Privacy Policy
This website is operated by the ICT4Peace Foundation ("we", "us") as part of the Toolkit for Responsible Technology Use by Private (Cyber) Security Companies, developed with the support of the Swiss Federal Department of Foreign Affairs (FDFA) and in cooperation with ICoCA. We take your privacy seriously and process personal data in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account data — email address and password (stored as a cryptographic hash) when you register for access. | Managing access to the toolkit during its restricted launch phase; notifying you about your account. | Consent (Art. 6(1)(a) GDPR); legitimate interest in controlling access to a limited-capacity service. |
| Chat queries — the questions you send to the AI assistant and the conversation history of your session. | Generating answers from the toolkit documents; maintaining conversation context; service improvement. | Legitimate interest in operating and improving the assistant. |
| Technical data — standard server logs (IP address, browser type, pages requested). | Security, abuse prevention, and service operation. | Legitimate interest in running a secure service. |
Where your data is processed
The website and the AI assistant are hosted on Swiss infrastructure. Questions submitted to the chat assistant are processed by our Swiss hosting and AI provider (Infomaniak); your queries are not used to train AI models and do not leave Switzerland. Account registration and sign-in are handled by our authentication provider (Supabase), and account-related notification emails are delivered via an email service provider (Resend); these providers may process data outside Switzerland under appropriate safeguards.
Cookies and local storage
We use no advertising cookies and no third-party analytics or trackers. The site stores only what it needs to function: a session token to keep you signed in, and a local identifier that preserves your chat conversation in your own browser.
How long we keep data
Account data is kept for as long as your account exists and is deleted on request. Chat conversations are retained only as needed to operate and improve the service. Server logs are rotated on a short cycle.
Your rights
You may at any time request access to, correction of, or deletion of your personal data, object to processing, or request a copy of your data in a portable format. To exercise any of these rights, email info@ict4peace.org. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.
AI-generated content
Answers from the chat assistant are generated by a large language model and may contain errors. They are provided for general guidance only and are not legal, technical, or human rights advice. Please verify important information against the source documents, which are linked from each answer.
Changes to this policy
We may update this policy as the service evolves; the date at the top reflects the latest revision. Material changes will be announced on the site.
Contact
ICT4Peace Foundation · info@ict4peace.org · ict4peace.org