Privacy policy.

1. Who is responsible

The controller responsible for the processing of personal data described in this policy is Akamena SA, Canton of Vaud, Switzerland (the "controller" within the meaning of the Swiss Federal Act on Data Protection of 25 September 2020, "FADP").

For any question about this policy or your personal data, you can reach us through the contact form on this website.

2. What this policy covers

This policy covers the akamena.com website only. It does not cover the Akamena software platform, which is provided to wealth management firms under separate agreements, including separate data-protection terms.

3. Personal data we process, and why

a) Demo requests. When you submit the "Request a demo" form, we process the information you provide: your name, business email address, LinkedIn profile URL, industry, how you heard about us, whether you used an AI tool to evaluate us, and your optional message. We use this information exclusively to handle your request: to assess it, respond to you, arrange a demonstration and communicate with you about it. Providing this information is voluntary; without it we simply cannot process your request.

b) Form-abuse protection. When you submit the form, we also process a limited amount of technical data for the sole purpose of protecting it from automated abuse: your IP address — used for rate limiting and stored only as a truncated, keyed cryptographic hash (from which the address cannot be read back) for a few hours at most — the time the form took to complete, and a bot-likelihood score provided by Google reCAPTCHA Enterprise (see section 4). None of this data is used for any other purpose.

c) Hosting and log data. This website is served by Firebase Hosting, a service of Google. When you visit the site, Google processes, on our behalf, technical data that your browser transmits — in particular your IP address, browser type, the pages requested and the time of the request. This data is used to deliver the website and to ensure its stability and security, and is retained in server logs only for a limited period.

We do not process any sensitive personal data through this website, and we do not use the data described above for automated individual decision-making or profiling.

4. No cookies, no tracking — one security exception

This website sets no cookies and uses no analytics, advertising or tracking technologies. Fonts and all other resources are served from our own hosting — no third-party content is loaded from font, media or social networks, with a single exception: the request-a-demo page loads Google reCAPTCHA Enterprise, a fraud-prevention service that helps us distinguish genuine requests from automated abuse. reCAPTCHA runs only on that page, may set a cookie strictly for this security purpose, and transmits technical browser data to Google (see sections 6 and 7); the Google Privacy Policy and Terms of Service apply. No advertising or cross-site tracking is involved. Should we later introduce a privacy-respecting audience-measurement tool, we will update this policy before doing so.

5. Legal bases

We process personal data in accordance with the FADP; the processing described above respects the principles of lawfulness, proportionality and purpose limitation (Art. 6 FADP) and does not unlawfully infringe your personality rights. Where the EU General Data Protection Regulation ("GDPR") applies to visitors from the EU/EEA, the legal bases are: for demo requests, steps prior to entering into a contract and our legitimate interest in responding to business enquiries (Art. 6(1)(b) and (f) GDPR); for hosting and log data, our legitimate interest in operating a secure and stable website (Art. 6(1)(f) GDPR).

6. Who receives your data

We do not sell or rent personal data, and we do not share it with third parties for their own marketing. Personal data is disclosed only to:

• Google (Firebase Hosting, Google Cloud and Google Workspace), which as our processor, bound by a data processing agreement, hosts this website and — for demo requests — operates the systems that receive, check and store form submissions (including reCAPTCHA Enterprise, section 4) and through which our team is notified internally of new requests (Google Chat); and
• authorities or courts, where we are legally required to do so.

7. Where your data is processed

Demo-request records are stored in Google Cloud's Zurich region (Switzerland). Hosting infrastructure, reCAPTCHA Enterprise and Google Workspace may additionally involve processing in the European Union and the United States. Transfers to the United States rely on Google's certification under the Swiss–U.S. Data Privacy Framework, which the Swiss Federal Council recognises as ensuring adequate protection (in force since 15 September 2024); in addition, Google's contracts include the European Commission's standard contractual clauses, adapted for Swiss law, as a fallback safeguard.

8. How long we keep it

Demo-request data is kept for as long as needed to handle your request and, at most, for 24 months after our last exchange, unless a business relationship follows or a longer retention is required by law; records in our systems are deleted automatically at the end of this period. Rate-limiting data (section 3b) is deleted within hours. Server log data is retained by our hosting provider for a limited period (typically a few weeks) and then deleted or anonymised.

9. Data security

All traffic to and from this website is encrypted (TLS). We apply the principle of data minimisation — we collect only what the purposes above require — and restrict access to personal data to those who need it to handle your request.

10. Your rights

Under the FADP you may request information about the personal data we process about you (Art. 25 FADP), obtain a copy of data you provided in a commonly used electronic format (Art. 28 FADP), and request that inaccurate data be corrected or that your data be deleted. You may also object to a given processing. If the GDPR applies to you, you additionally have the rights to restriction of processing and to data portability, and the right to lodge a complaint with your local supervisory authority.

To exercise your rights, contact us via the contact form or by post; we may ask you to verify your identity. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern (www.edoeb.admin.ch).

11. Changes to this policy

We may amend this policy from time to time, for example when the website or the law changes. The version published on this page is the version in force; the date above indicates the latest revision.