Privacy policy
What data this website collects, why, where we keep it and what you can ask us. Written for bagai.ch, in line with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).
Last updated: 15 October 2026
In short
- We collect only what you write in the forms, plus the technical data every website receives.
- Form data is stored in a PostgreSQL database on our server, in Switzerland.
- Emails go through external providers: Google Workspace for our mailbox, SMTP2GO for the website’s automated emails.
- No tracking cookies, no analytics tools, no advertising.
- No fonts, scripts or content loaded from other websites.
- Only technical cookies: the session cookie and the one that protects the forms.
- We don’t sell or pass on your data.
Who is responsible
The controller is Daiko Lab SA, Via San Gottardo 86, 6900 Massagno, Switzerland (UID CHE-341.329.982).
For any privacy question, email info@bagai.ch.
What this policy covers
It covers the bagai.ch website: its pages, the “notify me” form, the beta sign-up form and the contact form.
It does not cover the data a company enters on its own bagai instance. For that data, the company is the controller, and we process it on the company’s behalf, under the data processing agreement we conclude with it.
What data we collect and why
For each form, and for technical data, here is what we keep, what it’s for, on what legal basis and for how long.
“Notify me” form
- What data
- email address, chosen language, date and time of submission
- What it’s for
- to let you know when public beta sign-ups open, and for nothing else
- Legal basis (GDPR)
- your consent, which you give by sending the form (Art. 6(1)(a))
- How long we keep it
- until we send you the email announcing that sign-ups are open; then we delete it, by 31 December 2026 at the latest
Beta sign-up
- What data
- first name, last name, email, company, role, number of people, country, canton, platforms, tool used today, notes, language, date and time of consent
- What it’s for
- to manage your sign-up, contact you about the beta, and understand which companies and platforms to serve first
- Legal basis (GDPR)
- your consent (Art. 6(1)(a)) and pre-contractual steps taken at your request (Art. 6(1)(b))
- How long we keep it
- for the duration of the beta and up to 12 months after it ends (we’ll tell you when it ends); if you become a customer, we keep it for the contract
Contact form
- What data
- name, email, company, message, language, date and time of consent
- What it’s for
- to reply to you
- Legal basis (GDPR)
- your consent (Art. 6(1)(a)) and our legitimate interest in replying to people who contact us (Art. 6(1)(f))
- How long we keep it
- 12 months from the last message exchanged
Technical data
- What data
- IP address
- What it’s for
- to run the website, protect it from abuse and investigate errors
- Legal basis (GDPR)
- our legitimate interest in a secure, working website (Art. 6(1)(f))
- How long we keep it
- the web server doesn’t keep a log of visits: the IP address is kept only in the anti-abuse counter, for 10 minutes. The session doesn’t record the IP address or the browser.
To curb automated submissions, the server keeps a counter of the attempts made from each IP address on each form for 10 minutes, then forgets it.
Where the data is kept
Form data is stored in a PostgreSQL database on the server that hosts this website.
The server is located in Switzerland, on infrastructure managed by Daiko Lab SA.
Emails are the exception: messages you send to info@bagai.ch go through Google Workspace, and the website’s automated emails will go through SMTP2GO. The details are below.
Who we share it with
We don’t share it with anyone for sale or for advertising. It is read only by the people on our side who handle the beta and enquiries.
If the law requires it, we may have to disclose it to an authority.
The following providers process data on our behalf, on our instructions and only for these purposes:
- Google, through Google Workspace, handles our email: the messages you send us at info@bagai.ch, and the replies we send you from that address, pass through its servers.
- SMTP2GO, a company based in New Zealand, will send the website’s automated emails, such as the one letting you know that sign-ups are open.
Transfers abroad
Form data stays in Switzerland. Emails, however, may also be processed abroad, always with a level of data protection that the Swiss Federal Council and the European Commission recognise as adequate.
Google may also process them in the United States: Google LLC is certified under the Swiss-US and EU-US Data Privacy Frameworks. SMTP2GO is based in New Zealand, which Switzerland and the European Union recognise as a country with adequate data protection.
Cookies
This website uses only technical cookies, which it needs in order to work. It uses no tracking, analytics or advertising cookies: that’s why it doesn’t ask for your consent or show you a banner.
The session is stored in a file on our server and doesn’t record your IP address or your browser.
| Cookie | What it’s for | How long it lasts |
|---|---|---|
| bagai-session | recognises your visit from one page to the next, so the forms work and can show you the result of your submission | 2 hours from your last activity |
| XSRF-TOKEN | protects the forms against forged submissions from other websites (CSRF) | 2 hours from your last activity |
You can block or delete cookies in your browser settings; without the session cookie, however, the forms can’t be sent.
No third-party content
The fonts, scripts and images on this website are all on our own server. When you visit bagai.ch, your browser doesn’t contact any other website: no Google Fonts, no CDNs, no social media buttons, no embedded maps or videos.
No profiling
We don’t make automated decisions or carry out profiling with form data.
How we protect it
We protect the data with appropriate technical and organisational measures. Access is restricted to the people who need it for their work.
The website can only be reached over an encrypted connection (HTTPS). The server can only be accessed with a cryptographic key, and the database can’t be reached from the network.
Your rights
Regarding your data, you can ask us at any time to:
- tell you what data we hold and give you a copy;
- correct it;
- delete it;
- restrict its processing, or object to it;
- provide it in a machine-readable format (portability);
- withdraw your consent, without affecting anything done before.
To do so, email info@bagai.ch. We’ll reply within 30 days. To make sure the request comes from you, we may ask you to confirm your identity.
Complaints
In Switzerland, you can contact the Federal Data Protection and Information Commissioner (FDPIC).
If you live in the European Union, you can contact the supervisory authority in your country; in Italy, that’s the Garante per la protezione dei dati personali.
Changes
If we change the way we handle data, we’ll update this page and the date at the top.