Privacy Policy

1. Controller

[Your Legal Business Name] ("BeeLink", "we", "us") is the data controller responsible for processing your personal data in accordance with the Swiss Federal Act on Data Protection (DSG/nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

Contact: privacy@beelink.dev

2. Data We Collect

• Account data: Name, email address, organization name, login credentials
• Usage data: Pages visited, features used, session duration, device type, browser, IP address
• Content data: Documents, vendor information, assessment responses, and notes you create within the platform
• Support data: Messages and attachments sent to our support team
• Payment data: Billing information is collected and processed by our payment provider, Paddle (see Section 6)

3. Purposes and Legal Basis

• Contract performance: Providing and operating the BeeLink platform, processing your subscription
• Legitimate interests: Improving the platform, security monitoring, fraud prevention, aggregated analytics
• Legal obligation: Complying with applicable Swiss and EU regulations, tax requirements
• Consent: Marketing communications (you may withdraw consent at any time)

4. Data Sharing

We share personal data only with:

• Infrastructure providers: Cloud hosting and database services for platform operation
• Paddle: Our Merchant of Record, for subscription management, payment processing, tax compliance, and invoicing
• Professional advisers: Legal and accounting advisers, under confidentiality obligations
• Authorities: When required by law or valid legal process

We do not sell your personal data.

5. Data Hosting and Transfers

Your data is hosted in Switzerland. Where data is transferred outside Switzerland or the EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

6. Payment Processing

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Payment data (credit card details, billing address) is collected and processed directly by Paddle and is not stored on our servers.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain data only as required by law (e.g., 10-year retention for accounting records under Swiss law). Data is then securely deleted or anonymized.

8. Your Rights

Under the DSG and GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict processing
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority

To exercise your rights, contact privacy@beelink.dev. We will respond within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, audit logging, and regular security reviews.

10. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to improve the platform — these are only set with your consent. You can manage cookie preferences in your browser settings.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. Continued use of BeeLink after changes constitutes acceptance.