Privacy

1. Who is responsible

adona-robot.com and api.adona-robot.com are run by Adona Robot Sàrl, Chemin des Semailles 42, 1212 Grand-Lancy, Switzerland (CHE-205.255.519), which decides what is kept and why. Personal data is handled under the Swiss Federal Act on Data Protection.

2. What we keep

The account's email address, the company name given at sign-up, and the sites you declare for your key. The address is used to sign you in and to write to you (confirmation, quota alerts, invoices).

Sign-in and security records: the IP address and the browser, at sign-up, at each sign-in, when the address is confirmed and at each password reset or change, and every session, closed ones included. At sign-up the country of the IP address is looked up, and a sign-up from a country we do not serve is refused and recorded with the address, the IP and that country. The web server also logs each request with its IP address; that log is kept 14 days, then deleted.

For the free trial only: a one-way fingerprint, computed with a secret key, of the address's domain and of the network the trial is opened from. Without that key it does not lead back to the domain or the IP address; it is linked to your account.

The measure of your usage (slices, simultaneous connections, symbols followed live), which sets your plan and your invoice.

On a paid plan, your payment details are entered at Stripe and kept by Stripe. We never see your card number. Stripe keeps your invoices; we keep your subscription's reference.

Audience measurement, with Umami, which we run ourselves on our servers in Switzerland: no cookie and nothing stored in your browser. For each page viewed it records the page's address without its query string, its title, the address of the page you came from, the browser, the system, the type of device, the screen size, the language, and the country, region and city derived from the IP address. The IP address itself is not kept: it is used only to compute an anonymous identifier that changes every day. Three steps are counted as events: the price table seen, a sign-up link clicked, a data account opened. These statistics identify nobody; they are kept 13 months, then deleted. A browser that sends Do Not Track is not measured.

No advertising cookie, and no third party measures the audience. The only cookies the site sets are the ones that keep you signed in. In your browser the site keeps only your sign-in, for the open tab, and the fact that you dismissed the cookie notice.

3. Why

To provide the service you signed up for and to bill it; to keep accounting records as the law requires; and to protect the service and its customers, which is what the sign-in records and the trial's fingerprint are for (one trial per company and per network). Nothing is sold or used for advertising.

4. Service providers, and data leaving Switzerland

Cloudflare Turnstile checks at sign-up that a person is filling in the form, and receives your IP address to do so. Resend sends our emails, so it receives your email address. Stripe takes payment for paid plans, and receives your address and the company name for the invoice.

Our servers are in Switzerland, at Infomaniak in Geneva. Cloudflare, Resend and Stripe may process what they receive outside Switzerland, in the United States among other countries. We rely on the safeguards those providers offer for such transfers, such as standard contractual clauses or their certification under the Swiss-US Data Privacy Framework.

5. How long

The trial's fingerprint is kept 12 months, then deleted. A company can therefore open a new trial a year after the previous one.

The address, the company name, the declared sites and your sessions are kept as long as the account exists. Invoices, with the address and the company name they carry, are kept 10 years, as Swiss accounting law requires, and deleting the account does not erase them. An account whose address was never confirmed is deleted seven days after sign-up, and its sign-in records are cleared of the address, the IP and the browser.

When the account is deleted, the address, the company name and the declared sites are erased from the account, the sessions removed, and the IP address and the browser cleared from the sign-in records. What remains of those records, with no name, address or IP, is deleted 7 years later. The usage measure is kept, under the account's identifier and with no name or address, because invoices rest on it. The record of a refused sign-up, with its address, IP, browser and country, is not deleted automatically: ask us and we erase it.

6. What you can ask

You can ask what we keep about you, have it corrected or deleted, or receive it in a common format. Write to the address below; we answer within 30 days. Deleting the account erases what section 5 says it erases. If you think we handle your data wrongly, you can also turn to the Federal Data Protection and Information Commissioner (FDPIC).

7. Changes to this page

This page changes when what the service keeps changes, and its date says when. A change that keeps more about you, or keeps it longer, is announced by email to account holders before it applies.

Contact

For any question or request about your data, write to: florian@adona-robot.com