Legal
Privacy Policy
Last updated: 31 July 2026. What we process, why, where it lives, and what you can ask of us.
Concierca ("we", "us") is operated by Concierca AI, a company in formation, Zurich, Switzerland. This policy explains what personal data we process when you visit concierca.ch or use the Concierca platform, why we process it, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and, for customers in Switzerland, the Swiss Federal Act on Data Protection (FADP).
1. Who is responsible
Concierca AI, company in formation, Zurich, Switzerland. Contact: privacy@concierca.ch. Data is stored in Switzerland, see section 4.
2. What we process
Website visitors. Technical data your browser sends (IP address, browser type, pages visited, time). We use it to run the site and to understand which pages are read. If you fill in the contact form we process the details you enter (name, e-mail, company, message).
Platform users. Account data (name, work e-mail, role, company), login and session data, and the content you or your team put into the platform: documents, rules, strategy notes, messages, connected-app data you choose to link (for example your storefront, inbox or spreadsheets), and the outputs the system produces for you.
Watch Market Intelligence (WMI). WMI is built from publicly available market information about watch brands and their distribution, aggregated and analysed. It is used to answer market questions. We do not sell, license or hand out lists of third-party contacts.
3. Why we process it and on what basis
To provide the platform you or your company signed up for (contract). To keep the service secure, to log actions and approvals, and to prevent abuse (legitimate interest, security). To answer your enquiries (contract preparation, legitimate interest). To improve the product using aggregated, non-identifying usage data (legitimate interest). Where the law requires consent, we ask for it and you can withdraw it at any time.
4. Where your data lives
Your platform data is stored in Switzerland, in the Zurich region of our database provider. Every customer is a separate tenant. Data of one brand is isolated from every other brand at the database level. Some processing (for example sending an e-mail you approved, or running a model request) may involve providers outside Switzerland; see section 6.
5. AI processing and model training
The platform uses large language models to draft, analyse and propose. Your data is sent to model providers only to process your requests. We do not use your data to train our own models, and we do not allow model providers to train on it. We route model requests through providers whose terms exclude training on API data. Outputs are proposals until a person in your company approves them; actions that send mail, spend money or are otherwise hard to reverse wait for that approval.
6. Service providers (processors)
We use the following categories of providers under data processing agreements: database and storage (Supabase, Zurich region); authentication (Clerk); background job execution (Trigger.dev); model routing (OpenRouter and the model providers reachable through it); website hosting (Framer); e-mail and messaging channels you connect (for example Gmail, Telegram) at your instruction. A current list with locations is available on request. Where a provider is outside Switzerland or the EU/EEA, we rely on adequacy decisions or standard contractual clauses.
7. How long we keep it
Account and platform data for as long as your company uses the service and for a limited period afterwards to allow export and to meet legal obligations. Logs and approval records for as long as needed to demonstrate what the system did and who approved it. You can request deletion at any time; we delete or anonymise unless a legal duty requires retention.
8. Your rights
You can ask for access, correction, deletion, restriction, and a copy of your data in a portable format. You can object to processing based on legitimate interest and withdraw consent. Write to privacy@concierca.ch. You may also complain to the supervisory authority at our registered seat, to your local EU authority, or, in Switzerland, to the Federal Data Protection and Information Commissioner (FDPIC).
9. Export
Your company can export its platform data at any time. Ask us and we provide it in a machine-readable format.
10. Cookies
The website uses only technically necessary cookies and, if enabled, privacy-friendly analytics. The platform uses session cookies for login. You can block cookies in your browser; the platform may then not work.
11. Children
The service is for businesses and not directed at people under 18.
12. Changes
We update this policy when the service changes. The date at the top tells you when. Material changes to how we handle platform data are announced to account holders.
