Privacy Policy

1. Who we are

thinkerlab GmbH (in formation), Zielstrasse 25, 9050 Appenzell, Switzerland, is the controller for the processing described in this policy. Contact: info@veracite.ch

This policy covers the pre-launch website veracite.ch. When the Veracite service launches, it will be replaced by a full privacy policy covering the service itself.

2. What we process, why, and on what legal basis

Launch notification list: If you sign up to be notified when Veracite launches, we process your e-mail address to send you a confirmation e-mail (double opt-in) and, after that, occasional updates about the launch — we expect a handful of e-mails at most.

For internal notifications about new waitlist registrations, we send the submitted email address, optional name and background, any additional background details, language, signup source and registration time to Slack. This notification is sent at signup, before the email address is confirmed.

Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 6(6) Swiss FADP). You can withdraw it at any time via the unsubscribe link in any e-mail or by writing to info@veracite.ch; withdrawal does not affect the lawfulness of processing before it.

Contact by e-mail: If you write to us, we process your message and address to answer your enquiry.

Legal basis: our legitimate interest in responding to correspondence (Art. 6(1)(f) GDPR).

Server logs: Our hosting provider automatically records technical data when you visit the site (IP address, date and time, browser and operating system, pages requested) to deliver the website, keep it secure and diagnose faults.

Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR). Logs are deleted after 30 days.

3. Cookies and analytics

Strictly necessary: We store settings you choose on this website (such as language or display theme) on your device. This storage is necessary to provide the function you requested and does not require consent.

Analytics: With your consent (Art. 6(1)(a) GDPR), we measure how this website is used with the tracking pixel of Metricool Software, S.L., c/ Téllez 12, Entreplanta H, 28007 Madrid, Spain. Metricool collects information about your visit — such as pages viewed, referrer, approximate location and device and browser information — and may store an identifier on your device for this purpose. If you do not consent, the pixel is not loaded and no analytics data about you is collected. You can make or change your choice at any time via the cookie settings link in the footer. We use no advertising or cross-site tracking technologies.

4. Recipients

We use the following service providers, who process personal data on our behalf and under our instructions:

• Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA — website hosting and server logs
• Supabase Pte. Ltd, 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 — database hosting for the notification list
• Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA — dispatch of confirmation and launch e-mails
• Slack — internal notifications about new waitlist registrations
• Metricool Software, S.L., c/ Téllez 12, Entreplanta H, 28007 Madrid, Spain — web analytics (only with your consent)

We do not sell personal data or share it with anyone else.

5. Transfers outside Switzerland and the EU/EEA

Our service providers are established in the USA (Vercel, Resend), Singapore (Supabase) and Spain (Metricool).

Where a provider offers a choice of storage region, we have selected EU regions; Resend stores data in the USA.

Vercel Inc. is certified under the EU–U.S. and the Swiss–U.S. Data Privacy Framework; in addition, our contract with Vercel incorporates the EU Standard Contractual Clauses as a further safeguard.

Resend is certified under the EU–U.S. Data Privacy Framework; for transfers from Switzerland, our contract with Resend incorporates the EU Standard Contractual Clauses as amended for Swiss law.

Supabase stores the notification list in the EU region we have selected; access from outside the EU and Switzerland is safeguarded by the EU Standard Contractual Clauses with the UK and Swiss addenda, which form part of our contract with Supabase.

Metricool is established in the EU.

Copies of these safeguards are available in the providers’ published data processing agreements or from us on request.

6. Retention

Notification-list addresses are kept until you unsubscribe, and at the latest are deleted shortly after the launch announcements have been sent. Sign-ups that are never confirmed (no click on the confirmation e-mail) are deleted after 30 days. Analytics data is retained by Metricool for as long as we maintain our account with them; you can prevent its collection by declining consent.

7. Your rights

You have the right to access, rectify and delete your personal data, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Write to info@veracite.ch. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU/EEA, with your local supervisory authority.

8. No automated decision-making

We do not use your data for automated decision-making or profiling.

9. Changes

We will update this policy as the website evolves; the current version is always available on this page.