Privacy Policy

1. Introduction

Kohesion AG (“Kohesion”, “we”, “our”, or “us”), registered in Switzerland (CHE), operates the website at kohesion.ai (the “Site”). This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nDSG).

2. Data Controller

The data controller is:

3. Data We Collect

We collect the following categories of personal data:

• Contact form data: name, email address, organisation, and message content when you submit a form on our Site.
• Early access applications: first name, last name, work email, organisation name, organisation type, role, and use-case description.
• Usage data: IP address, browser type, pages visited, and time spent — collected via analytics cookies (with your consent only).
• Cookie data: your cookie consent preference, stored locally in your browser.

4. Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR): for analytics cookies and marketing communications.
• Legitimate interests (Art. 6(1)(f) GDPR): for processing enquiries, improving the Site, and detecting fraud.
• Contract performance (Art. 6(1)(b) GDPR): where processing is necessary to respond to your requests or enter into an agreement.

5. How We Use Your Data

• To respond to your enquiries and provide information you have requested.
• To process and manage early access applications.
• To improve our Site and services based on usage analytics (with consent).
• To comply with legal obligations.

6. Third-Party Processors

We use the following trusted third-party service providers:

• Formspree: processes form submissions. Data is stored on Formspree's servers (see Formspree Privacy Policy).
• Vercel: hosts our website. Server logs may capture IP addresses for security purposes.

7. Data Retention

We retain contact form submissions for up to 24 months. Early access application data is retained for the duration of the programme and deleted upon request. Analytics data is retained for 13 months.

8. Your Rights

Under GDPR and nDSG, you have the right to:

• Access, correct, or delete your personal data.
• Withdraw consent at any time (without affecting prior processing).
• Object to processing or request restriction.
• Data portability.
• Lodge a complaint with your supervisory authority (Switzerland: FDPIC; EU: your national DPA).

To exercise your rights, contact us at hello@kohesion.ag.

9. Cookies

We use essential cookies (required for the Site to function) and, with your consent, analytics cookies. You can manage your preferences via the cookie banner or your browser settings. Declining non-essential cookies will not affect Site functionality.

10. International Transfers

Some of our processors operate outside Switzerland/EEA. Where personal data is transferred internationally, we rely on Standard Contractual Clauses or equivalent safeguards as required by applicable law.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a notice on the Site. Continued use of the Site after changes constitutes acceptance of the updated policy.