Privacy Policy

This Privacy Policy explains how Ageospatial Sàrl (“Ageospatial”, “we”, “us”) processes personal data when you access our websites, applications, APIs and services (the “Services”), including the GeoForge platform. It is consistent with our Terms of Service (also called the General Terms & Conditions / Conditions générales de vente in Switzerland) and reflects the Swiss Federal Act on Data Protection (FADP).

1. Roles & Scope

1.1 Controller vs. processor. We act as controller for website, account, billing and usage data. When you (or your organisation) ingest data into GeoForge, we typically act as processor and process that Customer Data on your documented instructions (see the Data Processing Agreement – DPA – referenced in the Terms).

1.2 Audience. This policy targets users in Switzerland. If you operate from the EU/EEA or other regions, we provide additional information as needed upon request.

2. Categories of Personal Data

We process only the data necessary for the purposes below:

• Account & billing data: name, organisation, email, phone, postal address, plan details, payment identifiers (processed by payment providers), VAT/IDE.
• Service & usage data: technical logs, IP address, device/browser, timestamps, product interactions, configuration, error reports.
• Support & correspondence: messages, attachments, ticket history.
• Customer Data (within GeoForge): geospatial layers, attributes and files you upload or create; prompts entered into AI/LLM features; metadata (project, layer, style).
• Marketing preferences: newsletter opt‑ins/outs and related events.

3. Sources of Data

• Directly from you (account creation, checkout, support, in‑product actions).
• Automatically via our Services (cookies, logs, telemetry).
• From your organisation's administrators (workspace setup, seat management).
• From service providers (e.g., payment processors confirming a transaction).

4. Purposes of Processing

We use personal data to:

• Provide and operate the Services (account setup, authentication, routing, storage, rendering and query processing).
• Secure and maintain the Services (monitoring, incident response, abuse prevention, audits).
• Support you (answer requests, troubleshoot).
• Bill and collect fees; maintain accounting records.
• Improve features and quality (product analytics, debugging).
• Communicate important notices and—if you opt in—product updates and marketing.
• Comply with law and enforce our Terms.

5. Legal Grounds (incl. for EU/EEA users)

Under Swiss law we process data in line with necessity and proportionality. Where EU/EEA rules apply, our legal grounds are: performance of a contract, legitimate interests (e.g., service security, improvement), consent (for certain marketing or optional analytics), and legal obligations (e.g., retention).

6. Cookies & Similar Technologies

We use necessary cookies to run the site and optional analytics to improve it. You can manage preferences via your browser or in‑product settings where available. Blocking some cookies may impact functionality. See our Cookies notice (if provided) for details.

7. AI/LLM Features

GeoForge may use AI features to assist with geospatial analysis. We and carefully selected sub‑processors may process prompts and Customer Data to deliver AI outputs solely to provide and maintain the Services. We do not allow Customer Data to be used to train third‑party foundation models without your explicit consent. For sensitive use cases, you can disable AI features at workspace level.

8. Sharing & Recipients

We do not sell personal data. We share it only with:

• Service providers/sub‑processors (cloud hosting, payment processing, analytics, AI infrastructure, email delivery, support tooling) bound by contracts and confidentiality.
• Your organisation admins (if you use an organisation workspace).
• Third‑party data licensors when needed to fulfil a request that relies on their platforms, under their terms.
• Authorities when required by law or to protect rights, safety or the Service.

A current list of main sub‑processors is available on request or on our website.

9. International Transfers

We may process data in Switzerland, the EEA or other countries offering adequate protection, or, where needed, under appropriate safeguards (e.g., standard contractual clauses recognised under Swiss law). We assess transfer tools and implement supplementary measures where appropriate.

10. Retention

We keep personal data only as long as necessary for the purposes above or as required by law. Accounting records are generally retained for 10 years. Backups are purged on a rolling schedule. When data is no longer needed, we delete or anonymise it.

11. Security

We apply technical and organisational measures appropriate to risk, including logical separation, access controls, encryption in transit and at rest where applicable, monitoring and logging, and supplier due diligence. No system can be perfectly secure, but we continuously improve our controls.

12. Your Rights

Under the FADP you can request: access, rectification, erasure, objection, portability (where applicable) and information about automated decisions. We will respond within 30 days. Disproportionate requests may incur a fee (up to CHF 300) as permitted by law. We may limit or defer disclosure if overriding interests so require, and will inform you of the reasons when we do so.

How to exercise your rights. Email contact@ageospatial.com (preferred), or write to our postal address. We may request information to verify your identity and protect your data. You also have the right to contact the Federal Data Protection and Information Commissioner (FDPIC).

13. Children

Our Services are not directed to individuals under 18. If you believe a minor provided data to us, contact us to request deletion.

14. Third‑Party Services & Links

Our Services may link to or integrate third‑party services (e.g., basemaps, analytics, payment, AI infrastructure). Their processing is governed by their policies. Please review their notices.

15. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified in‑product and/or by email before they take effect. We archive prior versions.

16. Contact

Ageospatial Sàrl (CHE‑387.728.565 TVA)

Office: EPFL Innovation Park, Bldg. C – La Forge, 1015 Lausanne (VD), Switzerland

Email: contact@ageospatial.com

Registered address available upon request via email.