Privacy policy

This is a translation of the German privacy policy. If the two differ, the German version applies.

1. Controller

The controller for the processing described here is Natron Tech AG, Weissenbühlweg 40a, 3007 Bern, Switzerland, datenschutz@natron.io. Our offer is aimed at customers in Switzerland. Once we actively address customers in the EU, we will name an EU representative under Art. 27 GDPR here.

2. Our two roles

For data you give us directly (account, billing, audit logs, support, website), we are the controller, and this privacy policy applies. For personal data that our customers process in their own applications and databases on the platform, the customer is the controller and we are the processor. That processing is governed by the data processing agreement with the customer. Please send questions about data in a customer's application to that customer.

3. What data we process

1. Account data: name, email address, profile picture or avatar and attributes from your login provider (OIDC), organization and role.
2. Authentication and security data: session tokens, API tokens (checksums only), sign-in times, IP addresses.
3. Billing and usage data: chosen plan, measured resource usage, credit and payment status, payment provider references, invoice data.
4. Audit logs: who performed which action on the platform and when, including the IP address.
5. Platform usage data: how you use the platform (section 13).
6. Support and communication: the content of your requests and our replies, transactional emails.
7. Website data: server logs (shortened IP, time, requested page) and cookieless, self-hosted audience measurement (section 6).

4. Purposes and legal bases

We process this data to provide and secure the platform, to authenticate users, to measure and bill usage, to prevent abuse, to keep actions traceable (audit), to communicate about the service, to improve the service, to inform you about related offers (section 13) and to meet legal obligations. Where the GDPR applies, we rely on the performance of a contract (Art. 6(1)(b)), legitimate interests in security, abuse prevention, audience measurement, improving the service and informing you about related offers (Art. 6(1)(f)) and legal obligations (Art. 6(1)(c)). We only ask for consent where the law requires it.

5. Recipients

We share personal data only as far as operating the service requires, with these service providers: data center and infrastructure operators (Switzerland), Stripe (payment processing), bexio (invoicing and accounting), Resend (sending transactional emails). The current list with locations and safeguards is in the data processing agreement, annex B. We disclose data to authorities only when the law obliges us to.

6. Cookies and audience measurement

The platform uses only cookies and tokens that it needs to work (session, security, settings). On the website we measure the audience ourselves and without cookies. We record the page viewed, the referring page and campaign details from the link (utm), browser and device type and the approximate country. We also record which sections of a page were visible, how long a page was visible, how fast it loaded (Web Vitals), clicks on buttons, handbook searches without results and addresses that do not exist.

We do not store the IP address. From the IP address and browser we form an identifier that changes every day. That lets us count visits without following you across several days or other websites. We delete single events after 13 months, after which only daily totals remain. We do not share this data with third parties. A cookie banner is therefore not required.

7. Disclosure abroad

Customer content, backups and platform data are stored and processed in Switzerland only. A few auxiliary services are abroad: Stripe, Inc. and Resend, Inc. (both USA) receive the data needed for payment processing and sending email. The disclosure relies on certification under the Swiss-U.S. Data Privacy Framework and, in addition, on the EU standard contractual clauses with a Swiss annex.

8. Retention

1. Account data: until the account is deleted, then as legal obligations require;
2. Billing and accounting data: 10 years (Art. 958f CO);
3. Audit logs: 30 days;
4. Platform usage data: 13 months, then deleted;
5. Server logs: 30 days;
6. Audience measurement: aggregated, without personal reference, indefinitely.

9. Data security

We run the platform in Switzerland with state-of-the-art technical and organizational measures, including encryption in transit and at rest, strict separation of customer environments, restrictive network rules (default deny), role-based access, audit logging and backups. We report data security breaches under Art. 24 FADP and Art. 33/34 GDPR. Send security reports to datenschutz@natron.io.

10. Your rights

You can ask for information about your personal data (Art. 25 FADP), have it corrected or deleted (Art. 32 FADP) and ask for it to be handed over or transferred (Art. 28 FADP). Where the GDPR applies, you also have the rights under Art. 15 to 22 GDPR, including the right to lodge a complaint with a supervisory authority (in Switzerland: the FDPIC). Send requests to datenschutz@natron.io. We verify your identity and reply within 30 days, free of charge.

Objecting to offers: you can object at any time, without giving a reason, to us telling you about related offers (section 13). We then stop; your use of the service stays as it is.

11. Automated individual decisions

We make no automated individual decisions with legal effects or similarly significant impact within the meaning of Art. 21 FADP or Art. 22 GDPR.

12. AI assistants

You can connect an AI assistant such as Claude or ChatGPT to klickops. For each connection we store the assistant's name, which organization it may act in, whether it may only read, when it was created and last used, and details of the tokens issued to it. Actions the assistant takes are recorded in the audit log (section 3).

The results of the tools the assistant calls go to the provider of the assistant you chose. That provider processes them under its own terms. We do not send data to an assistant on our own. A connection ends after 90 days or after 30 days without use. You can end it at any time under Account, Connected apps.

13. Use of the platform

We record how you use the platform, through the web app, the command line or an AI assistant: who, in which organization, which function, with which result, which error messages and which limits were reached. We do not record the content of your applications, your data or secret values.

We use this to run and improve the service. When you reach a limit of the platform, we may tell you about related offers of Natron Tech AG, for example custom hosting, managed Kubernetes or virtual machines. Every such message names us as the sender and lets you unsubscribe free of charge. If you do not want them, write to datenschutz@natron.io.

Private organizations: when you create an organization as a private person, we record your declaration (living in Switzerland, at least 18, no commercial purpose) and when you made it. We then tell you about offers only inside the platform, for example when you reach a limit. We send you offers by email only if you agreed to that beforehand.

14. Changes

We may change this privacy policy. The version published on the website with its version date applies.