Privacy Policy

This Privacy Policy governs how Swiss Trust Layer AG processes Personal Data when providing its web service for copyright-related functions, including registration of records, evidence preservation, account management, communications, and customer support.

For the purposes of applicable data protection laws, Swiss Trust Layer AG is the controller of Personal Data processed in connection with the Service, unless expressly stated otherwise (for example, where Swiss Trust Layer AG acts as a processor for an organisational customer under a separate data processing agreement).

Privacy contact: privacy@swisstrustlayer.com

Controller: Swiss Trust Layer AG, Dorfstrasse 2d, 8835 Feusisberg, Switzerland

Swiss Trust Layer AG processes Personal Data in accordance with the Swiss Federal Act on Data Protection (FADP) and its ordinances, and where applicable, the EU General Data Protection Regulation (GDPR) for individuals located in the European Economic Area and the United Kingdom.

Where international transfers of Personal Data occur, Swiss Trust Layer AG applies appropriate safeguards as described in Section VIII.

• Personal Data: Any information relating to an identified or identifiable natural person.
• Processing: Any operation performed on Personal Data, such as collection, storage, use, disclosure, or deletion.
• Service: The Swiss Trust Layer web service and related features, including interfaces, APIs, and support channels.
• User: Any individual using the Service, including visitors, account holders, and authorised representatives of organisations.
• Copyright Content: Works, files, text, images, audio, video, source code, metadata, or other material uploaded or submitted in connection with copyright evidence, registration records, timestamping, hashing, or proof-of-authorship functions.

IV.A Account and Identity Data

Name or pseudonym, username, email address, password (stored in hashed form), organisation name (if applicable), and account preferences.

IV.B Contact and Communications Data

Messages you send to Swiss Trust Layer AG, support tickets, email correspondence, and feedback.

IV.C Transaction and Subscription Data

Billing contact details, invoicing address, payment status, and subscription tier. Payment card data is processed by payment service providers and not stored by Swiss Trust Layer AG except for limited tokens or references provided by the payment provider.

IV.D Copyright Evidence and Record Data

Identifiers you provide (title, author name, publication date), declarations of authorship, licensing statements, and evidence-related metadata (timestamps, hash values, fingerprints, and verification data). Depending on what you submit, this may include Personal Data contained in your Copyright Content.

IV.E Technical and Usage Data

IP address, device identifiers, browser type, operating system, timestamps, referring URLs, pages viewed, feature usage, logs, and security events.

IV.F Compliance and Legal Data

Records of consents, objections, requests, disputes, and legally relevant correspondence.

• Directly from you when you create an account, use the Service, upload or submit Copyright Content, contact support, or otherwise interact with Swiss Trust Layer AG.
• Automatically through cookies and similar technologies, server logs, and security tooling when you access the Service.
• From third parties where applicable, such as payment providers, identity verification providers, hosting providers, analytics providers, and organisational customers who authorise you to use the Service.

• Service provision and contract performance: creating and administering accounts, providing Service features (including copyright evidence functions), operating APIs, and delivering requested functionalities.
• Security and fraud prevention: protecting the Service, Users, and third parties; detecting and preventing abuse; managing authentication; maintaining integrity of evidence records.
• Evidence preservation and verification: generating, storing, validating, and presenting evidence artefacts (timestamps, hashes, and related metadata) in connection with copyright claims.
• Customer support and communications: responding to enquiries, providing technical assistance, sending operational notices.
• Legal compliance: complying with applicable laws, lawful requests, court orders; establishing, exercising, or defending legal claims.
• Service improvement: troubleshooting, quality assurance, feature usage analysis, performance improvement.
• Marketing (where permitted): only where you have consented or where otherwise permitted by applicable law, with opt-out mechanisms.

Legal bases under FADP: lawful processing principles and proportionality. Where GDPR applies: performance of a contract, legitimate interests, compliance with legal obligations, and consent where required.

Swiss Trust Layer AG does not sell Personal Data.

• Service providers (processors): hosting, storage, content delivery, security monitoring, analytics, customer support tools, email delivery, and payment processing, all under contractual confidentiality and data protection obligations.
• Organisational customers: where you use the Service under an organisation's account, certain data may be accessible to authorised administrators of that organisation.
• Legal and safety disclosures: where required by law, regulation, legal process, or enforceable governmental request, or where necessary to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, reorganisation, financing, or sale of assets, subject to appropriate confidentiality and continued protection.

Swiss Trust Layer AG may process and store Personal Data in Switzerland and in other countries where Swiss Trust Layer AG or its service providers maintain facilities.

Where Personal Data is transferred outside Switzerland or the EEA/UK, Swiss Trust Layer AG implements appropriate safeguards, such as recognised adequacy decisions, standard contractual clauses, and additional technical and organisational measures when required.

Swiss Trust Layer AG retains Personal Data only as long as necessary for the purposes described in this Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Evidence records and associated metadata may be retained for extended periods to preserve the integrity and usefulness of copyright-related proofs, subject to applicable law, contractual terms, and your account settings or deletion requests where feasible.

Where deletion is requested, Swiss Trust Layer AG may retain limited data where required for compliance, security, fraud prevention, backup integrity, or legal claims, and will restrict access to such retained data.

Swiss Trust Layer AG implements technical and organisational measures appropriate to the risk, which may include encryption in transit (TLS), access controls, least-privilege principles, logging and monitoring, secure development practices, and incident response procedures.

No method of transmission or storage is completely secure. Users are responsible for maintaining the confidentiality of their credentials and for using strong authentication where available.

Swiss Trust Layer AG uses cookies and similar technologies for essential functionality (authentication and session management), security, preferences, and performance measurement.

Where required by applicable law, Swiss Trust Layer AG will provide cookie consent choices and a method to manage non-essential cookies. You can also control cookies through browser settings; disabling certain cookies may affect Service functionality.

Swiss Trust Layer AG may use automated tools to detect fraud, abuse, or security threats (for example, unusual login patterns).

Swiss Trust Layer AG does not conduct automated decision-making that produces legal or similarly significant effects on you, unless expressly disclosed in the Service and permitted by applicable law.

Depending on your location and applicable law, you may have rights including: access to your Personal Data; correction; deletion; restriction or objection to processing; data portability; and withdrawal of consent where processing is based on consent.

To exercise your rights, contact Swiss Trust Layer AG at privacy@swisstrustlayer.com. Swiss Trust Layer AG may request information to verify your identity.

You may opt out of marketing communications at any time via the unsubscribe mechanism provided in such communications or through account settings where available.

Complaints: in Switzerland, the relevant authority is the Federal Data Protection and Information Commissioner (FDPIC). Where GDPR applies, you may also complain to your local supervisory authority.

The Service is not directed to children. Swiss Trust Layer AG does not knowingly collect Personal Data from children in violation of applicable law. If you believe a child has provided Personal Data, contact Swiss Trust Layer AG to request deletion.

The Service may integrate with third-party services (for example, payment processors or identity providers) that process Personal Data under their own privacy practices and terms.

Swiss Trust Layer AG may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, or processing practices.

Swiss Trust Layer AG will post the updated Policy within the Service and update the 'Last Updated' date. Where required by law, additional notice will be provided or consent obtained.

This Privacy Policy is governed by Swiss law to the extent permitted by applicable conflict-of-law rules and without prejudice to mandatory consumer or data protection rights that may apply based on your habitual residence.

Where disputes arise that cannot be resolved amicably, the competent courts at the registered seat of Swiss Trust Layer AG (Feusisberg, Switzerland) shall have jurisdiction, unless mandatory law provides otherwise.