Privacy Notice

Blindsight Technologies AG, Rennweg 57, 8001 Zürich, Switzerland, is responsible for the processing described here.
Privacy contact: info@blindsight.io. Full company details: Imprint.

Demo, trial and download requests. Name, work email, company, and anything else you enter (role, company size, use case, deployment preference, message), the time you submitted it, and the version of the Evaluation Terms you accepted.

Job applications. Name, email, the role you apply for, your message, and your CV with whatever it contains. Please do not include sensitive data (such as health information or religious beliefs) that is not needed to assess your application.

Spam protection. When a form is on screen, Google reCAPTCHA checks that submissions come from a person, using technical signals from your browser and device (such as IP address, browser characteristics and interaction with the page), and may set a cookie for this purpose. It loads only on pages with a form, and its data is used only to protect our forms.

Server logs. Our hosting provider records technical access data (IP address, browser, requested URL, referrer, time) to deliver the site and protect it against abuse.

Cookies and analytics. Only with your consent, we use Google Analytics to understand how the site is used (pages visited, time on page, approximate location, device type, and whether a form was sent). IP addresses are truncated, Google signals and advertising features are disabled, and we do not send form contents to Google. Your consent choice itself is stored by Cookiebot. See section 6.

We process personal data only for the purposes below. Where the GDPR applies, the legal basis is:

• Answering requests and running evaluations: steps at your request before a contract and performance of the Evaluation Terms (Art. 6(1)(b) GDPR), and our legitimate interest in answering business enquiries (Art. 6(1)(f)).
• Handling job applications: steps before an employment contract (Art. 6(1)(b), and Art. 88 GDPR with applicable employment law).
• Analytics: your consent (Art. 6(1)(a) GDPR, and Art. 5(3) of the ePrivacy Directive as implemented in your country). You can withdraw it at any time, with effect for the future.
• Security, spam protection and server logs: our legitimate interest in keeping the site and our forms secure (Art. 6(1)(f)).
• Recording consent choices: our legal obligation to demonstrate consent (Art. 6(1)(c) and Art. 7(1) GDPR).

Under the Swiss FADP we process data in line with its principles and rely on the corresponding justifications. We do not use your data for automated decisions that have legal or similarly significant effects on you, and we do not sell it.

These providers process data on our behalf under data processing agreements, and only as we instruct:

• Netlify, Inc. (USA): website hosting and server logs.
• Microsoft Ireland Operations Limited (Ireland): Microsoft 365 mailboxes and Microsoft Dataverse, where form submissions are stored, in data centres in Switzerland or the EU.
• Atlassian (Atlassian Pty Ltd, Australia, and Atlassian US, Inc., USA): Jira, where we track follow-up on requests and applications.
• Resend, Inc. (USA): delivery of notification emails about form submissions.
• Google Ireland Limited (Ireland), with Google LLC (USA): reCAPTCHA spam protection on our forms.
• Usercentrics A/S (Denmark): Cookiebot consent management.
• Google Ireland Limited (Ireland), with Google LLC (USA): Google Analytics, only with your consent.

Beyond these providers, we share personal data only where the law requires it.

Some providers above process data in the USA or Australia. Transfers to US companies certified under the EU–U.S. Data Privacy Framework, its UK extension and the Swiss–U.S. Data Privacy Framework rely on those frameworks. Otherwise, and in addition where appropriate, they rely on the European Commission's Standard Contractual Clauses, as adapted for Switzerland and the UK. You can ask us for a copy of the safeguards at the contact above.

Strictly necessary cookies (such as the one storing your consent choice) are always on. Statistics cookies (Google Analytics) are set only after you accept them in our cookie banner. We use no marketing or advertising cookies. We honour the Global Privacy Control (GPC) browser signal as an opt-out of analytics.

You can change or withdraw your consent at any time via Cookie settings (also in the site footer). The full, current list of cookies follows.

• Demo, trial and download requests: 24 months after our last contact, unless we enter into a contract.
• Job applications: until the role is filled, then deleted within 6 months of an unsuccessful outcome, unless you agree to a longer period.
• Notification emails: deleted on the same schedule as the underlying request.
• Analytics data: 14 months.
• Consent records: 12 months, after which we ask again.
• Server logs: kept only as long as needed for security and operations, typically no more than 30 days.

Depending on the law that applies to you, you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing (including at any time to processing based on legitimate interests), to data portability, and to withdraw consent at any time without affecting the lawfulness of processing before the withdrawal.

To exercise these rights, write to info@blindsight.io. We may need to verify your identity. We respond within one month (GDPR) or 30 days (FADP), and tell you if we need longer as the law allows.

This section applies to residents of US states with consumer privacy laws, such as the California Consumer Privacy Act as amended by the CPRA, to the extent those laws apply to us.

What we collect, and why. In the last 12 months we collected: identifiers (name, email address, IP address); professional or employment-related information (company, role, and for applicants their CV); internet or other electronic network activity (pages visited and interactions, only with consent); and approximate geolocation derived from IP address. We collect it directly from you and from your browser, for the purposes in section 3, and keep it for the periods in section 7. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

No sale or sharing. We do not sell personal information, and we do not share it for cross-context behavioral advertising, and have not done so in the last 12 months. We do not knowingly collect personal information from anyone under 16. We disclose personal information for business purposes only to the service providers in section 4.

Your rights. You may request to know what personal information we collected, used and disclosed, and to access, correct or delete it. You may also opt out of analytics at any time through Cookie settings or a GPC signal. To make a request, email info@blindsight.io. We will verify your request by matching the information you give us with what we hold. You may use an authorized agent, who must provide proof of your authorization. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision.

We protect personal data with appropriate technical and organisational measures, including encryption in transit, access control on a need-to-know basis, and processors bound by confidentiality and security obligations.

Switzerland: Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.

EU/EEA and UK: the supervisory authority in your country of residence or work, or where an alleged infringement took place.

California: the California Privacy Protection Agency, cppa.ca.gov.

We would appreciate the chance to address your concern first.

We update this notice when our practices or the law change. The current version is always at this address. Where a change requires your consent, we will ask for it.

Last updated: 28 September 2026