Privacy Policy

This privacy notice explains how personal data is processed in the UNITE Beta Portal (the “Portal”). It supplements Digital Leadership AG's general privacy policy and applies solely to this Portal.

1. Controller

Digital Leadership AG, Hauptstraße 21a, 8280 Kreuzlingen, Switzerland.

Data-protection contact: info@digitalleadership.com, phone +41 (0) 44 562 42 24.

2. Scope and applicable law

We process personal data under the Swiss Data Protection Act (revFADP, in force since 1 September 2023) and, where applicable, the EU General Data Protection Regulation (GDPR). This notice covers only the Beta Portal, not the digitalleadership.com website.

3. Data we process

As part of beta participation we process:

• Account data: email address, name, company, role, country and language.
• Phone verification: phone number and verification status (if you provide it; skippable).
• Device and licence data: device identifier (machine ID), activation token and last-seen timestamp — to protect beta access.
• Usage/telemetry data: aggregated usage events and session counts — only with your explicit consent (off by default); never project content.
• Log data: technical server logs (e.g. timestamp, IP address) and an audit log of administrative actions.

4. Purposes and legal bases

• Providing the Portal and beta access — performance of a contract (Art. 6(1)(b) GDPR).
• Phone verification and telemetry — consent (Art. 6(1)(a) GDPR); revocable at any time.
• Abuse, licence and fraud prevention, device binding and the audit log — legitimate interest (Art. 6(1)(f) GDPR) or legal obligation (lit. c).

5. Processors we use

We use carefully selected processors; all process data in the EU or Switzerland:

• Supabase — authentication and database (EU region, Frankfurt).
• Resend — sending of transactional emails (EU).
• PostHog — product telemetry, self-hosted in the EU (posthog.digitalleadership.de); only with consent.
• seven.io — sending SMS codes for phone verification (Germany).
• MinIO (on Hostinger infrastructure) — storage of file objects and app releases.

6. International disclosure

By default, no transfer to countries outside the EU/EEA or Switzerland takes place. Should a processor change, we base any transfer on an adequacy decision or appropriate safeguards (e.g. EU Standard Contractual Clauses).

7. Retention

• Account data: until the end of the beta or your deletion request.
• Audit log: in line with statutory retention obligations.
• Telemetry: aggregated only and only with consent; withdrawal stops further collection.

8. Your rights

Subject to applicable law, you have the right to:

• access the data we process,
• rectification of inaccurate data,
• erasure,
• restriction of processing,
• data portability,
• object to processing,
• withdraw consent given (with effect for the future),
• lodge a complaint with a supervisory authority (Switzerland: FDPIC; EU: your competent data-protection authority).

9. Contact

To exercise your rights or for privacy questions: info@digitalleadership.com.