This Privacy Notice explains how Alethesis AI (a Swiss company in formation, hereafter “Alethesis”, “we”, “us”), represented by Elena Maran, collects and uses personal data when you visit www.alethesis.ai, contact us, request a demo, subscribe to our communications, or otherwise interact with us.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
Status note: Alethesis AI is in the process of being incorporated in Switzerland. Until registration in the Swiss commercial register is complete, Elena Maran acts as data controller in a personal capacity on behalf of the company in formation. This notice will be updated upon incorporation, at which point the registered legal entity will assume the role of data controller for ongoing processing.
1. Who we are
During the company-formation period, the data controller is:
Elena Maran, acting on behalf of Alethesis AI (in formation) Email: contact@alethesis.ai
Once Alethesis AI is registered in the Swiss commercial register, the registered company will assume the role of data controller and this notice will be updated to reflect the registered entity’s name, address, and commercial register number. Acts performed during the formation period will be ratified by the company upon registration in accordance with Article 645 of the Swiss Code of Obligations.
For any privacy-related question or to exercise your rights, contact us at contact@alethesis.ai.
2. Scope of this notice
This notice covers personal data we collect through our website, marketing channels, and direct interactions with prospects, customers, partners, and visitors.
It does not cover personal data that our customers process within the Alethesis platform on behalf of their own users or employees. In that context, our customer is the data controller and Alethesis acts as a data processor under a separate Data Processing Agreement.
3. Personal data we collect
3.1 Information you provide to us
- Identity and contact data: name, job title, employer, business email, business phone number, country.
- Inquiry content: the message and context you provide when you submit a contact form, request a demo, or correspond with us.
- Marketing preferences: subscription choices and consent records.
- Commercial information: details exchanged in the course of evaluating, negotiating, or providing our services, including procurement, due diligence, and contractual information.
3.2 Information we collect automatically
- Technical data: IP address (truncated where feasible), browser and device type, operating system, referring URL, pages viewed, time spent, and approximate location derived from IP.
- Cookies and similar technologies: see Section 8.
3.3 Information from third parties
- Public sources and business databases: professional information from sources such as LinkedIn, company registries, and B2B data providers, used to qualify outreach and verify business contacts.
- Referrals and event registrations: contact details shared with us by partners, conference organisers, or mutual contacts.
We do not knowingly collect special categories of personal data (such as health, biometric, or political data) through our website. Please do not submit such data through our forms.
4. Why we use your data and on what legal basis
We process personal data for the following purposes. Where GDPR applies, we identify the corresponding legal basis.
4.1 Responding to your inquiries and providing our services
- Replying to contact forms, demo requests, and emails.
- Negotiating, entering into, and performing contracts with prospects and customers.
Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR; Art. 31(2)(a) FADP).
4.2 Operating and improving our website
- Ensuring availability, security, and proper functioning of the site.
- Measuring traffic and improving content and user experience.
Legal basis: our legitimate interest in running and improving our service (Art. 6(1)(f) GDPR), or your consent for non-essential analytics where required (Art. 6(1)(a) GDPR; Art. 31(1) FADP).
4.3 Marketing and business development
- Sending newsletters, product updates, and event invitations to subscribers and existing business contacts.
- Targeted business outreach to professional contacts whose role suggests interest in AI governance solutions.
- Managing event participation and follow-up.
Legal basis: your consent where required, or our legitimate interest in promoting our B2B services to relevant professional audiences. You can opt out of marketing at any time using the unsubscribe link or by contacting us.
4.4 Compliance, security, and protection of rights
- Preventing fraud, abuse, and unauthorised access.
- Complying with legal obligations, regulator requests, and tax or accounting requirements.
- Establishing, exercising, or defending legal claims.
Legal basis: legal obligation (Art. 6(1)(c) GDPR), legitimate interest, or, where relevant, vital interests.
5. Who we share your data with
We do not sell personal data. We share it only as necessary, with the following categories of recipients:
- Service providers (data processors): hosting, email, CRM, analytics, customer support, and similar tools that operate under written agreements requiring confidentiality and adequate safeguards. A current list is available on request.
- Professional advisors: lawyers, auditors, accountants, and consultants bound by confidentiality.
- Authorities and regulators: where required by law, court order, or regulatory request.
- Successors: in connection with a merger, acquisition, financing, or sale of assets, with appropriate protections.
6. International data transfers
Some of our service providers are located outside Switzerland or the EEA, including in the United States. When we transfer personal data to a country that does not provide an equivalent level of protection, we rely on appropriate safeguards such as:
- European Commission adequacy decisions and Swiss Federal Council recognitions of adequate protection.
- Standard Contractual Clauses (EU SCCs) supplemented, where required, by the Swiss FDPIC addendum.
- Additional technical and organisational measures, such as encryption and access controls.
You can request more information about our transfer safeguards by contacting us at the address in Section 1.
7. How long we keep your data
We keep personal data only as long as necessary for the purposes described above, or as required by law. Indicative retention periods:
- Inquiries and demo requests: up to 24 months from last interaction, unless a commercial relationship is established.
- Customer and contractual records: for the duration of the contract and up to 10 years after termination, in line with Swiss commercial and tax law.
- Marketing data: until you unsubscribe, with a suppression record kept to honour your opt-out.
- Website analytics: typically up to 14 months in aggregated or pseudonymised form.
- Security and access logs: typically up to 12 months, longer in case of investigation.
8. Cookies and similar technologies
Our website currently does not use cookies or similar technologies to track visitors or measure usage. We do not use analytics or advertising cookies.
To display the site, your browser loads fonts and icons from third-party providers (Google Fonts and unpkg). These providers receive technical data such as your IP address when the resources load.
If we introduce cookies in the future, for example for analytics, we will update this notice and ask for your consent where required.
9. Your rights
Depending on where you are located, you have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Access | You can ask whether we hold personal data about you and request a copy. |
| Rectification | You can ask us to correct inaccurate or incomplete information. |
| Erasure | You can ask us to delete your personal data, subject to limited legal exceptions. |
| Restriction | You can ask us to suspend processing while a dispute or correction is resolved. |
| Objection | You can object to processing based on legitimate interests, including marketing. |
| Portability | You can ask to receive your data in a structured, machine-readable format. |
| Withdraw consent | Where we rely on consent, you can withdraw it at any time without affecting prior processing. |
| Automated decisions | You can ask not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects on you. |
| Complaint | You can lodge a complaint with the Swiss FDPIC or your local EU data protection authority. |
To exercise your rights, contact us at contact@alethesis.ai. We respond within 30 days (Switzerland) or one month (GDPR), with the possibility of a reasoned extension for complex requests. We may need to verify your identity before acting on a request.
You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch or, if you are in the EU/EEA, your national data protection authority.
10. Security
We apply technical and organisational measures designed to protect personal data, including encryption in transit, access controls, logging, vendor due diligence, and staff training. No system is fully secure; if you have reason to believe your interaction with us is no longer secure, please contact us immediately.
11. Children
Our website and services are intended for business users and are not directed to children. We do not knowingly collect personal data from children under 16. If you believe we have, please contact us so we can delete it.
12. AI and automated processing
Alethesis develops governance technology for AI systems. We do not use personal data submitted through our website to make decisions that produce legal or similarly significant effects on you. Information you share with us is not used to train third-party generative AI models without your consent.
13. Changes to this notice
We may update this Privacy Notice to reflect changes in our practices or legal obligations. We will post the updated version on our website and update the date at the top. Material changes will be signalled prominently or notified directly where appropriate.
14. How to contact us
Elena Maran, for Alethesis AI (in formation) mail: contact@alethesis.ai