PRIVATE PILOT · DRAFT FOR LEGAL REVIEW

Privacy Policy

Draft · 19 October 2026 · Not yet approved for publication

1. Controller

Ask Evidus is operated by Michel Weiss, Claridenstrasse 29, 8600 Dübendorf, Switzerland. Privacy contact: hello@askevidus.com. Contact address: Claridenstrasse 29, 8600 Dübendorf, Switzerland.

2. Data we may process

When you contact us or request an invitation, we may process your name, email address, message and invitation status. When authentication is activated, we may process account identifiers, sign-in timestamps, session information and security logs. When you use the website, the hosting infrastructure may process IP addresses, device/browser information, request timestamps and technical logs.

3. Purposes

We use information to respond to enquiries, manage invitations and access, operate and secure the website, investigate misuse, maintain reliability and comply with applicable legal obligations. The current draft does not document a live paid checkout. Before subscriptions are activated, this notice must identify the actual payment provider, payment-related data categories, purposes, recipients and retention.

4. Magic links and authentication — planned

A passwordless email sign-in is planned but is not activated by the current login-page preview. Once introduced, an authentication provider and an email-delivery provider may process email addresses, login tokens and related technical information. This notice must be updated with the actual providers, locations and transfers before that functionality goes live.

5. Hosting, analytics and cookies — configuration under review

The website is hosted by Hostpoint (Switzerland), which processes technical request information to deliver and operate the website. Server location, log retention, any subcontractors, and the actual analytics, cookies or tracking technologies must be verified against the deployed configuration. Essential session cookies may be used when login is activated. Non-essential analytics or marketing technologies, if present, require accurate disclosure and any legally required choices.

6. Recipients and international transfers

Information may be shared with service providers only as necessary to operate the service, under appropriate contractual and technical safeguards. The actual providers, countries and any international transfer mechanisms must be documented before publication. We do not sell personal data.

7. Retention

We retain personal data only as long as reasonably necessary for the stated purposes or legal obligations. Invitation records, messages, account records and server logs may have different retention periods. Specific schedules must be confirmed from the implemented systems before publication.

8. Security

We aim to use proportionate access controls, secure connections and limited administrative access. No online service can guarantee absolute security.

9. Your rights

Depending on applicable law, you may request information about your personal data, correction, deletion or other available rights. Contact hello@askevidus.com. We may need to verify your identity and may retain information where legally required.

10. Planned subscriptions and payment processing

A paid subscription service is planned but the payment and billing implementation has not been verified. Before launch, document the payment provider, billing data, transaction records, invoicing and any cross-border transfers, together with the relevant retention periods and applicable rights.

11. Updates

This notice may be revised when services, providers or legal requirements change. A publication date and material-change process will be added for the live version.