Privacy Policy

1. Introduction

ValueSpace ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our AI assistant services, or interact with our platform.

This policy describes our current practices as a growing business. We are fully committed to GDPR compliance and Swiss data protection standards.

This policy complies with:

• EU General Data Protection Regulation (GDPR) 2016/679
• Swiss Federal Act on Data Protection (nDSG)
• Swiss Ordinance to the Federal Act on Data Protection (nDSG-V)

2. Data Controller

ValueSpace
Zurich, Switzerland
Email: privacy@valuespace.ai
Data Protection Officer: dpo@valuespace.ai

3. Data We Collect

Information You Provide Directly:

• Account registration: Name, email, company details, billing information
• Service configuration: API keys, integration settings, custom prompts
• Customer support: Communications, feedback, support tickets

Information Collected Automatically:

• Technical data: IP addresses, browser type, device identifiers
• Usage data: Pages visited, features used, interaction patterns
• Cookies and tracking: See Section 10 for detailed information

4. Legal Basis for Processing

We process data based on GDPR Article 6:

• Contract Performance: Account management, service delivery, billing
• Legitimate Interests: Service improvement, security, direct marketing
• Consent: Marketing communications, non-essential cookies
• Legal Obligation: Tax compliance, law enforcement cooperation

5. How We Use Your Data

• Service Provision: AI functionality, account management, support
• Service Improvement: Analytics, product development, quality assurance
• Communication: Updates, security alerts, marketing (with consent)
• Compliance & Security: Fraud prevention, legal compliance, system protection

6. Data Sharing and International Transfers

Service Providers: Microsoft Azure (EU data centers), Stripe/PayPal (payment processing), email service providers - all under GDPR Article 28 agreements.

International Transfers: All processing within EEA or with adequacy decisions. Standard Contractual Clauses used where required.

7. Data Retention

8. Your Data Subject Rights

Under GDPR Articles 15-22, you have:

• Access: Request confirmation of processing and obtain copy of your data
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion in certain circumstances ("right to be forgotten")
• Restriction: Request limitation of processing in specific situations
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for processing based on consent

9. Cookies and Tracking Technologies

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Used to understand user behavior (consent required)
• Marketing Cookies: Used for targeted advertising (consent required)

You can manage cookie preferences through our cookie banner or browser settings.

10. Data Security

We implement comprehensive security practices to protect your data, following GDPR requirements and Swiss data protection standards.

• End-to-end encryption for data at rest and in transit
• Multi-factor authentication for all accounts
• Regular security monitoring and updates
• Access controls and role-based permissions
• Microsoft Azure infrastructure with enterprise-grade security features
• Geographic data residency options (EU regions for EU customers, US regions for SMB customers)

11. Contact Information

Data Protection Officer:
Email: dpo@valuespace.ai
Address: ValueSpace, Zurich, Switzerland

General Privacy Inquiries:
Email: privacy@valuespace.ai

Supervisory Authorities:
Swiss Federal Data Protection and Information Commissioner (FDPIC)
EU Data Protection Authorities (depending on location)

12. Changes to This Policy

We may update this policy to reflect changes in our services or legal requirements. Material changes will be communicated via email or platform notification. Continued use constitutes acceptance.