Press Release | Find My Factory is now Speya™
Press Release | Find My Factory is now Speya™
Legal
Terms of service.
The terms for using Speya.
These Terms of Use (“Terms”) govern your access to and use of the Speya platform and related services, operated by Findmyfactory AB.
By creating an account, creating or joining a workspace, using the Enrich function, or otherwise accessing or using our platform, you agree to be bound by these Terms.
If you do not agree to these Terms, do not use the platform.
1. Company Information & Contact Details
Controller / Service Provider
Name: Findmyfactory AB
Organization number: 559355-9585
Address: Hästholmsvägen 32, 131 30 Nacka, Sweden
General email: info@findmyfactory.eu
Data protection contact (DPO): dpo@findmyfactory.eu
Support: support@findmyfactory.eu
Security: security@findmyfactory.eu
Website: speya.ai
2. Definitions
“Account”: User account created with full name, email, password, or third-party identity provider
“Workspace” / “Company Profile”: Digital workspace associated with a company with multiple users
“User”: Any natural person using the platform who has accepted these Terms
“Information” / “Customer Data”: Data provided, uploaded, or ingested into the platform
“Enrich Data”: Customer Data uploaded via Enrich function for enriching supplier data
“Global Supplier Database”: Speya’s own database from web crawling and data purchasing
“Related Services”: Additional services including integrations, APIs, and third-party collaborations
“Website”: speya.ai and related domains
3. Scope of Services
Speya provides an AI-driven sourcing platform allowing users to:
manage supplier information and relationships
discover and evaluate potential suppliers
interact and collaborate with suppliers
enrich and analyze supplier data using AI-based tools
The company may update features and maintain the Global Supplier Database through data crawling and purchasing activities.
4. Eligibility & Account Registration
Users must be at least 18 years old with legal capacity to enter binding contracts
Company representatives must be authorized to bind their organization
Registration information must be accurate and kept up to date
Users are responsible for maintaining login credential confidentiality
Account sharing is prohibited; each user must have their own Account
5. Use of the Platform — User Responsibilities
Users agree to:
Provide Accurate Information
Ensure company profiles and supplier data are accurate
Keep information reasonably up to date
Respect Content Standards
Users may not upload content that is:
illegal, infringing, or fraudulent
pornographic, racist, discriminatory, harassing, or offensive
malicious code, malware, or disruptive
Protect Access
Use reasonable security on devices
Notify the company promptly of suspected unauthorized access
Not Misuse the Platform
Users may not:
scrape, copy, or systematically harvest data to build competing services
resell, redistribute, or publicly publish obtained data without explicit permission
use data for bulk unsolicited marketing or spam
bypass or interfere with security controls
reverse engineer or derive source code
Permitted Use
Usersmay use obtained data internally within their organization for legitimate business purposes including supplier discovery, evaluation, qualification, and sourcing decisions.
6. Platform Availability & Disclaimer
The company strives to provide secure and reliable service but does not guarantee error-free or uninterrupted operation
Maintenance and updates may temporarily affect availability
Advanced data gathering methods do not warrant complete accuracy or current information
Users remain responsible for independently verifying information before making business decisions
7. Intellectual Property
All software, algorithms, content, designs, and data remain Findmyfactory AB intellectual property
Users receive a limited, non-exclusive, non-transferable, revocable license for internal business purposes
Users retain rights to their own Customer Data
By uploading Customer Data, users grant a worldwide license limited to providing and improving services
8. Data Protection & GDPR
8.1 Roles
For platform usage data and Global Supplier Database, Findmyfactory AB acts as independent data controller
For uploaded Customer Data, the company typically acts as processor
8.2 Categories of Personal Data
The platform may process:
Account and user data (name, email, role, company, login data)
Usage and analytics data (IP address, device, browser, timestamps, search queries)
Supplier-related data (contact names, emails, phone numbers)
Support communications (messages, support tickets, emails, chat)
8.3 Special Categories (GDPR Article 9)
The platform is not intended for processing special categories of personal data such as health data, political opinions, religious beliefs, trade union membership, or biometric identification data. Users agree not to upload such information.
8.4 Purposes & Legal Bases
Personal data is processed for:
Providing services and fulfilling contracts (Art. 6(1)(b)): operating the platform, authenticating users, processing Customer Data, providing support
Maintaining and improving the platform (Art. 6(1)(f)): monitoring usage, detecting abuse, improving performance, developing features
Analytics and product improvement (Art. 6(1)(f)): aggregated analytics, usage statistics, AI model training
Service communications (Art. 6(1)(b) or 6(1)(f)): updates about changes, incidents, or needed information
Marketing communications (Art. 6(1)(a) or 6(1)(f)): newsletters with opt-out available
8.5 Data Retention
Active data: Customer Data retained while Account/Workspace is active
Deletion after termination: Data deleted or anonymized from active systems within 90 days of termination request
Backups: Encrypted backups persist up to 3 years for disaster recovery; access is strictly limited
Logs and analytics: Retained only as long as necessary for security and troubleshooting
Models and aggregated statistics: May be retained beyond stated periods but no longer identify users
Historical models are generally not retrained to remove data influence, but future training excludes information once opt-out or deletion is exercised.
8.6 Your Rights
GDPR provides rights to:
access personal data
rectify inaccurate or incomplete data
erase personal data
restrict processing
object to processing based on legitimate interests
data portability
To exercise rights or opt out, contact dpo@findmyfactory.eu. Users may lodge complaints with supervisory authorities including Sweden’s IMY or their country’s authority.
9. AI, Logs, and Use of Customer Data
9.1 Customer-Specific Models
The company may train or fine-tune customer-specific AI models using Customer Data at user request or as part of service provision. These models are not shared with other customers, though underlying infrastructure may be.
9.2 Global Models & Product Improvement
Non-Enrich Customer Data, logs, and usage information may improve general models and services, subject to:
Removal or masking of personal data and direct identifiers before training
No use of Enrich Data for global model training or Global Supplier Database augmentation unless suppliers existed independently in the database
Typical data used for product improvement includes search queries, filters, click patterns, interaction logs, performance metrics, and non-Enrich AI feature inputs.
Users may request opt-out of product improvement data use by contacting dpo@findmyfactory.eu, though this may limit advanced functionalities.
9.3 Queries and Prompts
Queries, prompts, and inputs to AI features may be:
logged for security and abuse detection
used after de-identification and aggregation to evaluate and improve models, relevance-ranking, and user experience
9.4 Enrich Data — Strict Separation
Enrich Data (own supplier lists and internal supplier information):
is stored in logically separate database from Global Supplier Database
is not visible or searchable by other customers
is not added to Global Supplier Database or used to infer supplier association
is not used for global model training or product improvement unless supplier information was independently present
Enrich Data processing is limited to:
providing and improving AI functionality within the user’s Workspace
cross-referencing internally for user-specific search results
maintaining service security and integrity
9.5 Temporary Files
Temporary files created during uploads, parsing, or batch processing are:
stored only for short periods necessary to complete operations
not used for model training or other purposes
deleted or overwritten during regular housekeeping
10. Subprocessors, Cloud Providers & International Transfers
Speya uses third-party service providers for hosting and processing, including:
Cloud infrastructure providers (AWS, Google Cloud Platform)
Database and storage providers
AI infrastructure providers
Monitoring, logging and analytics tools
The company primarily uses EU/EEA data centers. Where transfers outside EU/EEA occur, appropriate safeguards include:
reliance on adequacy decisions where applicable
Standard Contractual Clauses approved by the European Commission
Subprocessors:
act only on documented instructions
are bound by confidentiality obligations
are contractually prohibited from using data for their own purposes including model training
An up-to-date Subprocessor list is maintained and available upon request.
11. Security
The company implements appropriate technical and organizational measures including:
encryption of data in transit and at rest
firewalls and access controls
role-based access control and least-privilege principles
logging and monitoring of critical system access
regular backups and disaster recovery planning
No system is guaranteed 100% secure. Users are responsible for reasonable security controls on their own devices and networks.
In case of personal-data breaches likely to result in risk to rights and freedoms, affected customers and relevant supervisory authorities will be notified per GDPR requirements.
12. Third-Party Services & Links
The platform may integrate with or link to third-party services such as identity providers, collaboration tools, and analytics tools.
Use of third-party services is governed by their own terms and privacy policies
Speya is not responsible for uncontrolled third-party services
13. Prohibited Uses & Enforcement
Users must not:
attempt to access unauthorized data or platform areas
use the platform to violate laws, export controls, or sanctions
use the platform to harm, harass, or interfere with others
The company may suspend or terminate access if:
material breach of Terms occurs
data or platform misuse occurs
actions are reasonably necessary to protect other users, infrastructure, or legal interests
14. Warranties & Liability
To the maximum extent permitted by law:
The platform, data, and services are provided on an “as is” and “as available” basis
All warranties, express or implied, are disclaimed including fitness for particular purpose, non-infringement, and data accuracy
The company is not liable for:
indirect, incidental, special or consequential damages
loss of profits, revenue, business opportunities, or data
Total aggregate liability shall not exceed amounts paid for services in the preceding 12 months (or €100 for free versions).
Nothing limits liability for intentional misconduct or violations of non-waivable law.
Users agree to indemnify Findmyfactory AB from claims, damages, or liabilities arising from platform misuse, Terms breach, or legal violations.
15. Changes to These Terms
The company may update Terms to reflect service changes, legal developments, or operational needs.
Material changes will be communicated through the platform, email, or other reasonable means. Continued platform use after updates indicates acceptance.
Users who disagree must stop using the platform and cancel subscriptions or close Accounts.
16. Governing Law & Dispute Resolution
These Terms are governed by Swedish law without regard to conflict-of-law principles.
Disputes are subject to exclusive jurisdiction of Swedish courts with Stockholm as first instance venue, unless mandatory law provides otherwise.
17. Contact
For questions regarding these Terms or data processing:
General email: info@findmyfactory.eu
Data protection/privacy: dpo@findmyfactory.eu
Address: Findmyfactory AB, Hästholmsvägen 32, 131 30 Nacka, Sweden
These Terms of Use (“Terms”) govern your access to and use of the Speya platform and related services, operated by Findmyfactory AB.
By creating an account, creating or joining a workspace, using the Enrich function, or otherwise accessing or using our platform, you agree to be bound by these Terms.
If you do not agree to these Terms, do not use the platform.
1. Company Information & Contact Details
Controller / Service Provider
Name: Findmyfactory AB
Organization number: 559355-9585
Address: Hästholmsvägen 32, 131 30 Nacka, Sweden
General email: info@findmyfactory.eu
Data protection contact (DPO): dpo@findmyfactory.eu
Support: support@findmyfactory.eu
Security: security@findmyfactory.eu
Website: speya.ai
2. Definitions
“Account”: User account created with full name, email, password, or third-party identity provider
“Workspace” / “Company Profile”: Digital workspace associated with a company with multiple users
“User”: Any natural person using the platform who has accepted these Terms
“Information” / “Customer Data”: Data provided, uploaded, or ingested into the platform
“Enrich Data”: Customer Data uploaded via Enrich function for enriching supplier data
“Global Supplier Database”: Speya’s own database from web crawling and data purchasing
“Related Services”: Additional services including integrations, APIs, and third-party collaborations
“Website”: speya.ai and related domains
3. Scope of Services
Speya provides an AI-driven sourcing platform allowing users to:
manage supplier information and relationships
discover and evaluate potential suppliers
interact and collaborate with suppliers
enrich and analyze supplier data using AI-based tools
The company may update features and maintain the Global Supplier Database through data crawling and purchasing activities.
4. Eligibility & Account Registration
Users must be at least 18 years old with legal capacity to enter binding contracts
Company representatives must be authorized to bind their organization
Registration information must be accurate and kept up to date
Users are responsible for maintaining login credential confidentiality
Account sharing is prohibited; each user must have their own Account
5. Use of the Platform — User Responsibilities
Users agree to:
Provide Accurate Information
Ensure company profiles and supplier data are accurate
Keep information reasonably up to date
Respect Content Standards
Users may not upload content that is:
illegal, infringing, or fraudulent
pornographic, racist, discriminatory, harassing, or offensive
malicious code, malware, or disruptive
Protect Access
Use reasonable security on devices
Notify the company promptly of suspected unauthorized access
Not Misuse the Platform
Users may not:
scrape, copy, or systematically harvest data to build competing services
resell, redistribute, or publicly publish obtained data without explicit permission
use data for bulk unsolicited marketing or spam
bypass or interfere with security controls
reverse engineer or derive source code
Permitted Use
Usersmay use obtained data internally within their organization for legitimate business purposes including supplier discovery, evaluation, qualification, and sourcing decisions.
6. Platform Availability & Disclaimer
The company strives to provide secure and reliable service but does not guarantee error-free or uninterrupted operation
Maintenance and updates may temporarily affect availability
Advanced data gathering methods do not warrant complete accuracy or current information
Users remain responsible for independently verifying information before making business decisions
7. Intellectual Property
All software, algorithms, content, designs, and data remain Findmyfactory AB intellectual property
Users receive a limited, non-exclusive, non-transferable, revocable license for internal business purposes
Users retain rights to their own Customer Data
By uploading Customer Data, users grant a worldwide license limited to providing and improving services
8. Data Protection & GDPR
8.1 Roles
For platform usage data and Global Supplier Database, Findmyfactory AB acts as independent data controller
For uploaded Customer Data, the company typically acts as processor
8.2 Categories of Personal Data
The platform may process:
Account and user data (name, email, role, company, login data)
Usage and analytics data (IP address, device, browser, timestamps, search queries)
Supplier-related data (contact names, emails, phone numbers)
Support communications (messages, support tickets, emails, chat)
8.3 Special Categories (GDPR Article 9)
The platform is not intended for processing special categories of personal data such as health data, political opinions, religious beliefs, trade union membership, or biometric identification data. Users agree not to upload such information.
8.4 Purposes & Legal Bases
Personal data is processed for:
Providing services and fulfilling contracts (Art. 6(1)(b)): operating the platform, authenticating users, processing Customer Data, providing support
Maintaining and improving the platform (Art. 6(1)(f)): monitoring usage, detecting abuse, improving performance, developing features
Analytics and product improvement (Art. 6(1)(f)): aggregated analytics, usage statistics, AI model training
Service communications (Art. 6(1)(b) or 6(1)(f)): updates about changes, incidents, or needed information
Marketing communications (Art. 6(1)(a) or 6(1)(f)): newsletters with opt-out available
8.5 Data Retention
Active data: Customer Data retained while Account/Workspace is active
Deletion after termination: Data deleted or anonymized from active systems within 90 days of termination request
Backups: Encrypted backups persist up to 3 years for disaster recovery; access is strictly limited
Logs and analytics: Retained only as long as necessary for security and troubleshooting
Models and aggregated statistics: May be retained beyond stated periods but no longer identify users
Historical models are generally not retrained to remove data influence, but future training excludes information once opt-out or deletion is exercised.
8.6 Your Rights
GDPR provides rights to:
access personal data
rectify inaccurate or incomplete data
erase personal data
restrict processing
object to processing based on legitimate interests
data portability
To exercise rights or opt out, contact dpo@findmyfactory.eu. Users may lodge complaints with supervisory authorities including Sweden’s IMY or their country’s authority.
9. AI, Logs, and Use of Customer Data
9.1 Customer-Specific Models
The company may train or fine-tune customer-specific AI models using Customer Data at user request or as part of service provision. These models are not shared with other customers, though underlying infrastructure may be.
9.2 Global Models & Product Improvement
Non-Enrich Customer Data, logs, and usage information may improve general models and services, subject to:
Removal or masking of personal data and direct identifiers before training
No use of Enrich Data for global model training or Global Supplier Database augmentation unless suppliers existed independently in the database
Typical data used for product improvement includes search queries, filters, click patterns, interaction logs, performance metrics, and non-Enrich AI feature inputs.
Users may request opt-out of product improvement data use by contacting dpo@findmyfactory.eu, though this may limit advanced functionalities.
9.3 Queries and Prompts
Queries, prompts, and inputs to AI features may be:
logged for security and abuse detection
used after de-identification and aggregation to evaluate and improve models, relevance-ranking, and user experience
9.4 Enrich Data — Strict Separation
Enrich Data (own supplier lists and internal supplier information):
is stored in logically separate database from Global Supplier Database
is not visible or searchable by other customers
is not added to Global Supplier Database or used to infer supplier association
is not used for global model training or product improvement unless supplier information was independently present
Enrich Data processing is limited to:
providing and improving AI functionality within the user’s Workspace
cross-referencing internally for user-specific search results
maintaining service security and integrity
9.5 Temporary Files
Temporary files created during uploads, parsing, or batch processing are:
stored only for short periods necessary to complete operations
not used for model training or other purposes
deleted or overwritten during regular housekeeping
10. Subprocessors, Cloud Providers & International Transfers
Speya uses third-party service providers for hosting and processing, including:
Cloud infrastructure providers (AWS, Google Cloud Platform)
Database and storage providers
AI infrastructure providers
Monitoring, logging and analytics tools
The company primarily uses EU/EEA data centers. Where transfers outside EU/EEA occur, appropriate safeguards include:
reliance on adequacy decisions where applicable
Standard Contractual Clauses approved by the European Commission
Subprocessors:
act only on documented instructions
are bound by confidentiality obligations
are contractually prohibited from using data for their own purposes including model training
An up-to-date Subprocessor list is maintained and available upon request.
11. Security
The company implements appropriate technical and organizational measures including:
encryption of data in transit and at rest
firewalls and access controls
role-based access control and least-privilege principles
logging and monitoring of critical system access
regular backups and disaster recovery planning
No system is guaranteed 100% secure. Users are responsible for reasonable security controls on their own devices and networks.
In case of personal-data breaches likely to result in risk to rights and freedoms, affected customers and relevant supervisory authorities will be notified per GDPR requirements.
12. Third-Party Services & Links
The platform may integrate with or link to third-party services such as identity providers, collaboration tools, and analytics tools.
Use of third-party services is governed by their own terms and privacy policies
Speya is not responsible for uncontrolled third-party services
13. Prohibited Uses & Enforcement
Users must not:
attempt to access unauthorized data or platform areas
use the platform to violate laws, export controls, or sanctions
use the platform to harm, harass, or interfere with others
The company may suspend or terminate access if:
material breach of Terms occurs
data or platform misuse occurs
actions are reasonably necessary to protect other users, infrastructure, or legal interests
14. Warranties & Liability
To the maximum extent permitted by law:
The platform, data, and services are provided on an “as is” and “as available” basis
All warranties, express or implied, are disclaimed including fitness for particular purpose, non-infringement, and data accuracy
The company is not liable for:
indirect, incidental, special or consequential damages
loss of profits, revenue, business opportunities, or data
Total aggregate liability shall not exceed amounts paid for services in the preceding 12 months (or €100 for free versions).
Nothing limits liability for intentional misconduct or violations of non-waivable law.
Users agree to indemnify Findmyfactory AB from claims, damages, or liabilities arising from platform misuse, Terms breach, or legal violations.
15. Changes to These Terms
The company may update Terms to reflect service changes, legal developments, or operational needs.
Material changes will be communicated through the platform, email, or other reasonable means. Continued platform use after updates indicates acceptance.
Users who disagree must stop using the platform and cancel subscriptions or close Accounts.
16. Governing Law & Dispute Resolution
These Terms are governed by Swedish law without regard to conflict-of-law principles.
Disputes are subject to exclusive jurisdiction of Swedish courts with Stockholm as first instance venue, unless mandatory law provides otherwise.
17. Contact
For questions regarding these Terms or data processing:
General email: info@findmyfactory.eu
Data protection/privacy: dpo@findmyfactory.eu
Address: Findmyfactory AB, Hästholmsvägen 32, 131 30 Nacka, Sweden