Privacy Policy

The person responsible for data processing on this website is:

Raphael Grossenbacher Email: [email protected] Catalin Hercut Email: [email protected]

PrivateFlow.ai is a project in formation, based in Switzerland. Once a legal entity is registered, this policy will be updated accordingly.

This privacy policy applies to the use of this website and the contact/waitlist form. It explains what personal data we collect, for what purpose, and on what legal basis.

When you use our contact form or join the waitlist, we collect the following data:

• Contact data: First name, last name, email address, and optionally company or role if you provide them voluntarily.
• Technical data: IP address, browser type, operating system, access time. This data is collected automatically by the web server.
• Usage data: Page views and interactions, to the extent captured by analytics tools (see section 6).

We process your personal data for the following purposes:

• Contact and waitlist: To inform you about the launch of PrivateFlow, product news, and relevant updates.
• Communication: To respond to your inquiries.
• Website improvement: To optimize user experience and technical stability.

Processing is based on the Swiss Federal Act on Data Protection (nDSG, effective since 1 September 2023):

• Legitimate interest (Art. 31(1) nDSG): Collecting contact data through a form you actively fill out is based on our legitimate interest in communicating with you.
• Consent: Where you activate a marketing checkbox, sending you information is based on your explicit consent. You may revoke this consent at any time.

We use the following third-party services:

HubSpot, Inc. (USA) - for managing contact form data and email communication. HubSpot is a US-based company; however, data of customers in the European region is stored and processed on servers within the EU. More information: hubspot.com/privacy-policy

Google Analytics 4 (Google LLC, USA) - for anonymous usage analytics (page views, session duration, device type). Data is processed in the EU where available. IP anonymization is enabled. Analytics cookies are only set after you give consent via our cookie banner. You can opt out at any time by adjusting your cookie preferences. More information: policies.google.com/privacy

Your contact data is stored for as long as it is necessary for the stated purpose - typically until you unsubscribe from our communications or request deletion. Technical log data is deleted after no more than 90 days.

Under the nDSG, you have the following rights:

• Right of access (Art. 25 nDSG): You may request information on whether and what personal data we process about you at any time.
• Right to rectification (Art. 32(1) nDSG): You may request correction of inaccurate data.
• Right to deletion: You may request deletion of your data, provided no legal retention obligation applies.
• Right to object: You may object to the processing of your data at any time.
• Right to data portability (Art. 28 nDSG): You may request your data in a commonly used format.
• To exercise your rights, contact us at: [email protected] [email protected]

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Data transmission is encrypted via HTTPS.

We reserve the right to amend this privacy policy at any time. The current version is always available on our website. In the event of material changes, we may notify you by email.