Privacy policy

Short version: we collect as little as we can. We use your email to send what you asked for and to answer you. We use two analytics tools to see how the site is used. We do not sell data, and we do not use your data for advertising.

1. Who is responsible

Write to this address for any question about your data or to use your rights.

2. What this policy covers

This policy covers flowspex.com, the Intel weekly brief, the FlowSpex Watch alert and the waitlists. It is written under the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to you, for example because you visit from the EU, the GDPR sections apply as well.

3. What we collect and why

When you visit the site

Our hosting and network providers record technical data on every visit: IP address, date and time, page visited, referring page, browser and operating system. We need this to deliver the site and keep it secure. These logs are kept by the providers for a short time and are not used to identify you.

Analytics

We use Google Analytics and Microsoft Clarity to understand which pages are read and where visitors get stuck. Google Analytics counts visits, pages and rough location. Clarity records how a page is used (clicks, scrolling, mouse movement) and can replay a visit as a recording; by default it hides text you type into form fields. Both use cookies. See the cookie policy for the cookies, how long they last and how to block them.

Waitlist and early access

When you join the FlowSpex waitlist we collect your name, email address, company and anything you write in the form. We use it to contact you when access opens and to understand who needs the software.

Intel weekly brief

When you subscribe we collect your email address and send you the weekly brief. You can stop it at any time: reply to any brief or write to hello@flowspex.com.

FlowSpex Watch

When you join the Watch waitlist we collect your email address, company, what you ship, where it goes and, if you give it, the licence you use. When Watch runs for you, we use this profile to match rule changes and sanctions listings to you and to send you the alert. Names of your customers and partners are asked for by email only, never through a web form. They are used only to screen them against official lists for you.

When you email us

We use your message and contact details to answer you and to keep a record of the conversation.

LinkedIn

We link to our LinkedIn page. LinkedIn content is not embedded on this site. If you click the link, LinkedIn's own privacy policy applies.

4. Legal bases (GDPR)

If the GDPR applies to you, we rely on:

• Consent (Art. 6(1)(a)) for the weekly brief and Watch alerts. You can withdraw it at any time.
• Steps before a contract (Art. 6(1)(b)) for the waitlist and early-access requests.
• Legitimate interests (Art. 6(1)(f)) for running and securing the site, analytics, answering emails, and screening partner names you send us.

Under Swiss law, processing is lawful when it follows the principles of the FADP. Where we need a justification, it is your consent or our legitimate interest as described above.

5. Who we share data with

We do not sell your data. We share it only with service providers who process it on our behalf:

We may also disclose data where the law requires it.

6. Data sent abroad

Some providers above process data in the United States and other countries. Where a country does not have data protection recognised as adequate by the Swiss Federal Council or the European Commission, we rely on the Swiss-U.S. or EU-U.S. Data Privacy Framework, where the provider is certified, or on standard contractual clauses.

7. How long we keep it

• Waitlist and early-access data: until the software launches and up to 12 months after, unless you become a customer or ask us to delete it sooner.
• Brief and Watch subscriptions: until you unsubscribe.
• Emails: as long as needed to deal with the matter, and longer where commercial or tax law requires us to keep business records.
• Analytics: Google Analytics keeps visit-level data for 2 to 14 months, depending on its settings. Microsoft states that Clarity keeps recordings for 30 days and summary data for up to 13 months.

8. Your rights

You can ask us to tell you what data we hold about you, to correct it, to delete it, or to hand it over in a common format. You can object to processing and withdraw consent at any time. Write to hello@flowspex.com. We will answer within 30 days.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch. If you are in the EU or EEA, you can also complain to the data protection authority in your country.

9. Security

The site runs only over encrypted connections (HTTPS). Access to the accounts that hold your data is limited to the FlowSpex team.

10. Changes

We update this policy when what we do changes. The date at the top shows the latest version.