Privacy Policy

1.Who is responsible

The controller of your personal data is Clashware Sàrl, a limited liability company under Swiss law (UID CHE-178.795.076), Avenue de Jurigoz 15, 1006 Lausanne, Switzerland. We process personal data under the Swiss Federal Act on Data Protection and, where it applies to you, the EU General Data Protection Regulation.

2.The data we collect

• Account: your email address, your name and profile picture if your sign-in provider shares them, and how you sign in.
• Subscription and payments: your plan, its dates and status, your Stripe customer reference and your invoices. Card details are entered on Stripe and never reach us.
• Use of the service: your watchlists, alerts, research requests, credit balance, API keys and settings.
• Language and email choices: the language of your browser, so that our emails reach you in your language, and your email preferences.
• Newsletter: your email address, the language of the form and whether you confirmed the subscription.
• Technical data: IP address, browser and device type, pages requested and error reports, used to run and protect the service.
• Messages: what you write to us and our answers.
• With your consent only: analytics and advertising data collected by the tags listed in our Cookie Policy.

3.Why we use it

• To provide the service: your account, your plan, your watchlists, alerts and research requests. Basis: our contract with you.
• To bill and keep accounts: payments, invoices, refunds and the bookkeeping the law requires. Basis: contract and legal obligation.
• To send service emails: receipts, alerts, trial and renewal reminders, and security messages. Basis: contract.
• To send product emails and the newsletter: account holders get product emails about StrictScore (the weekly digest, tips, and trial and plan offers) unless they turn them off in Settings or with the link in every email. Basis: our legitimate interest. The newsletter for people without an account is sent only after a confirmed sign-up. Basis: consent.
• To protect the service: preventing fraud and abuse, including more than one free trial per person, and keeping the service secure. Basis: our legitimate interest.
• To measure and improve the site and our advertising: only with your consent in the cookie banner. Basis: consent.

4.The providers who process data for us

We share data only with these providers, each for the purpose shown, and with authorities when the law requires it. We do not sell, rent or trade personal data.

5.Transfers abroad

Some of these providers process data outside Switzerland and the European Economic Area, in particular in the United States. We transfer data only to countries with an adequate level of protection, to providers certified under the Swiss-US and EU-US Data Privacy Frameworks, or under standard contractual clauses approved for that purpose.

6.How long we keep it

• Account data is kept while your account exists. When you delete your account, we delete your account, watchlists and alerts at once and cancel the subscriptions billed by us through Stripe. A subscription bought in the iOS app must be cancelled in your Apple account settings; deleting your account does not cancel it.
• Invoices and payment records are kept for 10 years, as Swiss accounting law requires.
• Technical logs are kept no longer than needed to run and protect the service. Web server logs are deleted after 14 days, system logs after 4 weeks, and application logs when newer entries overwrite them (each service keeps at most 50 MB). The service also records errors and events in its own database: the message, the page, your IP address and browser, and sometimes a user ID or an email address. We delete those records after 90 days. A bug report made from an error keeps its message and page, but not your IP address or browser, until we delete it by hand. Error records are not deleted when you delete your account. We delete the records that concern you on request.
• While you are subscribed, we keep your email address, your first name if you gave one, your language and where you signed up. If you unsubscribe, or never confirm your subscription, we keep that record, marked as unsubscribed or unconfirmed and with its dates, so that we never write to you again. We delete it on request.

7.Your rights

You can ask us at any time to:

• tell you what data we hold about you and give you a copy;
• correct data that is wrong;
• delete your data (you can also delete your account yourself in Settings);
• stop or restrict a use of your data, including a use you object to;
• give you your data in a common machine-readable format;
• stop any use of your data that relies on a consent you gave, once you withdraw it, without affecting what was done before.

We answer within 30 days. You can also complain to the Swiss Federal Data Protection and Information Commissioner or, in the EU, to the data protection authority of your country.

8.Marketing emails

Every marketing email and newsletter has a link to unsubscribe in one click. You can also change your email preferences in Settings. Service emails about your account, payments and security are still sent while you have an account.

9.Children

The service is not meant for people under 18. We do not knowingly collect data about them. If you believe a minor has given us data, write to us and we will delete it.

10.Security

We protect personal data with technical and organisational measures: encrypted connections, access limited to the people who need it, and providers chosen for their security. No transmission over the internet is completely secure.

11.Changes to this policy

We may update this policy. The date at the top of this page shows the current version, and we tell you about a material change by email or in the service.

12.Contact

Clashware Sàrl, Avenue de Jurigoz 15, 1006 Lausanne, Switzerland. For questions or requests about your data, write to contact@clashware.com