Privacy
Last updated: September 2026
This policy describes which data we process when you visit nls-ai.com. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR.
1. Controller
NLS AI
Im Werk 8
8610 Uster
Switzerland
info@nls-ai.com
2. Data we process
We process personal data only where you actively provide it, along with the access data technically required to run the site:
- Contact enquiries: name, email address, company, optionally a phone number, and the content of your message when you use the contact form or write to us.
- Website assistant: the assistant answers questions with fixed, prepared answers and runs entirely in your browser. What you type into it is not sent to us or to anyone else, and is not stored anywhere.
- Server logs: our hosting provider automatically records standard access data (IP address, browser type, pages visited, date and time). These serve technical operation and security only, and are not linked to individuals.
We use no analytics tools, no tracking pixels and no advertising cookies.
3. Purpose and legal basis
We process your data to answer your enquiries and to provide our services. The legal basis is our legitimate interest (Art. 31 FADP; Art. 6(1)(f) GDPR) and, where applicable, performance of a contract (Art. 6(1)(b) GDPR).
4. Hosting and processors
This website is hosted by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare processes server log data and provides content delivery and security services on our behalf as a processor. Cloudflare is certified under the EU–US Data Privacy Framework and offers EU-based processing for visitors in the EEA. Details at
The contact and FAQ forms are protected against automated submissions by Cloudflare Turnstile. To do this, Cloudflare checks technical characteristics of your browser and connection when the form loads. Turnstile itself sets no cookies. The check serves only to block spam; Cloudflare acts as a processor on our behalf. Details at
cloudflare.com/turnstile-privacy-policy.
The contact form we handle ourselves: your entries are received by our own application on Cloudflare's infrastructure and forwarded to us immediately as email. They are not stored persistently. For sending that mail we use Mailjet (Mailjet SAS, France, part of the Sinch group), which acts as a processor on our behalf and processes the data within the EU. Details at
mailjet.com/legal/privacy-policy.
An important distinction: your form details never leave Europe. Systems we build and operate for clients run separately, in Swiss data centres; processing there is governed by the relevant contract. If you would rather involve no third party at all, reach us directly at info@nls-ai.com.
We do not sell, rent or pass your personal data to any further third parties.
5. Cookies
This website sets no cookies of its own and stores nothing in your browser's local storage — not for tracking, not for advertising, not for preferences. Your language follows from the page address, not from anything saved on your device. That is also why you will find no cookie banner here: there is nothing to consent to.
The one exception is a strictly necessary cookie our host Cloudflare may set to fend off automated abuse (e.g. __cf_bm, lasting around 30 minutes). It serves operational security only and is not used to recognise individuals.
6. Retention
Data from contact enquiries is kept for as long as needed to handle your request and, where applicable, for the duration of any resulting business relationship — subject to statutory retention obligations. Server logs are normally deleted within 30 days.
7. Your rights
Under the FADP and, where applicable, the GDPR, you have the right to:
- Access the personal data we hold about you
- Correction of inaccurate data
- Deletion of your data, subject to legal obligations
- Restriction of processing
- Data portability (GDPR)
- Object to processing based on legitimate interest
To exercise any of these, write to us at info@nls-ai.com.
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch — or, if you are based in the EU, with your local supervisory authority.
8. Changes
We may update this policy from time to time. The current version is always available at this address; material changes will be communicated where appropriate.