Privacy policy

Last updated: 28 May 2026

This page explains how iris-playbook.com (“the Site”) collects, uses and protects the personal data you provide when you join the IRIS waitlist. The Site is published by American Lean AI Publishing, a trade name of American Lean Software Development LLC, the company founded by Sebastian J. Brau, author of the book IRIS. Sales through this site are made and invoiced by Gestión Global de Recursos de Software España S.L. (“GR Soft”), which is the controller of purchase data. We comply with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the California Consumer Privacy Act (CCPA) where applicable.

1. Data controller

American Lean Software Development LLC, a Limited Liability Company incorporated in the United States, acting as data controller for iris-playbook.com. For privacy enquiries, please contact: info@americanlean.ai.

2. What we collect

When you submit the waitlist form on this Site, we collect:

• Email address (required) — to notify you when the book is available and to send periodic extracts.
• Name, role, plant size and sector (optional) — used only to segment the content we send so it is relevant to you.
• Technical metadata — timestamp of submission, referring URL, browser language. We do not use third-party advertising cookies.

If you buy the book and read it in the web reader, we also record how the book is read: which chapter and page you are on, how long you spend on each page, and any links inside the book you click. We use this to understand which chapters work and which do not, so the next book is better. These records are never sold or shared with anyone. We keep them in order to improve your reading experience with this and future books as much as we can. You can ask us to delete yours at any time by writing to info@americanlean.ai.

3. Legal basis for processing

We process your data on the basis of your explicit consent (Art. 6.1.a GDPR), given when you submit the form. You may withdraw this consent at any time by clicking “unsubscribe” in any email we send, or by writing to info@americanlean.ai.

4. Purposes

• To notify you when the book IRIS is published.
• To send pre-launch content (extracts, chapter previews, news related to the IRIS category).
• To measure aggregate interest in the book by role, plant size and sector. No individual profiling.

5. Retention

Your data is kept while you are subscribed to the waitlist. If you unsubscribe, your email is removed from active sending lists within 30 days and from backups within 12 months.

6. Sharing & processors

We do not sell, rent or trade your personal data. Data may be processed by carefully selected providers acting under our instructions, all bound by data-processing agreements compliant with GDPR. In particular:

• iLean / industrialaicenter.com — the platform that receives and stores the waitlist leads on our behalf for commercial management.
• Hosting and email-delivery providers.
• Privacy-friendly analytics (aggregate traffic only).

7. International transfers

American Lean Software Development LLC is incorporated in the United States. When personal data of users in the European Economic Area is transferred to the United States, the transfer is based on your explicit consent at the moment you submit the waitlist form (Art. 49.1.a GDPR), and is further protected by Standard Contractual Clauses with our sub-processors where applicable (Art. 46 GDPR).

8. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data (Arts. 15–22 GDPR). To exercise any of these rights, write to info@americanlean.ai. You also have the right to lodge a complaint with the supervisory authority in your country (in Spain: Agencia Española de Protección de Datos).

9. Cookies

This Site does not set advertising or tracking cookies. We may use a single first-party analytics cookie (or cookie-less analytics) to measure aggregate traffic. No personal identifier is shared with third parties.

10. Security

We apply technical and organisational measures appropriate to the risk to protect your data, including HTTPS encryption in transit, access controls on storage and minimisation of fields collected.

11. Changes to this policy

If we materially change this policy, we will update the “last updated” date at the top and, where the change affects how your data is processed, we will notify you by email.

← Back to home