Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how Cendroid AG collects, uses, stores, and protects personal data when you visit cendroid.ai, contact us, create an account, purchase or book a product or service, apply for a position, subscribe to communications, or otherwise interact with Cendroid.

The controller responsible for the processing described in this Privacy Policy is:

Cendroid AG
Bahnhofstrasse 19
6300 Zug
Switzerland

Legal form: Corporation limited by shares
UID: CHE-238.248.897
CH-ID: CH-170-3052774-7
FCRO-ID: 1754819
Email: info@cendroid.ai
Website: https://cendroid.ai

Cendroid AG is incorporated under Swiss law and registered in the Commercial Register of the Canton of Zug.

Official registry entry:
https://www.zefix.ch/en/search/entity/list/firm/1754819

References to “Cendroid,” “we,” “us,” or “our” mean Cendroid AG. The stylised name “CendroiD” is a commercial presentation of Cendroid AG.

Privacy questions and requests may be sent to info@cendroid.ai.

This Privacy Policy applies when you:

• visit cendroid.ai or another website operated by Cendroid;
• create or use a customer account;
• purchase a product or service;
• make a booking;
• contact us or upload a file;
• subscribe to a newsletter or commercial communication;
• apply for employment or another professional engagement;
• participate in a demonstration, event, evaluation, survey, or research project;
• use a Cendroid artificial-intelligence product or service; or
• otherwise interact with Cendroid.

Certain products, enterprise services, or research programmes may be governed by an additional privacy notice or customer agreement. Where a specific notice conflicts with this Privacy Policy, the more specific notice applies to the relevant processing.

Where Cendroid processes personal data exclusively on behalf of an enterprise customer, Cendroid generally acts as a processor and the enterprise customer acts as controller. In that situation, the enterprise customer’s privacy notice principally governs the processing.

Cendroid is principally subject to the Swiss Federal Act on Data Protection and its implementing ordinance.

The European Union General Data Protection Regulation may also apply where Cendroid offers goods or services to individuals in the European Economic Area or monitors their behaviour there.

We process personal data in accordance with the principles of lawfulness, good faith, transparency, proportionality, purpose limitation, data minimisation, accuracy, security, and privacy by design and by default.

References to a GDPR legal basis apply where the GDPR governs the relevant processing.

Depending on how you interact with Cendroid, we may collect:

• Identity and contact information: name, title, company, postal address, email address, telephone number, country, and preferred language.
• Account information: username, account identifier, authentication information, account preferences, access permissions, and account history.
• Transaction information: products or services ordered, booking information, delivery details, invoices, payment status, refunds, discounts, and transaction identifiers.
• Payment-related information: billing address, selected payment method, and limited payment metadata. Complete card details are ordinarily collected directly by the payment provider displayed during checkout.
• Communications: enquiries, support requests, feedback, correspondence, and meeting notes.
• Uploaded files: documents, images, curricula vitae, cover letters, technical files, and other materials submitted through our forms or services.
• Marketing information: newsletter subscriptions, consent records, communication preferences, event registrations, and interaction with commercial communications.
• Recruitment information: employment history, education, qualifications, portfolio, references, work authorisation, interview notes, and other information submitted during recruitment.
• AI service content: prompts, instructions, files, input data, generated outputs, corrections, evaluations, and feedback submitted through an AI service.
• Business relationship information: your professional role, organisation, commercial interests, contractual relationship, and meeting history.

Please do not submit sensitive personal data, health information, biometric data, government identification documents, legally privileged information, trade secrets, or confidential third-party information unless Cendroid specifically requests them and provides an appropriate channel.

When you use our website or online services, we and our service providers may automatically collect:

• IP address;
• browser type and version;
• device type;
• operating system;
• browser and device language;
• approximate location derived from an IP address;
• access date and time;
• pages viewed;
• functions used;
• referring website;
• navigation paths;
• session and cookie identifiers;
• account activity;
• error reports;
• security events;
• diagnostic information; and
• cookie-consent and privacy-preference records.

We use this information to operate the website, maintain security, prevent abuse, diagnose technical problems, measure performance, and improve our products and services.

We may receive personal data from:

• payment and transaction providers;
• website hosting and commerce providers;
• booking and account-management providers;
• cybersecurity and authentication providers;
• delivery and fulfilment providers;
• analytics and communication providers;
• recruitment agencies;
• professional references;
• event organisers;
• business partners;
• public company websites;
• commercial registers;
• professional networks; and
• customers or organisations that authorise you to use a Cendroid service.

Where personal data are obtained indirectly, we provide the information required by applicable law within the applicable period unless a lawful exception applies.

We process technical, device, log, and security information to:

• provide the website and its functions;
• maintain account sessions;
• prevent fraud, spam, malware, and unauthorised access;
• investigate errors and security incidents;
• enforce our contractual terms; and
• maintain reliable and secure systems.

Where the GDPR applies, the legal basis is our legitimate interest in operating and protecting our website, users, systems, and business, as well as compliance with applicable legal obligations.

We process account, identity, transaction, and communication information to:

• create and administer accounts;
• process purchases and bookings;
• process payments, deliveries, and refunds;
• provide requested products or services;
• communicate about orders and appointments;
• maintain customer records; and
• provide technical and customer support.

Where the GDPR applies, the legal basis is performance of a contract, taking steps at your request before entering into a contract, or compliance with accounting, tax, consumer-protection, and other legal obligations.

We process contact and communication information to:

• respond to enquiries;
• prepare proposals and demonstrations;
• discuss collaborations, licensing, procurement, investment, or partnerships;
• negotiate and administer agreements; and
• maintain professional relationships.

Where the GDPR applies, the legal basis is taking pre-contractual steps, performing a contract, or our legitimate interest in conducting and developing our business.

We may use contact and preference information to send newsletters, product announcements, event invitations, research updates, and other commercial communications where you have consented or another lawful exception applies.

You may unsubscribe at any time through the unsubscribe link in a communication or by emailing info@cendroid.ai.

We may retain minimal information in a suppression list to ensure that an unsubscribe request continues to be respected.

We process applicant information to:

• assess applications;
• communicate with candidates;
• conduct interviews;
• verify qualifications and references;
• evaluate suitability for employment or engagement;
• prepare an employment or consultancy agreement; and
• comply with employment and immigration requirements.

Where the GDPR applies, the legal basis is taking steps before entering into an employment contract, compliance with legal obligations, and our legitimate interest in recruiting qualified personnel.

We request separate consent before retaining an unsuccessful applicant’s information for materially longer-term recruitment purposes.

Subject to applicable law and your cookie preferences, we may process website interaction and analytics information to:

• measure website traffic;
• understand how visitors use the website;
• identify performance problems;
• evaluate communications and campaigns; and
• improve website design and functionality.

Where consent is required, the legal basis is consent. Otherwise, we may rely on our legitimate interest in understanding and improving our services, provided your interests and fundamental rights do not override that interest.

We may process personal data where necessary to:

• comply with laws, regulations, court orders, and lawful authority requests;
• establish, exercise, or defend legal claims;
• obtain professional advice;
• conduct audits;
• protect people, property, systems, and legal rights;
• investigate suspected misconduct; or
• enforce our agreements.

Where the GDPR applies, the legal basis is compliance with a legal obligation or our legitimate interest in protecting Cendroid and its legal rights.

Cendroid does not use contact-form submissions, account information, order histories, payment information, newsletter data, or recruitment applications to train general-purpose AI models.

We may use aggregated or effectively anonymised information to analyse service performance, conduct statistical research, and improve our systems, provided that the information can no longer reasonably be attributed to an identifiable individual.

If Cendroid offers an interactive AI product, the applicable product notice or customer agreement will explain:

• what input and output data are processed;
• why the data are processed;
• whether human review may occur;
• how long the data are retained;
• whether the data are used to improve the particular service; and
• whether the data are used for model training.

Unless a customer expressly agrees otherwise through an opt-in mechanism or written agreement, Cendroid will not use confidential customer content to train a model made generally available to other customers.

Cendroid may conduct research using synthetic, anonymised, licensed, company-generated, or otherwise lawfully obtained datasets.

Where research data contain personal data, we apply purpose limitation, data minimisation, access controls, retention limits, security safeguards, and appropriate governance procedures.

We do not intentionally use sensitive personal data for general-purpose AI training without a documented lawful justification and additional safeguards.

Where AI processing is likely to create a high risk to the personality, fundamental rights, or freedoms of individuals, Cendroid will conduct a data protection impact assessment where required.

Our website uses cookies and similar technologies, which may include:

• Strictly necessary cookies: required for security, account sign-in, shopping-cart functions, bookings, sessions, and privacy preferences.
• Functional cookies: used to remember preferences and provide requested functions.
• Analytics cookies: used to measure traffic and website performance.
• Embedded-content cookies: used by external video and content providers.
• Marketing cookies: used to measure campaigns or personalise advertising where such functionality is enabled.

Non-essential cookies are used in accordance with your choices and applicable law.

You may accept, reject, or adjust non-essential cookies through the cookie banner or Cookie Settings available on the website. You may withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.

You may also restrict cookies through your browser. Blocking strictly necessary cookies may prevent accounts, bookings, shopping-cart functions, or other website features from working correctly.

Our website uses services supplied by GoDaddy. These services may include website hosting, commerce, account management, bookings, forms, communications, security, and analytics.

GoDaddy may process IP addresses, device information, cookie identifiers, account information, form submissions, and transaction information on our behalf or, for certain purposes, as an independent controller.

GoDaddy Privacy Agreement:
https://www.godaddy.com/legal/agreements/privacy-policy

We use Google reCAPTCHA to protect our forms and website from spam, automated abuse, and malicious activity.

reCAPTCHA may process IP addresses, browser and device characteristics, cookies, interaction data, and information required to determine whether an interaction is likely to be human.

Google may process this information under its own terms.

Google Privacy Policy:
https://policies.google.com/privacy

Our website may contain videos embedded from Vimeo.

When an embedded video is loaded or played, Vimeo may receive your IP address, device information, referring page, cookie identifiers, and viewing activity.

Vimeo Privacy Policy:
https://vimeo.com/privacy

Payments may be processed by the payment provider identified during checkout.

The payment provider receives the information required to authorise and process the transaction and may conduct independent fraud, security, compliance, and identity checks.

Cendroid does not ordinarily receive or store complete payment-card numbers or card security codes.

We may disclose personal data to:

• website hosting and infrastructure providers;
• cloud computing and storage providers;
• cybersecurity providers;
• account, commerce, and booking providers;
• payment processors and banks;
• delivery and fulfilment providers;
• communication and analytics providers;
• anti-spam and fraud-prevention providers;
• lawyers, auditors, accountants, insurers, and consultants;
• recruitment providers and professional references;
• Cendroid affiliates where they provide documented services;
• prospective purchasers, investors, financing parties, or advisers in connection with a corporate transaction; and
• courts, regulators, law-enforcement authorities, and other public bodies where disclosure is legally required.

Processors may use personal data only in accordance with our instructions, their contractual obligations, and applicable law.

Cendroid does not sell personal data.

We do not disclose personal data for independent behavioural advertising without appropriate notice and any consent required by law.

Cendroid is established in Switzerland, but certain providers may process data in:

• Switzerland;
• the European Economic Area;
• the United Kingdom;
• the United States; or
• another country identified in a service-specific notice.

For transfers to countries recognised as providing adequate protection, we may rely on the applicable adequacy decision.

For transfers to the United States, we may rely on the Swiss–U.S. Data Privacy Framework or EU–U.S. Data Privacy Framework where the recipient is appropriately certified.

Otherwise, we use recognised standard contractual clauses, including the European Commission’s Standard Contractual Clauses with the adaptations required under Swiss law, together with supplementary safeguards where appropriate.

Further information about transfer safeguards may be requested through info@cendroid.ai.

We retain personal data only for as long as reasonably necessary for the relevant purpose, subject to legal, contractual, security, and evidentiary requirements.

As a general guide:

• website security logs are ordinarily retained for up to 12 months;
• routine enquiries are ordinarily retained for up to three years after closure;
• account information is retained while an account is active and for a limited period after closure;
• orders, invoices, contracts, and accounting records are generally retained for ten years where required by Swiss law;
• newsletter information is retained until consent is withdrawn or the subscription ends;
• minimal suppression information may be retained after an unsubscribe request;
• unsuccessful recruitment applications are ordinarily deleted within six months after the recruitment process;
• cookie and analytics information is retained for the periods stated in the applicable Cookie Settings; and
• AI input and output data are retained for the period stated in the applicable product notice or customer agreement.

Information may be retained for longer where necessary to comply with law, resolve disputes, investigate security incidents, enforce agreements, or establish or defend legal claims.

Backups may retain residual copies for a limited additional period until they are securely overwritten.

We implement technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure, or unauthorised access.

Depending on the processing and its risks, these measures may include:

• encryption in transit and, where appropriate, at rest;
• authentication and access controls;
• role-based permissions;
• logging and security monitoring;
• data minimisation and segregation;
• secure development practices;
• vulnerability management;
• backup and recovery procedures;
• vendor assessments;
• contractual data-protection obligations;
• incident-response procedures; and
• staff confidentiality obligations.

No internet-based system is completely secure. Cendroid cannot guarantee absolute security but continuously evaluates safeguards proportionate to the relevant risks.

Subject to applicable law and its limitations, you may have the right to:

• obtain information about whether and how we process your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request deletion or destruction;
• object to particular processing;
• request restriction of processing where the GDPR applies;
• withdraw consent at any time;
• receive eligible information in a commonly used electronic format;
• request transfer of eligible information to another controller;
• object to direct marketing;
• request human review of an applicable automated individual decision; and
• lodge a complaint with a competent supervisory authority.

To exercise a right, email info@cendroid.ai.

Please identify the relevant relationship, account, order, or service. We may request information necessary to verify your identity and prevent unauthorised disclosure.

Requests are ordinarily handled without charge. Applicable law may permit us to refuse, restrict, defer, or charge for a request in limited circumstances.

Cendroid does not currently use website information to make decisions based solely on automated processing that produce legal or similarly significant effects concerning website visitors.

Payment, fraud-prevention, or security providers may conduct automated risk assessments under their own responsibility.

If Cendroid introduces automated individual decision-making covered by applicable law, we will provide information about:

• the existence of the decision;
• its principal logic;
• its foreseeable consequences; and
• the available human-review procedure.

Our website, products, and commercial services are not directed to children under 16 years of age.

We do not knowingly collect personal data from children under 16 without appropriate authorisation.

If you believe a child has submitted personal data without appropriate consent, contact info@cendroid.ai.

Our website may contain links to websites and services operated independently by third parties.

Cendroid is not responsible for the privacy, security, availability, or content practices of an independently operated external service. You should review the third party’s privacy information before submitting personal data.

We may update this Privacy Policy when our services, technologies, providers, or legal obligations change.

The revised version will be published on this page with an updated “Last updated” date.

Where a change materially affects how personal data are processed, we will provide additional notice or request renewed consent where required.

Questions, concerns, and requests concerning this Privacy Policy or Cendroid’s processing of personal data may be sent to:

Cendroid AG
Bahnhofstrasse 19
6300 Zug
Switzerland

UID: CHE-238.248.897
CH-ID: CH-170-3052774-7
FCRO-ID: 1754819
Email: info@cendroid.ai
Website: https://cendroid.ai

We encourage you to contact us first so that we can investigate and address your concern.

You may also contact the Swiss supervisory authority:

Federal Data Protection and Information Commissioner
Feldeggweg 1
3003 Bern
Switzerland

https://www.edoeb.admin.ch

Where the GDPR applies, you may lodge a complaint with the data-protection supervisory authority in the country where you reside, work, or believe an infringement occurred.