Privacy Policy

1. Introduction

Your digital vault is protected by Swiss law. This Privacy Policy explains how Paul Brent Design GmbH (Hauptstrasse 33, 9650 Nesslau, Switzerland) collects and protects your workshop data. We adhere strictly to the Swiss Federal Act on Data Protection (FADP) and GDPR guidelines. Your client histories, pricing structures, and inventory data are yours alone. We do not sell, share, or compromise your atelier's private data.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, business details)
• Voice recordings and transcriptions for ledger entries
• Inventory data, material weights, and pricing information
• Client information you choose to store in the system
• Images of jewelry pieces for cataloging purposes
• Alloy formulas and proprietary craft information

3. Data Storage & Security

Your data is stored on servers located exclusively in Switzerland, ensuring compliance with Swiss data protection laws (FADP) and EU GDPR regulations. We employ:

• End-to-end AES-256 encryption for all data at rest and in transit
• Zero-knowledge architecture for sensitive proprietary information
• Daily encrypted backups with 30-day retention
• Multi-factor authentication for account access
• Regular third-party security audits

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process voice commands and generate ledger entries
• Generate invoices and client galleries
• Send you technical notices and support messages
• Respond to your comments and questions

5. Data Sharing

We do not sell, trade, or otherwise transfer your personally identifiable information or proprietary business data to third parties. Your alloy formulas, client lists, and craft secrets remain exclusively yours. We may share data only with your explicit consent or when required by Swiss law.

6. Your Rights

Under Swiss and EU data protection laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to certain processing activities
• Withdraw consent at any time

7. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. Upon account deletion, all data is permanently removed within 30 days, except where retention is required by law for accounting or tax purposes.

8. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us at: