Privacy Policy

1. Controller

The controller responsible for data processing is Henosis Ventures GmbH, Lindenstrasse 8, 6340 Baar, Switzerland ("Firmbase"). For questions about data protection, contact us at hello@firmbase.ch.

2. Data collected

We collect and process the following personal data:

• Registration data (name, email address, password)
• Formation data (personal details, addresses, capital details of the persons involved)
• Business-address / domicile data (company name, UID, desired location, package, mail items)
• Usage data (access times, features used)
• Technical data (IP address, browser, operating system)

3. Purpose of data processing

Your data is used exclusively to provide our services: carrying out company formations, amendments and liquidations, document generation, communication with notary's offices and commercial registry offices, and to improve our service.

4. Data sharing

Personal data is shared with third parties only where necessary to perform the contract (e.g. notary's offices, commercial registry offices, and postal and digital-mail partners for domicile / business-address services) or where there is a legal obligation. We do not sell personal data. To measure the effectiveness of our advertising, limited data is transmitted to Google and Meta — only with your consent (see section 6).

5. Data storage

Your data is stored on servers in the European Union (Supabase, Frankfurt). It is retained for as long as necessary to provide our services or as required by statutory retention obligations.

6. Cookies and reach measurement

Strictly necessary cookies. These are required for operation (authentication, session management) and are set without consent. For technical error and stability monitoring we use Sentry; this is done in our legitimate interest in a secure, functional service and sets no advertising cookies.

Google Analytics 4 (analytics consent only). If Google Analytics 4 is configured for Firmbase, we use it on public pages to analyse page views and use of our services in aggregate. Page paths are transmitted without free-form URL parameters; names, email addresses, telephone numbers, company details, addresses, free text and internal lead IDs are not sent. An analytics-only funnel stores only sanitised service and campaign attributes in session storage and no advertising click IDs. The dashboard is excluded. Without analytics consent, no page-view or funnel events are sent to Google Analytics.

Marketing cookies (only with consent). On our public pages we use Google Ads (Google Ireland Ltd., with possible data transfer to the USA) to measure the effectiveness of our advertising (conversion tracking). These cookies are set only after your explicit consent via the cookie banner. Until then, only cookieless, anonymised signals are transmitted via Google Consent Mode v2. No cookies are used in the logged-in area (dashboard).

Ad-click attribution (only with consent). If you reach Firmbase through a registered paid campaign, we store allowlist-validated campaign details and Google click identifiers (gclid, gbraid or wbraid) for no more than 90 days. When you submit a domicile or contact enquiry, these details may be linked to the enquiry. Click identifiers in our database are automatically deleted within that period; withdrawing consent removes the related browser storage immediately.

Meta Pixel and Conversions API (only with consent). For our advertising on Facebook and Instagram we use — only with your explicit consent — the Meta Pixel and the Meta Conversions API (controller: Meta Platforms Ireland Limited; possible data transfer to Meta Platforms, Inc. in the USA under the Swiss-US Data Privacy Framework). This measures the effectiveness of our campaigns (conversion tracking). Meta uses its own consent signal: without your consent, no Pixel or Conversions API data is transmitted to Meta. It is not used in the logged-in area (dashboard).

Withdrawing consent. You can withdraw your consent at any time with effect for the future — via the "Cookie settings" link in the footer or by deleting the cookies in your browser settings.

7. Your rights

You have the right to access, rectification, erasure and restriction of the processing of your personal data. To exercise these rights, contact us at hello@firmbase.ch.

8. Applicable law

This privacy policy is governed by the Swiss Data Protection Act (DPA). The place of jurisdiction is Baar, Canton of Zug, Switzerland.