Privacy Policy

1. Controller and Contact

Visiondynamics AG ("Visiondynamics", "we", "our", or "us") is the controller for personal data processed through this website and the Visiondynamics-operated services that refer to this policy.

This policy is intended to meet the duty to inform under Article 19 of the revised Swiss Federal Act on Data Protection (FADP) and, where applicable, the transparency obligations under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).

2. What This Policy Covers

This policy covers the Visiondynamics corporate website, direct communications with Visiondynamics, and shared infrastructure used by our ecosystem products. Product-specific notices for Vision Hub and Zerascan provide additional detail for those services and control for product-specific processing.

We design our services to minimize personal data. We do not require account creation, KYC documentation, or identity verification to browse this website, and we do not use this website for advertising or non-essential analytics.

3. Personal Data We Process

• Website and security logs: IP address, user agent, requested URL, referrer, timestamp, error logs, and similar connection data processed to deliver the site, keep it secure, prevent abuse, and diagnose technical issues.
• Communications: your name, email address, organization, message content, attachments, and related metadata when you contact us by email or another support channel.
• Local device preferences: essential local storage or session storage values needed for display preferences or one-time notices. These values are stored on your device and are not used for advertising.
• Ecosystem operations: where our products use shared infrastructure, we may process public wallet addresses, transaction hashes, API request metadata, session identifiers, API keys or bearer tokens, and blockchain data needed to operate wallets, explorers, indexers, APIs, and security controls.

4. Purposes and Legal Basis

• Service delivery: to serve pages, route API requests, provide support, and operate our software interfaces. GDPR legal basis, where applicable: performance of a contract or pre-contractual steps.
• Security and abuse prevention: to detect, investigate, and prevent attacks, misuse, fraud, spam, and service instability. GDPR legal basis: legitimate interests in security and service integrity.
• Compliance and legal requests: to comply with applicable law, preserve records, and respond to competent authorities. GDPR legal basis: legal obligation or legitimate interests.
• Product improvement: to fix bugs and improve reliability using minimized technical information. GDPR legal basis: legitimate interests, unless consent is required for a specific tool.

We do not sell personal data and do not use this website for advertising profiles or behavioral advertising.

5. Recipients and Processors

We disclose personal data only where needed for the purposes above. Recipient categories include:

• Hosting and infrastructure providers: providers used to deploy, host, route, and serve the website and APIs, including compute, storage, load balancing, container, and operational infrastructure.
• Network delivery and security providers: DNS, CDN, TLS, DDoS protection, edge security, and related network services.
• Email and support providers: mailbox, routing, spam filtering, and support tooling used to receive and answer messages.
• Ecosystem technical service providers: Visiondynamics-operated shared infrastructure and selected external technical services used by our products for blockchain connectivity, wallet connection, app distribution, push delivery, or public market and token data where needed.
• Professional advisers and authorities: lawyers, auditors, courts, regulators, law enforcement, or public authorities where disclosure is legally required or necessary to protect rights.

6. International Transfers

Our servers and service providers may operate globally, including in Switzerland, the EEA, the United States, and other countries or regions depending on routing, failover, deployment choices, and service availability.

Where personal data is disclosed to a country or international body without an adequate level of protection under Swiss or EU law, Visiondynamics intends to rely on a lawful transfer mechanism required by applicable law for the relevant recipient, which may include an adequacy decision, a certification framework, standard contractual clauses, or another legally recognized safeguard or exception, together with data processing agreements, encryption in transit, access controls, and data minimization. You can request information about the relevant transfer mechanism by writing to [email protected].

7. Cookies and Local Storage

This website does not use advertising cookies, third-party tracking pixels, or behavioral analytics tools. We may use strictly necessary cookies, local storage, or session storage for security, routing, preferences, and interface state.

If we add non-essential analytics or marketing cookies later, we will update this policy and request consent where required by applicable law.

8. Retention

• Website and security logs: normally retained for up to 30 days, unless a longer period is needed to investigate abuse, security incidents, or legal claims.
• Support communications: normally retained for up to 24 months after the matter is closed, unless a longer period is required for legal, accounting, or dispute reasons.
• Local storage and cookies: retained until expiry, until the browser session ends, or until you delete them from your device.
• Blockchain data: public blockchain records are controlled by the relevant network and may be permanent. We cannot delete or modify public ledger entries.
• Legal records: retained for the period required by applicable law.

9. Your Rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction or objection to processing, and a copy of data you provided in a portable format. If processing is based on consent, you may withdraw consent at any time.

Send requests to [email protected] or by post to Visiondynamics AG, Oberallmendstrasse 18, 6300 Zug, Switzerland. We may need information to verify your identity and will respond to legitimate requests within 30 days unless applicable law allows or requires a different timeframe.

You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland, www.edoeb.admin.ch. If the GDPR applies to you, you may lodge a complaint with your local EU or EEA supervisory authority.

10. Security and Breach Notification

We use technical and organizational measures designed to protect personal data, including access controls, encrypted transport, least-privilege operational practices, monitoring, and secure deployment workflows. If a data security breach is likely to result in a high risk to affected individuals, we will notify the FDPIC as soon as possible and inform affected individuals where required. Where the GDPR applies, we will also notify the competent EU supervisory authority within 72 hours when required by Article 33 GDPR.

11. Automated Decisions and Profiling

We do not use personal data from this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects. Security and rate-limit systems may automatically block or throttle abusive traffic, but they are used only to protect service integrity and can be reviewed if you contact us.

12. Updates to This Policy

We may update this policy to reflect legal, technical, or operational changes. Material changes will be posted on this page with an updated date. Product-specific privacy notices may add details for a particular service; they do not reduce the rights described in this policy.