Privacy Policy

Silver Brain AI AG (“Silver Brain,” “we,” “us,” or “our”) operates silverbrainquantum.ch (the “Website”) as Silver Brain Quantum, a specialist practice of Silver Brain AI AG. This Privacy Policy explains what personal data we collect when you visit the Website or contact us, why we collect it, how we use it, and the rights you have.

This Policy is designed to comply with the revised Swiss Federal Act on Data Protection (revFADP / nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

The controller responsible for the processing of your personal data is:

For any question regarding this Policy or the processing of your personal data, please contact us at the email address above.

2. Scope of this Policy

This Policy applies to personal data we process:

• when you visit or browse the Website;
• when you submit the contact form on the Website;
• when you engage with us as a prospective or existing client in the context of our advisory services.

This Policy does not apply to third-party websites or services that we do not operate, even if they are linked from our Website.

3. Categories of Personal Data We Process

a) Technical and usage data (automatically collected)

The Website uses a privacy-oriented, cookieless analytics service to understand aggregate usage (for example, pages viewed and approximate location derived from your IP address). This service does not set tracking cookies and does not build individual visitor profiles.

b) Contact and communication data

When you submit the contact form, we process the information you provide: your name, work email address, institution, and optionally your role and message. The form is transmitted through Formspree, a third-party form-processing provider acting as our processor, solely to enable us to respond to your inquiry.

c) Spam-protection data

We use Google reCAPTCHA to protect the contact form against spam and abuse. reCAPTCHA processes information about your device and your interaction with the page (for example IP address, browser information and behavioural signals) and may set cookies. Details are set out in Section 6.

d) Client relationship data

If your institution engages Silver Brain for advisory services, we process business contact details, project-related correspondence, and any information you choose to share with us in the course of an engagement. Detailed processing for active engagements is governed by the relevant engagement letter or services agreement.

We do not intentionally collect special categories of personal data (such as data concerning health, religion, or political views) through the Website.

4. Purposes and Legal Bases of Processing

We process personal data only where we have a lawful basis to do so:

• operating, securing and maintaining the Website (legitimate interests);
• responding to your inquiries and communications (pre-contractual measures / legitimate interests);
• understanding aggregate Website usage to improve its content (legitimate interests);
• protecting the contact form against spam and abuse with Google reCAPTCHA (legitimate interests);
• managing client relationships and delivering services (performance of a contract);
• complying with legal, accounting and tax obligations (legal obligation).

5. Cookies and local storage

The Website itself sets no analytics or marketing cookies. Our analytics are cookie-free, and our fonts are served from our own domain, so no connection to a font provider is made.

• Cookie notice: when you acknowledge the cookie notice, this choice is stored in your browser’s local storage so the notice is not shown again. It is not transmitted to us.
• Google reCAPTCHA: reCAPTCHA may set cookies that are necessary to distinguish people from automated programs (see Section 6).

You can block or delete cookies and local storage through your browser settings. Blocking reCAPTCHA may prevent the contact form from working; you can always write to us by email instead. Should our use of cookies change, we will update this Policy and, where required by law, request your consent beforehand.

6. Recipients of Personal Data

We do not sell your personal data. We share personal data only where necessary for the purposes described above, with the following recipients:

Hosting and analytics: Vercel

The Website is hosted by Vercel Inc. (USA), which processes server log data in order to deliver the Website. We also use Vercel Web Analytics, which measures page views without cookies and without identifying individual visitors.

Contact form: Formspree

Messages sent through the contact form are checked on our server and then forwarded to Formspree, Inc. (USA), which delivers them to us by email and stores them for that purpose.

Spam protection: Google reCAPTCHA

We use reCAPTCHA v3, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. reCAPTCHA assesses whether a form submission comes from a person or an automated program. For this purpose, information about your device and your use of the page is transmitted to Google. Further information is available in Google’s Privacy Policy and Terms of Service.

Other recipients

• professional advisors such as lawyers and accountants;
• competent authorities, courts or regulators where we are legally required to disclose personal data.

All service providers acting as processors are bound by agreements that require them to process personal data only on our instructions and with appropriate security and confidentiality safeguards.

7. International Data Transfers

Some of our service providers are located outside Switzerland and the European Economic Area. Where we transfer personal data to such countries, we rely on appropriate safeguards, including transfers to countries recognized as providing adequate protection and, where needed, standard contractual clauses.

8. Retention

We retain personal data only for as long as necessary for the purposes described in this Policy. Technical and usage data is retained in aggregate form. reCAPTCHA data is processed by Google in accordance with Google’s own retention practices. Contact and inquiry correspondence is retained for the duration of the exchange and a reasonable period afterwards. Client relationship and project data is retained for the duration of the engagement and afterwards in line with applicable Swiss statutory retention obligations (typically 10 years for contractual and accounting records).

9. Your Rights

Subject to applicable law, you have the right to request access to, rectification of, or erasure of your personal data, to restrict or object to certain processing, to request data portability, and to withdraw consent where processing is based on consent. You may exercise these rights by contacting us at info [at] silverbrain.ai.

If you believe our processing of your personal data infringes applicable law, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland, or with the competent supervisory authority in your place of residence.

10. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. No method of transmission over the internet is fully secure, and we cannot guarantee absolute security.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date above indicates when it was most recently revised.

12. Contact