Privacy Policy
1. Data controller
Accorata AG, Rämistrasse 8, 8001 Zurich, Switzerland ("Accorata," "we," "us") is the data controller for personal data processed through the accorata.com website and platform. For data protection enquiries, contact us via the contact form.
2. Data we collect
Account data: Name, email address, fund name, and role information provided at registration.
Usage data: Platform interactions, feature usage, query logs (anonymised after 90 days), and API call metadata.
Uploaded content: Pitch decks and documents uploaded to the Intake feature. These are processed to extract structured data and retained for the duration of your subscription.
Communications: Messages submitted through the contact form or support channels.
Technical data: IP address, browser type, operating system, and referrer URL collected automatically via server logs. Retained for 30 days.
3. Legal basis for processing
Contract performance: Account data and usage data are processed to deliver the Service under your subscription contract.
Legitimate interests: Technical data and anonymised analytics are processed for platform security, fraud prevention, and service improvement.
Consent: Where we process personal data beyond what's strictly necessary for the Service (e.g., optional communications), we rely on your explicit consent. You can withdraw that consent at any time.
4. Data infrastructure and transfers
All personal data is processed and stored on infrastructure in Zurich, Switzerland and Frankfurt, Germany. We don't transfer personal data to countries outside the European Economic Area or Switzerland except where required by law or with your explicit consent.
Switzerland is recognised by the European Commission as providing an adequate level of data protection. Transfers to and from Switzerland are conducted under applicable adequacy decisions or, where required, Standard Contractual Clauses.
5. Third-party processors
We use a limited set of sub-processors to operate the Service, each subject to data processing agreements meeting GDPR and Swiss DPA requirements. A current list of sub-processors is available on request via the contact form. Categories include: cloud infrastructure providers (EU/Swiss), email delivery, and analytics infrastructure.
6. Data retention
Account data is retained for the duration of your active subscription and deleted within 90 days of account termination unless longer retention is required by law. Uploaded documents are deleted within 30 days of a deletion request or account termination. Anonymised aggregate analytics data may be retained indefinitely.
7. Your rights
Under the GDPR and Swiss Federal Act on Data Protection (revFADP), you have the right to: access your personal data; correct inaccurate data; request erasure; restrict or object to processing; data portability; and lodge a complaint with a supervisory authority. To exercise these rights, contact us via the contact form. We respond within 30 days.
8. Cookies
We use technically necessary cookies required for the Service to function, and optional analytics cookies to understand platform usage. For full details, see our Cookie Policy. You can manage cookie preferences through your browser settings.
9. Security
We apply technical and organisational measures in line with industry best practice: encryption at rest and in transit, access controls, and regular security testing. Accorata is SOC 2 Type II certified. Where required by law, we notify affected users of data breaches within 72 hours of discovery.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated to active subscribers via the platform or email. The version date at the top of this page shows when it was last revised.