Draft placeholder — not legal advice. This page is a template pending a registered company. Every bracketed field (like [COMPANY NAME]) needs to be filled in once the entity is formed, and the whole document should be reviewed by a qualified lawyer before it's relied on for real transactions.

Privacy Policy

Last updated: [EFFECTIVE DATE]

This Privacy Policy explains how [COMPANY LEGAL NAME], a company registered in [CANTON, SWITZERLAND] under registration number [UID / COMMERCIAL REGISTER NUMBER], with its registered office at [REGISTERED ADDRESS] ("we", "us", "WristLedger"), collects, uses, and protects information when you use the WristLedger service (the "Service").

1. Who We Are

For the purposes of applicable data protection law (including the Swiss Federal Act on Data Protection and, where relevant, the EU GDPR), we are the data controller for the account information you provide us directly. Where you enter your own clients' information (such as names or budget details in a want-list entry), you act as the data controller for that information and we act as a data processor on your behalf.

2. What We Collect

3. How We Use Your Data

4. AI Processing Disclosure

When you use the listing generator or price suggestion features, the watch details you provide (brand, model, reference, condition, notes, etc.) are sent to Anthropic's API to generate the output. We do not knowingly send client personal data (such as a want-list client's name) to the AI provider as part of these requests. Please avoid including sensitive personal details in fields that feed into AI-generated content.

5. Third-Party Processors

We use the following sub-processors to operate the Service:

Each of these providers processes data under their own privacy terms and may store or process data outside Switzerland/the EEA; where that is the case, we rely on the safeguards each provider offers (such as standard contractual clauses) to ensure an adequate level of protection.

6. Data Retention

We retain your account and inventory data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal or accounting purposes.

7. Data Security

We rely on our infrastructure providers' security controls (encryption in transit and at rest, access controls, row-level security on the database) to protect your data. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [PRIVACY CONTACT EMAIL]. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

9. Children's Privacy

The Service is intended for business use by adults operating as watch dealers and is not directed at children. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect.

11. Contact

Questions about this Privacy Policy or requests regarding your data can be sent to [PRIVACY CONTACT EMAIL].