Privacy policy
Last updated: 27 August 2026
This policy explains how everbreach processes personal data on the public website and for private-preview requests under the Swiss Federal Act on Data Protection and the EU GDPR.
Controller
everbreach, Zürich, Switzerland. Privacy enquiries: hello@everbreach.ch.
Data we collect
Early-access requests. Work email, company, website, role, environment, language, campaign source and consent timestamp.
Technical request data. A keyed hash of the request IP and a shortened browser user agent, used for abuse prevention and rate limiting. We do not store the raw IP in the request record.
Private pilots. Testing data is processed only after a separate scope, authorization and data-handling agreement has been accepted.
Purposes and legal bases
We process early-access details to evaluate and respond to your request based on your consent and our legitimate interest in operating a controlled product preview.
We process limited technical data to prevent form abuse and protect the service based on our legitimate interests.
You can withdraw an early-access request at any time by contacting us.
Processors and transfers
The public website uses Supabase for database hosting, Vercel for application hosting and aggregate analytics, Google Workspace for sending and receiving our email, and Google Analytics for consent-based website statistics.
Private pilot processors and model providers depend on the agreed scope and are disclosed before customer data is processed.
Where data is transferred outside Switzerland or the EEA, we use an applicable adequacy mechanism or contractual safeguards.
Retention
New or declined early-access requests are deleted after no more than 24 months.
Requests may be deleted earlier on request. Pilot data follows the retention period agreed for that pilot.
Your rights
You may request access, correction, deletion, restriction, portability or object to processing by contacting us.
You may lodge a complaint with the Swiss FDPIC or your competent EU supervisory authority.
Cookies and analytics
A first-party cookie remembers your language choice, and your cookie decision is stored locally in your browser. Neither contains an account or advertising identifier.
Google Analytics 4 loads only after you consent to statistics cookies. Until you consent, no analytics cookie is set and no data is sent to Google. Once enabled it sets _ga and _ga_<id> cookies that expire after up to 24 months, with IP anonymisation active.
We do not enable Google Signals, remarketing or advertising personalisation, and we run no cross-site advertising trackers on this website.
You can change or withdraw your consent at any time via Cookie settings in the footer. Withdrawing it deletes the analytics cookies.