Privacy Policy
1. Who we are and what this policy covers
INAIT SA ("Inait", "we", "us") operates the website inait.ai (the "Website"). This policy explains what personal data we collect when you visit the Website, send us a use-case enquiry, contact us by email or subscribe to our newsletter, why we collect it, how long we keep it and what rights you have.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR. For the processing described here, INAIT SA is the controller.
This policy covers the Website only. Where we provide services to a customer under a proof-of-concept, pilot or licence agreement, the processing of data in that context is governed by that agreement and, where required, a separate data processing agreement.
2. Data we collect and why
2.1 Use-case enquiries. When you submit the "Tell us about your use-case" form, we collect your name, company, work email address, a description of your robot and cell, a description of the task, whether you have already tested an automated solution on it, and anything else you choose to write. We use this data to assess whether your task is a fit for a proof of concept, to answer you and to prepare and hold a call with you.
- Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
- Please do not include confidential technical information, trade secrets or personal data of third parties in the form. Where confidential information is needed to assess a task, we will agree a non-disclosure agreement first.
2.2 Newsletter. When you subscribe to our newsletter, we collect your email address and, if you provide it, your name. We use this data to send you updates about Inait a few times a year. We use a double opt-in procedure: your subscription is only activated once you confirm it through the link sent to your email address. We record the time of your subscription and confirmation as evidence of consent.
- Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with immediate effect by using the unsubscribe link in any newsletter or by writing to info@inait.ai. Withdrawal does not affect the lawfulness of processing before withdrawal.
- We may measure whether newsletters are opened and which links are clicked, in aggregate, to understand what is useful to our readers. If you prefer not to be measured, you can disable the loading of images in your email client.
2.3 Email and other direct contact. When you write to us, we process the data you provide (such as your name, email address and the content of your message) to handle your request.
- Legal basis: our legitimate interest in communicating with the people who contact us (Art. 6(1)(f) GDPR) and, where applicable, steps taken at your request prior to a contract (Art. 6(1)(b) GDPR).
2.4 Technical data when you visit the Website. When you visit the Website, our hosting provider automatically records technical information in server logs: your IP address, the date and time of the request, the page requested, the referring page, and your browser type and operating system. We use this data to deliver the Website, to keep it secure, to detect and prevent abuse and to diagnose technical problems.
- Legal basis: our legitimate interest in operating a secure and reliable website (Art. 6(1)(f) GDPR).
3. Cookies and similar technologies
The Website does not use advertising or analytics cookies and does not track you across other websites. We do not use third-party analytics services.
The Website uses your browser's local storage only for strictly necessary, non-personal preferences (for example, remembering a display setting). This information stays in your browser and is not transmitted to us.
Videos on the Website are hosted by us. No third-party video platform is loaded when you view them.
The typefaces used on the Website are served from our own hosting together with the rest of the Website. No third-party font service is loaded when you view a page.
4. Who we share data with
We do not sell personal data and we do not share it for advertising purposes. We share personal data only with the following categories of recipients, and only to the extent necessary:
- Service providers (processors) that act on our instructions under a data processing agreement: our website hosting provider (GitHub, Inc., USA, a subsidiary of Microsoft, which serves the Website through GitHub Pages), our form-handling, email and newsletter provider (HubSpot, Inc., USA), and our business productivity and cloud provider (Microsoft).
- Partners involved in evaluating or delivering a proof of concept, such as a system integrator, but only with your prior agreement and only the information needed for that purpose.
- Authorities and advisers where we are legally required to disclose data, or where disclosure is necessary to establish, exercise or defend legal claims.
5. International transfers
We are based in Switzerland. Some of our service providers process data in the European Economic Area, the United Kingdom or the United States. Where personal data is transferred to a country that does not provide an adequate level of data protection under Swiss or EU law, we rely on appropriate safeguards, in particular the Standard Contractual Clauses adopted by the European Commission together with the Swiss addendum, or the recipient's certification under the EU-U.S. or Swiss-U.S. Data Privacy Framework. You can ask us for a copy of the safeguards at info@inait.ai.
6. How long we keep data
- Use-case enquiries and email correspondence: for the duration of our exchange and for 24 months after our last contact, unless a contract follows, in which case the data becomes part of our contract records and is kept for the retention period required by Swiss law (generally 10 years for business records).
- Newsletter data: until you unsubscribe. After unsubscribing, we keep your email address on a suppression list for as long as necessary to make sure we do not contact you again, and the record of your consent for as long as required to demonstrate compliance.
- Server logs: up to 30 days, unless a longer period is needed to investigate a security incident.
7. Security
We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access controls based on the principle of least privilege, and logging of access to systems holding personal data. Access to enquiry data is limited to the people who need it to respond to you.
8. Your rights
Subject to the conditions set out in applicable law, you have the right to:
- access the personal data we hold about you and receive a copy of it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased;
- restrict the processing of your data;
- receive the data you provided to us in a structured, commonly used, machine-readable format (data portability);
- object to processing based on our legitimate interests, on grounds relating to your particular situation;
- withdraw consent at any time, where processing is based on consent.
To exercise these rights, write to info@inait.ai. We may ask you to verify your identity before responding. We respond within one month, or within the period required by applicable law.
You also have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC). If you are in the EEA or the UK, you may complain to the supervisory authority of your place of residence, place of work or the place of the alleged infringement.
9. Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal effects or similarly significant effects. The assessment of whether a use case is a fit for a proof of concept is made by our engineers.
10. Children
The Website is directed at businesses and is not intended for persons under 16. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy from time to time, for example when we change providers or add features to the Website. We will publish the updated version here and revise the "Last updated" date. Where a change materially affects you, for example a new purpose for processing newsletter data, we will inform you by email where we have your address.