Privacy Policy

Last updated: September 5, 2026 · Version: 1.0

1. Who we are and how to reach us

Rysax is an industrial technology company. This policy explains what we do with personal information collected through this website and through the conversations that follow.

Controller: Rysax USA LLC, 21625 Rhodes Rd., Spring, Texas 77388, United States.

Brazilian operations: Rysax do Brasil Ltda, CNPJ 63.932.062/0001-51, Rua Santa Lúcia 40, Letra B, Bairro Olhos d'Água, Belo Horizonte, Minas Gerais, CEP 30390-560, Brazil.

Privacy contact: [email protected]

EU representative (Article 27 GDPR): not appointed, as it is not applicable according to the scope of Article 3(2) of the GDPR. For further information contact [email protected].

2. What we collect, and why

We do not sell personal information. We do not run advertising. We do not build profiles for anyone else.

When you use a form on this site. Name, company email, company, country, and whatever you write in the message. On the Investment Guide form, country is required because it determines which regional edition you receive. Why: because you asked us to get back to you, and because a company has a genuine interest in answering a business inquiry addressed to it. Section 8 sets out the rights you have over this, by where you are.

When you apply for a role. Name, email, LinkedIn profile, area of interest, your CV, and anything you write. Why: because you asked us to consider you, and because handling an application is a step taken at your request before any contract exists.

Please do not include information you are not asked for, such as health data, union membership, religion, political opinions, or racial or ethnic origin. Most privacy laws protect those categories more strictly than ordinary contact details, and we do not need them to consider you.

When you download the Investment Guide. The form data above, plus a record that you downloaded it and which edition you received. No consent checkbox conditions the download, and the two things we do with your details are separate and treated separately. We send you the guide because you asked for it. We then make one follow-up business contact, because reference pricing lands badly without context and because someone who asked for a price guide expects to hear from a person once. It happens once. You can stop it at any time by replying to that message or writing to [email protected]. You see all of this stated prominently above the button before you submit the form: "By requesting the Investment Guide, you agree to our Terms of Use and understand that Rysax will make one follow-up business contact to support your evaluation, as set out in our Privacy Policy."

When you suggest an event. Name, company, email, event details, and any sponsorship document you choose to upload.

When you request a session. Your name, company email, company, the topic, and whatever availability you write. We do not run an automated calendar: a person confirms the time with you.

When you browse. With your consent, analytics data about how the site is used. Nothing that identifies you is stored for analytics before you agree. See the Cookie Policy.

3. The promise we make about being contacted

The site says it in plain words and this policy repeats it, because a promise made in marketing copy is a statement about how we process your data and we are bound by it:

No newsletter you did not ask for. No automated sales sequence. No drip campaign. A real conversation, with a person.

If you ask to be contacted, a person contacts you about the thing you asked about, and it is a person rather than an automated sequence. If you would rather not hear from us again, say so in that conversation or write to [email protected] and that is the end of it. We do not add you to a drip campaign, we do not pass you to a sequencing tool, and we do not sell or rent your details to anyone.

4. Who we share it with

Our CRM. Pipedrive, which stores enquiries and contact history on our behalf under a data processing agreement.

Our analytics provider. Google Analytics 4, only with your consent.

Our hosting provider. Amazon Web Services. Our email provider. Microsoft 365.

Within our group. Rysax entities and the Technofink Group where needed to answer you or deliver a service.

When the law requires it, and no further than it requires.

We do not share personal information with anyone for their own marketing.

5. Where your information goes

Rysax USA LLC is a United States company and Rysax do Brasil Ltda operates in Brazil, and our providers are largely US-based, so information reaches the United States.

From Europe: we do not offer services to people in the European Economic Area, so we do not rely on an EU transfer mechanism. If that changes, this section changes with it.

From Brazil: Rysax uses the Brazilian Standard Contractual Clauses issued under ANPD Resolution 19/2024 as its international transfer mechanism, both for transfers between Rysax do Brasil Ltda and Rysax USA LLC and for foreign suppliers that process data on our behalf. Formalisation of those instruments is in progress. To ask which mechanism applies to a particular processing activity, write to [email protected].

6. How long we keep it

WhatHow long
Enquiries and contact history3 years from our last interaction, unless you are a client, in which case the contract governs
CVs and applications2 years from our last contact with you, then deleted. If a claim or dispute arises, deletion is suspended for its duration
Investment Guide download records3 years from download
Event suggestionsUntil the following year's event calendar is set
Consent recordsFor as long as we rely on the consent, plus the applicable limitation period

7. Your rights

If you are in the European Economic Area or the United Kingdom (GDPR Articles 15 to 22): access, rectification, erasure, restriction, portability, objection including to processing based on legitimate interest, and the right not to be subject to solely automated decisions with legal or similarly significant effects. You may withdraw consent at any time, which does not affect processing already carried out. You may complain to your national supervisory authority.

If you are in Brazil (LGPD Article 18): confirmation that we process your data, access, correction, anonymisation, blocking or deletion of unnecessary or excessive data, portability, deletion of data processed with your consent, information about who we share with, information about the consequences of refusing consent, and revocation of consent. You may complain to the ANPD.

If you are in the United States: several state privacy laws now give residents rights over their personal information, and the thresholds that trigger them turn on a company's size and on how it uses data. Rather than work out which applies to you, we extend the same rights to every person in the United States as a matter of policy: ask us what we hold about you, ask us to correct it, ask us to delete it, and ask us to stop contacting you. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it for automated decisions about you. Anywhere else: ask us anyway. We answer the same way.

How: write to [email protected], or, if you are in Brazil, to our encarregada Rosangela Magnabosco at [email protected]. We answer within 30 days, and inside 15 days for Brazilian requests where the LGPD requires it.

8. Security, and children

We protect information with access controls, encryption in transit, and vendor agreements. No system is perfect, and we do not claim otherwise.

This site is not directed at children and we do not knowingly collect their information.

9. Changes

We update this policy when what we do changes. The version number and date at the top change with it, and we keep prior versions. If a change materially affects how we use information you already gave us, we tell you before it takes effect.