Privacy Policy

Silver Brain AI AG (“Silver Brain AI”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal data we process about you. This Privacy Policy explains what personal data we collect when you visit silverbrain.ai (the “Website”) or interact with us, why we collect it, how we use it, and the rights you have.

This Policy is designed to comply with the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Data controller

The controller responsible for the processing of your personal data is:

For any question about this Policy or the processing of your personal data, please contact us at the address above.

Because we are established in Switzerland and do not maintain an establishment in the EU, we will, where required by Art. 27 GDPR, appoint an EU representative and disclose their contact details on request.

2. Scope of this Policy

This Policy applies to personal data we process:

• when you visit or browse the Website;
• when you contact us through the contact form, by email, or via social media channels linked from the Website;
• when you engage with us as a prospective or existing client in the context of our advisory services.

This Policy does not apply to third-party websites or services that we do not operate, even if they are linked from the Website.

3. Categories of personal data we process

a) Technical and usage data

When you visit the Website, our hosting provider automatically processes technical information required to deliver the Website, such as your IP address, browser type, operating system, referring URL, the pages requested and the time of the request (server log data).

We also use privacy-friendly, cookie-free website analytics that record aggregated information such as pages viewed, referring website, country, and device and browser type. These analytics do not use cookies and do not track you across other websites.

b) Contact form and communication data

When you contact us through the contact form or by email, we process the information you provide: your name, work email address, company, role and the content of your message.

c) Spam-protection data

On the contact page, we use Google reCAPTCHA to protect the contact form against spam and abuse. reCAPTCHA processes information about your device and your interaction with the page (for example IP address, browser information and behavioural signals) and may set cookies. Details are set out in Section 6.

d) Client relationship data

If you or your organisation engage us, we process business contact details, project-related correspondence and any information you choose to share with us in the course of an engagement. Processing for active engagements is governed by the relevant engagement letter or services agreement and, where applicable, a separate data processing agreement.

We do not intentionally collect special categories of personal data (such as data concerning health, religion or political views) through the Website.

4. Purposes and legal bases

We process personal data only where we have a lawful basis to do so. The table below summarises the main purposes and the corresponding legal bases under the GDPR. Equivalent grounds apply under the revFADP.

5. Cookies and local storage

The Website itself sets no analytics or marketing cookies. Our analytics are cookie-free, and our fonts are served from our own domain, so no connection to a font provider is made.

• Cookie notice: when you acknowledge the cookie notice, this choice is stored in your browser’s local storage so the notice is not shown again. It is not transmitted to us.
• Google reCAPTCHA: on the contact page only, reCAPTCHA may set cookies that are necessary to distinguish people from automated programs (see Section 6).

You can block or delete cookies and local storage through your browser settings. Blocking reCAPTCHA may prevent the contact form from working; you can always write to us by email instead.

6. Service providers

We do not sell your personal data. We use the following service providers, which process personal data on our behalf or as independent controllers as described:

Hosting and analytics: Vercel

The Website is hosted by Vercel Inc. (USA), which processes the server log data described in Section 3(a) in order to deliver the Website. We also use Vercel Web Analytics, which measures page views without cookies and without identifying individual visitors.

Contact form: Formspree

Messages sent through the contact form are checked on our server and then forwarded to Formspree, Inc. (USA), which delivers them to us by email and stores them for that purpose.

Spam protection: Google reCAPTCHA

On the contact page we use reCAPTCHA v3, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. reCAPTCHA assesses whether a form submission comes from a person or an automated program. For this purpose, information about your device and your use of the page is transmitted to Google. The processing is based on our legitimate interest in protecting the Website against spam and abuse. Further information is available in Google’s Privacy Policy and Terms of Service.

Email and other recipients

We also share personal data, where necessary, with:

• our email and office software providers, to handle correspondence;
• professional advisers such as lawyers, accountants and auditors;
• competent authorities, courts or regulators, where we are legally required to disclose personal data;
• potential or actual acquirers and their advisers in the context of a sale, merger or reorganisation, subject to appropriate confidentiality safeguards.

Service providers acting as processors are bound by written agreements requiring them to process personal data only on our instructions and with appropriate security and confidentiality safeguards.

7. International data transfers

Some of the providers named above are located in, or may access data from, the United States and other countries outside Switzerland and the European Economic Area, which may not offer a level of data protection equivalent to Swiss or EU law.

Where we transfer personal data to such countries, we rely on appropriate safeguards, in particular:

• the certification of the recipient under the Swiss-U.S. and EU-U.S. Data Privacy Frameworks, where the recipient is certified;
• the European Commission’s Standard Contractual Clauses, with the adjustments required under Swiss law;
• additional technical and organisational measures where needed.

You can request further information about the safeguards in place by contacting us.

8. Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including to meet legal, accounting or reporting requirements. As a general rule:

• Server log data: retained by our hosting provider for a short period for security and operational purposes;
• Analytics data: held only in aggregated form, without identifying individual visitors;
• Contact enquiries and correspondence: retained for the duration of the exchange and for a reasonable period afterwards (typically up to 3 years) to handle follow-up questions;
• Client relationship and project data: retained for the duration of the engagement and afterwards in line with Swiss statutory retention obligations (typically 10 years for contractual and accounting records);
• reCAPTCHA data: processed by Google in accordance with Google’s own retention practices.

When personal data is no longer required, we delete it or irreversibly anonymise it.

9. Your rights

Subject to applicable law, in particular the revFADP and, where applicable, the GDPR, you have the right to:

• access the personal data we hold about you and receive information about how we process it;
• rectification of inaccurate or incomplete personal data;
• erasure of personal data in certain circumstances;
• restriction of processing in certain circumstances;
• object to processing based on our legitimate interests;
• data portability where processing is based on consent or a contract and carried out by automated means;
• withdraw consent at any time with effect for the future, where processing is based on consent;
• not be subject to solely automated decisions that produce legal or similarly significant effects, except where permitted by law.

You can exercise these rights by writing to us at info [at] silverbrain.ai. To protect your privacy, we may need to verify your identity before acting on your request.

You also have the right to lodge a complaint with a competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. In the EEA, you can contact the supervisory authority of the country where you reside, work or where the alleged infringement took place.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure, including access controls, encryption in transit and regular reviews of our service providers. No method of transmission over the internet or electronic storage is fully secure, and we cannot guarantee absolute security.

11. Children

The Website and our services are directed at businesses and professional users. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Third-party links

The Website contains links to third-party websites, such as LinkedIn, Amazon and Silver Brain Quantum. We are not responsible for the content or privacy practices of those websites. Please review their privacy policies when you visit them.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services or applicable law. The “Last updated” date at the top of this Policy indicates when it was most recently revised. Where changes are material, we will take appropriate steps to inform you, for example through a notice on the Website.

14. Contact