Privacy policy

Last updated: 28 May 2026

This page explains how iris-playbook.com (“the Site”) collects, uses and protects the personal data you provide when you join the IRIS waitlist. The Site is operated by American Lean Software Development LLC (“American Lean”), the company founded by Sebastian J. Brau, author of the book IRIS. We comply with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the California Consumer Privacy Act (CCPA) where applicable.

1. Data controller

American Lean Software Development LLC, a Limited Liability Company incorporated in the United States, acting as data controller for iris-playbook.com. For privacy enquiries, please contact: info@americanlean.ai.

2. What we collect

When you submit the waitlist form on this Site, we collect:

3. Legal basis for processing

We process your data on the basis of your explicit consent (Art. 6.1.a GDPR), given when you submit the form. You may withdraw this consent at any time by clicking “unsubscribe” in any email we send, or by writing to info@americanlean.ai.

4. Purposes

5. Retention

Your data is kept while you are subscribed to the waitlist. If you unsubscribe, your email is removed from active sending lists within 30 days and from backups within 12 months.

6. Sharing & processors

We do not sell, rent or trade your personal data. Data may be processed by carefully selected providers acting under our instructions, all bound by data-processing agreements compliant with GDPR. In particular:

7. International transfers

American Lean Software Development LLC is incorporated in the United States. When personal data of users in the European Economic Area is transferred to the United States, the transfer is based on your explicit consent at the moment you submit the waitlist form (Art. 49.1.a GDPR), and is further protected by Standard Contractual Clauses with our sub-processors where applicable (Art. 46 GDPR).

8. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data (Arts. 15–22 GDPR). To exercise any of these rights, write to info@americanlean.ai. You also have the right to lodge a complaint with the supervisory authority in your country (in Spain: Agencia Española de Protección de Datos).

9. Cookies

This Site does not set advertising or tracking cookies. We may use a single first-party analytics cookie (or cookie-less analytics) to measure aggregate traffic. No personal identifier is shared with third parties.

10. Security

We apply technical and organisational measures appropriate to the risk to protect your data, including HTTPS encryption in transit, access controls on storage and minimisation of fields collected.

11. Changes to this policy

If we materially change this policy, we will update the “last updated” date at the top and, where the change affects how your data is processed, we will notify you by email.

← Back to home