Privacy Policy

Last updated: 30 October 2026

1. Overview

This policy explains how we process personal data when you visit this website or contact us. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

In short: this website uses no cookies, no tracking tools and no third-party embeds. All fonts and assets are served from our own domain. The only personal data processed are technical access data needed to deliver the website securely, and whatever you send us by email.

2. Controller

[PharmaForge AI GmbH]
[Street and number]
[Postcode] [City], Switzerland
hello@pharmaforge.ai

For all data protection matters, please contact us at the address above.

3. Visiting this website

When you access this website, your browser automatically transmits technical information to the server. This includes:

• IP address
• date and time of the request
• requested page or file
• referrer URL
• browser type, version and operating system (user agent)

These data are processed to deliver the website, ensure its stability and security, defend against attacks and abuse, and compile aggregated traffic statistics (for example, number of requests and visitors per day and country of origin). We only see these statistics in aggregated form and do not combine the data with other data or use them to identify you. The legal basis under the GDPR is our legitimate interest in a secure, functioning website and in understanding its use (Art. 6(1)(f) GDPR).

Hosting and content delivery

This website is hosted on Cloudflare Workers and delivered through Cloudflare's network, operated by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes the access data listed above on our behalf as a processor under a data processing agreement, and may use them to detect and mitigate malicious traffic. Cloudflare retains these data only for a limited period. Further information is available in Cloudflare's privacy policy.

Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. Transfers to the USA are therefore based on the adequacy decisions of the European Commission and the Swiss Federal Council, and additionally on the Standard Contractual Clauses included in Cloudflare's data processing agreement.

4. Cookies, analytics and tracking

We do not use cookies, local storage, tracking scripts, advertising tools or social media plugins. The traffic statistics described in section 3 are derived from server-side access data only; nothing is stored on your device. Fonts are hosted on our own domain; no connection to Google or other font services is made.

5. Contacting us by email

If you email us, we process the data you provide — typically your name, email address, company, role and the content of your message — to respond to your enquiry and, where relevant, to prepare or perform a contract with you or your company.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps, and otherwise our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).

Our email is hosted by [email provider, e.g. Microsoft Ireland Operations Ltd. / Google Cloud EMEA Ltd. / Infomaniak Network SA], which processes these data on our behalf as a processor. [If the provider is outside Switzerland/EU/EEA, state the transfer safeguard here.]

We delete enquiries once they have been fully dealt with, unless they lead to a business relationship or statutory retention obligations apply (for example, commercial correspondence must be retained for ten years under Swiss law).

6. Recipients and transfers abroad

We do not sell personal data or share it with third parties for their own purposes. Personal data are only disclosed to the service providers named above, who process them on our behalf and under our instructions, or where we are legally obliged to do so.

Where data are transferred to a country without an adequate level of data protection as recognised by Switzerland or the EU, we ensure appropriate safeguards, in particular the Standard Contractual Clauses of the European Commission, as recognised by the Swiss Federal Data Protection and Information Commissioner.

7. Data security

This website is served exclusively over encrypted connections (HTTPS/TLS). We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse.

8. Your rights

Subject to the applicable law, you have the right to:

• obtain information about and a copy of the personal data we hold about you (Art. 25 FADP, Art. 15 GDPR);
• have inaccurate data corrected (Art. 32 FADP, Art. 16 GDPR);
• have your data deleted or its processing restricted (Art. 32 FADP, Art. 17–18 GDPR);
• receive your data in a portable format (Art. 28 FADP, Art. 20 GDPR);
• object to processing based on legitimate interests on grounds relating to your particular situation (Art. 21 GDPR);
• withdraw any consent you have given, with effect for the future.

To exercise these rights, contact us at hello@pharmaforge.ai. We may ask you to verify your identity.

You also have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU/EEA, you may contact the supervisory authority in the member state of your habitual residence, place of work or the place of the alleged infringement.

9. Automated decision-making

We do not use automated individual decision-making or profiling on this website.

10. Changes to this policy

We may update this policy when our website or the legal requirements change. The current version is always available on this page.