Privacy Policy

Last updated: 16 October 2026

1. Data Controller

This Privacy Policy describes how GRAPHSIGHT SA (“GraphSight”, “we” or “us”) processes personal data collected through its website, https://graphsight.ai, in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

The data controller is:

GRAPHSIGHT SA
c/o Università della Svizzera italiana
Via La Santa 1, 6962 Viganello
Switzerland

Email: [email protected]

This Privacy Policy applies to the GraphSight website and related inquiries. It does not cover third-party websites linked from our website or data processing governed by separate customer agreements.

2. Personal Data Collected

When you contact us through our website, we may collect your full name, professional email address, company name, country or market, forecast requirements, operational needs, and any additional information you voluntarily provide.

When you browse our website, certain technical data, including IP addresses, browser information and request metadata, may be processed for website operation, security and performance monitoring.

We do not request sensitive personal data through our website forms.

We process personal data for the following purposes:

  • Website operation and security: To ensure the website functions correctly and to protect it against misuse and automated activity.
  • Business inquiries: To respond to contact requests, provide information about our services, prepare quotations and arrange business discussions.
  • Website analytics: To understand aggregated website traffic and improve website performance.
  • Legal obligations: To comply with applicable legal requirements and, where necessary, establish or defend legal claims.

Where the GDPR applies, processing is based on our legitimate interests in operating a secure website and responding to business inquiries (Article 6(1)(f) GDPR), steps requested before entering into a contract where applicable (Article 6(1)(b) GDPR), or compliance with applicable legal obligations (Article 6(1)(c) GDPR).

Our legitimate interests include website security, service improvement and managing professional communications.

Providing personal data through our contact forms is voluntary. However, without the necessary contact details, we may be unable to respond to your inquiry.

4. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Business inquiries and related correspondence are retained according to their relevance to ongoing or potential business relationships, applicable legal obligations and the need to establish or defend legal claims.

Technical information is retained in accordance with the relevant service configurations and applicable retention arrangements.

Personal data is deleted or anonymised when it is no longer required for a legitimate purpose, subject to applicable legal obligations.

5. Data Recipients and International Transfers

We use third-party service providers to operate our website and manage communications, including:

  • Cloudflare, for website hosting, security, protection against automated activity and website analytics.
  • Microsoft 365, for receiving and managing business emails and inquiries.

Personal data may also be disclosed to authorised personnel, professional advisers or competent authorities where necessary and legally permitted.

These providers may process data in Switzerland, the European Economic Area, the United States or other countries where they or their authorised subprocessors operate.

Where required, international transfers are subject to applicable adequacy decisions, contractual safeguards or other mechanisms recognised under Swiss and EU data protection law. Information about relevant safeguards can be requested using the contact details above.

We do not sell personal data or share website inquiry information with third parties for their independent advertising purposes.

6. Cookies and Website Analytics

GraphSight does not currently use advertising cookies or behavioural marketing trackers.

We use Cloudflare Web Analytics, a privacy-focused analytics service that operates without analytics cookies or browser localStorage.

We also use Cloudflare Turnstile to protect website forms against automated submissions. Turnstile processes technical information necessary for security verification. Depending on security settings, strictly necessary cookies or similar technologies may be used.

We do not use website visitor information for advertising profiling. Should we introduce technologies requiring consent under applicable law, we will provide appropriate information and consent controls.

7. Your Rights

Under applicable Swiss and EU data protection laws, you may have the right to request access to your personal data, correction of inaccurate information, deletion, restriction of processing, data portability, or to object to certain processing activities.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing.

To exercise your rights or request information about our data processing practices, please contact [email protected].

You may also lodge a complaint with a competent data protection authority, including the Swiss Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch/) or, where the GDPR applies, a competent EU supervisory authority.

8. Changes to This Privacy Policy

GraphSight may update this Privacy Policy to reflect changes in its website, data processing practices or applicable legal requirements.

The latest version will always be available on this page, together with its last-updated date.