In short: we collect as little as we can, use it only to serve you, never sell it, and keep what you share with us confidential. Our website uses no tracking cookies.
Who we are
True Momentum, Alte Landstrasse 152, 8700 Küsnacht, Switzerland, contact@true-momentum.com (details in our Imprint). Write to us with any question.
What we use, and why
- What
- Website visits (IP address, browser, pages)
- Why
- To run and secure the site. Plausible counts visits without cookies or personal data.
- Legal basis
- Legitimate interest
- What
- Email, name, company
- Why
- To answer you, send your True Momentum Checkup result, and deliver our services
- Legal basis
- Contract / legitimate interest
- What
- Your Brief, figures and Roadmap
- Why
- To produce your analysis. Nothing else.
- Legal basis
- Contract
- What
- Public information about your business
- Why
- To put your figures in context, at your instruction
- Legal basis
- Contract / legitimate interest
- What
- Order and invoice data
- Why
- Payment, and our 10-year bookkeeping duty (Art. 958f CO)
- Legal basis
- Contract / legal duty
- What
- Marketing emails
- Why
- Only if you opt in; unsubscribe any time
- Legal basis
- Consent
Giving us this information is voluntary, but without it we cannot conclude or perform a contract with you. Stripe handles card details; they never reach us. Our site sets no cookies, apart from the ones Stripe needs to process payment securely at checkout. We take no decisions about you by automated means that have legal or similarly significant effects; the Checkup score is an automated indication only, and every report is reviewed by a person.
Your business data stays confidential
We don't sell, share or reuse what you give us for other clients, and we don't use it for marketing without your permission. What we learn may inform our methodology in anonymised, aggregated form that does not identify you. If the law forces us to disclose anything, we tell you first where we are allowed to. This commitment has no time limit. If your Brief contains personal data about other people, you remain responsible for it as controller, and we will conclude a data processing agreement with you on request.
How we use AI
Your True Momentum Brief is analysed with AI services from Anthropic, OpenAI and Google. We use only their API services, which don't train on your content. A senior advisor reviews every report.
Who else is involved
Our service providers, bound by data protection agreements and confidentiality: Vercel, Sanity and Cloudflare (website), Plausible (visit statistics), Supabase (database, [EU/Swiss region]), Google Workspace (email), SMTP2GO (email delivery), Stripe (payments), and the AI providers above. We also involve our accountant and, where needed, our legal advisors. Some providers are based in the USA or New Zealand. We transfer data abroad only to countries with adequate protection, to US providers certified under the Data Privacy Framework, or under the EU Standard Contractual Clauses. You can ask us which applies.
How long we keep it, and how we protect it
Briefs and reports: 24 months after our work ends. Other correspondence: 24 months. Accounting records: 10 years, as Swiss law requires. We keep data longer where we need it to establish, exercise or defend legal claims. You can ask us to delete things sooner, unless the law or an ongoing claim requires us to keep them. We protect your data with encryption, restricted access and two-factor authentication, and we tell you promptly if a breach is likely to put you at serious risk. No system is entirely secure, and we cannot guarantee the security of data while it travels over the internet.
Your rights
You can ask for a copy of your data, or have it corrected, deleted, restricted or sent to you or someone else. You can withdraw consent at any time, with effect for the future.
You can object at any time to processing based on our legitimate interest, on grounds relating to your situation, and to direct marketing at any time without giving reasons.
Write to contact@true-momentum.com; we reply within 30 days, free of charge, and may extend that period for complex requests. If you have a complaint, tell us first, and we acknowledge it within 30 days. You can also contact the Swiss FDPIC (Bern), your local EU authority or the UK ICO. These rights apply under Swiss data protection law, the GDPR and the UK GDPR, and we extend them to clients in the USA. We do not sell personal data or share it for advertising. If we change this policy, the version above changes with it.