Privacy Policy

1. Who we are
This Privacy Notice explains how Resilens AG (“Resilens”, “we”, “us”) processes personal data in connection with our website, demos, trials, platform, and related services.

Controller
Resilens AG
Wunderlistrasse 45
8037 Zürich
Switzerland
privacy@resilens.com

This notice describes our current processing of personal data. As our product, services, and internal processes evolve, we may update this notice accordingly.

We seek to process personal data lawfully, transparently, and proportionately under the Swiss Federal Act on Data Protection (“FADP”).

3. What personal data we process
Depending on the context, we may process the following categories of personal data:

• Business contact and account data, such as name, business email address, organisation, role, and account credentials

• Communications data, such as emails, meeting notes, demo requests, support requests, and other correspondence

• Onboarding and customer workspace data, such as information provided during onboarding, configuration inputs, survey responses, uploaded files, comments, and other content submitted through the platform

• Technical and usage data, such as login events, system logs, browser or device information, and security-related metadata

Some information processed in our platform, such as building, site, climate, hazard, or geospatial data, is not necessarily personal data. We treat such information as personal data where it relates to an identified or identifiable individual.

We do not intend to process sensitive personal data unless this is specifically required, appropriate safeguards are in place, and there is a valid legal basis to do so.

4. Why we process personal data
We may process personal data for the following purposes:

• to respond to enquiries, demo requests, and trial requests

• to set up and manage customer accounts, workspaces, and access rights

• to provide and support our platform and related services

• to process customer-submitted content and inputs within the platform

• to communicate with users, customers, and prospective customers

• to maintain the security, availability, and integrity of our website and platform

• to troubleshoot, prevent misuse, and respond to incidents

• to comply with legal, regulatory, accounting, and contractual obligations

5. Sharing of personal data
We may share personal data with service providers and processors where reasonably necessary to operate our website, platform, and business. Depending on the setup, this may include providers for:

• hosting and cloud infrastructure

• customer relationship management

• support and communications

• analytics or technical performance monitoring

• authentication and email delivery

• legal, accounting, or other professional support

We expect such providers to process personal data only for agreed purposes and under appropriate confidentiality and security obligations.

We may also disclose personal data where required by law or where necessary to establish, exercise, or defend legal claims.

6. International transfers
Personal data may be processed in Switzerland, the EU/EEA, or in other countries depending on the service providers we use.

Where personal data is transferred to a country that does not provide an adequate level of protection under applicable law, we seek to implement appropriate safeguards, such as contractual protections where required.

7. Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this notice, for the duration of the relevant business or contractual relationship, and for any applicable statutory retention periods.

After that, personal data is deleted, anonymised, or retained only where further retention is legally required or justified.

8. Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No system can guarantee absolute security, but we seek to apply reasonable safeguards appropriate to our size, stage, and risk profile.

9. Data protection rights
Subject to applicable law, individuals may have rights including the right to:

• request access to personal data

• request correction of inaccurate personal data

• request deletion of personal data

• request restriction of processing

• object to certain processing

• withdraw consent where processing is based on consent

• request data portability where applicable

Requests can be sent to: privacy@resilens.com

Where we process personal data on behalf of a customer, we may need to refer the request to the relevant customer or coordinate with them, depending on the circumstances.