Privacy policy
Your documents remain bound to their purpose. Disclosure to prospects requires a separate approval.
This English translation is provided for convenience. Only the German version is legally binding.
1. Controller
Contact in the pilot: WERKFORM.ai, Bahnhofstrasse 57, 9320 Arbon, Switzerland, hallo@werkform.ai. The exact legal operating company will be added to the legal notice before the commercial launch. The Swiss Federal Act on Data Protection (FADP) applies and, where territorially and materially applicable, the GDPR.
2. Data and purposes
We process technically necessary connection data, sign-in information (user ID, name, e-mail), engagement master data, uploaded company documents, calculations, review notes, tasks, project communication, e-mail drafts and sending status, evidence for figures and activity logs. The purposes are operation, access protection, handling of the commissioned engagement, traceability and abuse prevention. Please use test documents for as long as the pilot status applies.
3. Legal bases and separate approval
Where the GDPR applies, the relevant legal bases are in particular performance of a contract or pre-contractual steps (Art. 6(1)(b)), legal obligations (point (c)), operational security following a balancing of interests (point (f)) and, for the voluntary prospect approval, separate consent (point (a)). For employee, customer or other third-party data, the applicable legal bases and information obligations must be assessed separately in each case. The company's approval does not constitute consent by these persons.
4. Banks, investors, advisers and buyers
Possible recipients are specifically named banks, investors, business consultants, prospective buyers and other third parties with a justified interest. There is no blanket or public access. Each release designates the recipients with organisation and contact, purpose, document versions, recipient country, term and the signatory's authority. Extensions require a new release. In the pilot, releases and reviews are documented; external access remains technically blocked until independent operational approval.
5. Service providers and AI
Cloudflare Workers, D1 and R2 provide the application, sign-in, structured data and files. The applicable service, data processing and transfer terms as well as the actual storage locations must be completed and contractually reviewed before confidential production use. Exclusive storage in Switzerland is not promised. VALO offers public website excerpts and, in the signed-in project account, a separate, access-protected rule guide. No confidential content is transmitted to external AI services for this project rule guide. E-mail drafts and test runs are stored in the project; test processing does not reach any external recipients. A real sending service must be set up separately and reviewed under data protection law before activation. VALO does not use a language model and sends questions to no external AI service; company files are not sent to a model. No solely automated credit or investment decision.
6. Transfers abroad and disclosure
Before access from abroad, the recipient country, adequacy or appropriate safeguards and supplementary protective measures must be assessed (Art. 16/17 FADP or Chapter V GDPR). A general checkbox does not replace this assessment. The declaration does not cover advertising, publication or disclosure to unnamed recipients. A recipient's own mandatory obligations must be made transparent separately.
7. Storage and deletion
Engagement data is retained for processing; in the pilot, the account holder can delete an engagement including its files and associated data. Deletion currently also removes the engagement-related history and approval records. A binding retention and evidence concept, including statutory periods and backup copies, must be defined before the production launch. No permanent or tamper-proof archiving is claimed.
8. Rights and withdrawal
Depending on the applicable law, you have rights of access, rectification, erasure, restriction, data release/portability and objection. Consent can be withdrawn with effect for the future at any time in the client portal or by e-mail to hallo@werkform.ai. The lawfulness of earlier processing remains unaffected. A withdrawal cannot technically retrieve copies that have already been downloaded. Complaints may be addressed to the FDPIC (EDÖB) or a competent data protection supervisory authority in the EEA.
9. Browser storage and security
The website starts in dark mode each time it is loaded. A manual light/dark selection applies to the currently open page. Two technically necessary cookies are set for sign-in: the sign-in session (maximum 12 hours) and the session for the second factor (maximum 8 hours). No marketing or analytics tools of our own are built in. Sign-in, an additional TOTP factor, engagement separation, time-limited internal roles and download logs are implemented. The second factor uses an encrypted stored key, hashed recovery codes and an HttpOnly session with a lifetime of eight hours. Local text and OCR processing takes place in the browser; stored text and confirmed assignments are filed with history in the engagement. A professional malware scanner, signature validation and independent security acceptance are still outstanding. Do not enter sensitive personal data or unredacted secrets in the public chat.
10. Sources and version
Version: 18.10.2026. FDPIC: duty to inform · FDPIC: transfers abroad · GDPR. This working draft, tailored to the pilot, must be finalised by a lawyer on the basis of actual operations before the commercial launch.