers
  • is not added to Global Supplier Database or used to infer supplier association
  • is not used for global model training or product improvement unless supplier information was independently present

Enrich Data processing is limited to:

  • providing and improving AI functionality within the user’s Workspace
  • cross-referencing internally for user-specific search results
  • maintaining service security and integrity

9.5 Temporary Files

Temporary files created during uploads, parsing, or batch processing are:

  • stored only for short periods necessary to complete operations
  • not used for model training or other purposes
  • deleted or overwritten during regular housekeeping

10. Subprocessors, Cloud Providers & International Transfers

Find My Factory uses third-party service providers for hosting and processing, including:

  • Cloud infrastructure providers (AWS, Google Cloud Platform)
  • Database and storage providers
  • AI infrastructure providers
  • Monitoring, logging and analytics tools

The company primarily uses EU/EEA data centers. Where transfers outside EU/EEA occur, appropriate safeguards include:

  • reliance on adequacy decisions where applicable
  • Standard Contractual Clauses approved by the European Commission

Subprocessors:

  • act only on documented instructions
  • are bound by confidentiality obligations
  • are contractually prohibited from using data for their own purposes including model training

An up-to-date Subprocessor list is maintained and available upon request.

11. Security

The company implements appropriate technical and organizational measures including:

  • encryption of data in transit and at rest
  • firewalls and access controls
  • role-based access control and least-privilege principles
  • logging and monitoring of critical system access
  • regular backups and disaster recovery planning

No system is guaranteed 100% secure. Users are responsible for reasonable security controls on their own devices and networks.

In case of personal-data breaches likely to result in risk to rights and freedoms, affected customers and relevant supervisory authorities will be notified per GDPR requirements.

12. Third-Party Services & Links

The platform may integrate with or link to third-party services such as identity providers, collaboration tools, and analytics tools.

  • Use of third-party services is governed by their own terms and privacy policies
  • Find My Factory is not responsible for uncontrolled third-party services

13. Prohibited Uses & Enforcement

Users must not:

  • attempt to access unauthorized data or platform areas
  • use the platform to violate laws, export controls, or sanctions
  • use the platform to harm, harass, or interfere with others

The company may suspend or terminate access if:

  • material breach of Terms occurs
  • data or platform misuse occurs
  • actions are reasonably necessary to protect other users, infrastructure, or legal interests

14. Warranties & Liability

To the maximum extent permitted by law:

  • The platform, data, and services are provided on an “as is” and “as available” basis
  • All warranties, express or implied, are disclaimed including fitness for particular purpose, non-infringement, and data accuracy

The company is not liable for:

  • indirect, incidental, special or consequential damages
  • loss of profits, revenue, business opportunities, or data

Total aggregate liability shall not exceed amounts paid for services in the preceding 12 months (or €100 for free versions).

Nothing limits liability for intentional misconduct or violations of non-waivable law.

Users agree to indemnify Find My Factory from claims, damages, or liabilities arising from platform misuse, Terms breach, or legal violations.

15. Changes to These Terms

The company may update Terms to reflect service changes, legal developments, or operational needs.

Material changes will be communicated through the platform, email, or other reasonable means. Continued platform use after updates indicates acceptance.

Users who disagree must stop using the platform and cancel subscriptions or close Accounts.

16. Governing Law & Dispute Resolution

These Terms are governed by Swedish law without regard to conflict-of-law principles.

Disputes are subject to exclusive jurisdiction of Swedish courts with Stockholm as first instance venue, unless mandatory law provides otherwise.

17. Contact

For questions regarding these Terms or data processing: