Switch

Privacy Policy

Effective as of: 3 November 2026

Switch Agent Oy (formerly Switch Visual Oy) (“Switch”, “we”, “us”) is committed to protecting your privacy and processing personal data lawfully and transparently. This Privacy Policy explains how we process personal data when we act as a controller, including in connection with our website, accounts, billing, and customer support, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish and EU data-protection laws. When we process personal data on behalf of a customer, the Data Processing Agreement (DPA) applies instead.

1. Who We Are

  • Controller: Switch Agent Oy (formerly Switch Visual Oy)

  • Business ID: 3561539-8

  • Address: Helsinki, Finland

  • Email: jakob@switchagent.io

We act as a controller when we determine the purposes and means of processing personal data for our own business purposes. When we process personal data on behalf of a customer to provide the Services, including data accessed through Microsoft Teams or Slack integrations, the customer is the controller and Switch acts as processor under the DPA. That processing is not governed by this Privacy Policy.

2. What Data We Collect

Depending on how you interact with us, we may process the following categories of personal data when acting as a controller:

  • Identification and contact data: name, company name, email address, phone number, and billing address.

  • Account data: account identifiers, login-related information, and user preferences.

  • Payment data: payment and subscription information processed through Stripe; we do not store full credit-card details.

  • Technical and usage data: IP address, browser type, device information, and service or website usage logs.

  • Support and communications data: messages, emails, or support requests you send to us.

  • Customer content and integration data: content submitted through the Services or made accessible through an authorized integration may contain personal data. Where we process that data on behalf of a customer, the DPA governs the processing and this Privacy Policy does not apply to it.

3. Purposes and Legal Bases of Processing

We process personal data only when we have a lawful basis under GDPR:

  • Contract performance (Art. 6(1)(b)): to provide and manage your account, deliver services, and process payments.

  • Legal obligations (Art. 6(1)(c)): for accounting, tax, and regulatory compliance.

  • Legitimate interests (Art. 6(1)(f)): to secure our systems, prevent fraud, improve services, and provide customer support.

  • Consent (Art. 6(1)(a)): where required for optional features (e.g. newsletters, cookies for marketing).

4. How We Use Personal Data

When acting as a controller, we use personal data to:

  • Provide and operate our AI-powered Services, including account features and customer support.

  • Manage accounts, billing, and subscriptions.

  • Respond to requests and communicate about the Services.

  • Secure, maintain, and improve our platform and services.

  • Meet legal and contractual obligations.

When a customer authorizes an Integration with Microsoft Teams or Slack, Switch accesses and processes workspace or tenant data within the permissions granted and only to provide the Services requested by the customer. The customer is responsible for obtaining any required administrator consent and managing which users may use the Integration. Processing of personal data through an Integration on the customer's behalf is governed by the DPA, not this Privacy Policy. An administrator may revoke access by uninstalling the Switch app or removing the related consent; features dependent on the Integration will then stop working.

We do not sell or rent personal data.

5. Sharing and Disclosure

When acting as a controller, we may share personal data with:

  • Service providers: providers that support hosting, cloud storage, analytics, communications, customer support, security, and operation of the Services.

  • Payment provider: Stripe, for payment processing.

  • Legal authorities or other recipients: where required by law or necessary to protect rights and security.

We require service providers to protect personal data under appropriate contractual terms. Where a provider processes personal data on behalf of a customer through the Services, the DPA and its sub-processor terms apply.

6. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards (such as the EU Commission’s Standard Contractual Clauses) are in place.

7. Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy:

  • Contractual data: kept for the duration of the agreement and up to 6 years for legal obligations.

  • Account data: deleted or anonymised within 30 days of termination, unless required by law.

  • Technical logs: generally retained up to 12 months.

8. Data Subject Rights

Under GDPR, you have the following rights:

  • Access – obtain confirmation and a copy of your personal data.

  • Rectification – request correction of inaccurate or incomplete data.

  • Erasure – request deletion of your data (“right to be forgotten”).

  • Restriction – request limitation of processing in certain cases.

  • Portability – receive your data in a structured, machine-readable format.

  • Objection – object to processing based on legitimate interests or direct marketing.

  • Withdraw consent – where processing is based on your consent.

To exercise these rights, contact us at jakob@switchagent.io. We may require verification of identity.

If you are not satisfied with our response, you may lodge a complaint with your local data protection authority. In Finland, this is the Office of the Data Protection Ombudsman: https://tietosuoja.fi.

9. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. Access to data is restricted to authorised personnel only.

10. Cookies and Tracking

Our website and platform may use cookies or similar technologies for essential functionality, analytics, and (where consent is given) marketing. You can manage your preferences through your browser settings or our cookie banner.

11. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. Significant changes will be notified via email or platform notice at least 14 days in advance.

12. Contact

For questions, concerns, or requests regarding your personal data, please contact:

Switch Agent Oy (formerly Switch Visual Oy)

Business ID: 3561539-8

Helsinki, Finland

Email: jakob@switchagent.io