Privacy policy
This policy explains which personal data we process when operating bots.work, why, and on what basis. It applies under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
Techfunder World AG
Industriestrasse 9
6302 Zug
Switzerland
E-mail: [email protected] · Phone / WhatsApp: +49 171 1254074
We have not currently appointed a representative in the EU under Art. 27 GDPR. We have not appointed a data protection officer; please send privacy requests to [email protected].
2. Visiting the website
When you open pages, your browser sends technically necessary data (IP address, date and time, address requested, referrer, browser and operating system details). We use it to deliver the website and to protect it against misuse (for example, by limiting sign-in attempts). Where server logs are kept, we delete them after at most 30 days unless they are needed to investigate a security incident. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
We serve fonts and all page components ourselves; no third-party content is loaded when you visit. We use no analytics, tracking or advertising services.
3. Cookies and local storage
We only set cookies and storage entries that are strictly necessary for the functions you use (sign-in, language, intro list). No consent is required for these (§ 25(2) no. 2 of the German TDDDG). The full list is on the Cookies page.
4. Intro requests and briefs by WhatsApp or e-mail
When you send your intro list or your brief, your device opens WhatsApp or your e-mail program with a prepared message. We only receive what you send (for example name, project, country, the profiles you picked, your pitch) and use it to answer your request and arrange introductions. We pass your pitch only to the people you asked to be introduced to. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract), otherwise Art. 6(1)(f). WhatsApp is operated by WhatsApp Ireland Limited (Meta); WhatsApp's own privacy policy applies to its use, and data may be transferred to the USA. We keep requests as long as needed for the business relationship, and business correspondence as long as the law requires.
5. Account and credits
For an account we process your e-mail address, name, organisation, role (project buyer or delivery partner), currency and language, as well as credits bought and used, orders (for introductions also your pitch and phone number), unlocked projects and your alert settings. The purpose is to provide the account and the paid services; the legal basis is Art. 6(1)(b) GDPR. For signing in, we store your private account link only as an irreversible hash. You can download your data and delete your account at any time in the account area; we then remove your details but keep booking and payment records as long as the law requires (in Switzerland usually 10 years, Art. 958f Code of Obligations).
6. Payments through Stripe
You pay for credits through Stripe. You enter payment details directly at Stripe; we receive no card data, only the amount, currency, status and a reference of the payment. For accounts in Switzerland, the contracting party is Stripe Payments Europe, Limited (Ireland). Stripe processes, among other things, your e-mail address, name, billing address, tax ID and payment data, partly as an independent controller (for example for fraud prevention and legal obligations), and may transfer data to other countries including the USA. Details: stripe.com/privacy. Legal basis: Art. 6(1)(b) and (c) GDPR.
7. E-mails from us
We send sign-in links, order confirmations and, if you switch them on in your account, alerts about new projects. You can switch alerts off in your account at any time.
8. Delivery-partner profiles
Under "Delivery partners" we show summaries of public posts in which people say themselves that they offer chatbot, voicebot or related implementation services (for example on Hacker News or public community and university boards). From these we only take the role, skills, experience, availability, work mode, industries and place (city/country), and we keep the link to the post internally. We do not copy names, usernames, e-mail addresses, phone numbers or photos, and no link to the post appears publicly. The purpose is to connect projects with possible bot partners; the legal basis is our legitimate interest, and that of the projects, in these introductions (Art. 6(1)(f) GDPR), the people concerned having made their availability public themselves. We only make contact through the channel the post itself names, and point to this policy when we do. You can object at any time: we remove or correct your profile when you write to [email protected], usually within 5 working days.
9. Project listings
Under "Projects" we show summaries of public posts and ads in which businesses seek chatbot or voicebot implementation. Publicly we show them without the project's name, website and source; signed-in users can unlock the name, website, the link to the source and the quote we checked with credits. We process personal data in them (such as the username on the linked post) on the basis of Art. 6(1)(f) GDPR. We remove or correct a listing on request ([email protected]). For internal work we use Notion (Notion Labs, Inc., USA), Gmail (Google) and a self-hosted WhatsApp connection.
10. Recipients and transfers abroad
Data is only received by the service providers named above for their task, by our team (BRNZ), and by authorities where we are legally obliged. The EU Commission has issued an adequacy decision for Switzerland. Transfers to countries without an adequate level of data protection (for example the USA) only take place with appropriate safeguards, such as the recipient's certification under the Data Privacy Framework or standard contractual clauses.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw any consent at any time. Write to [email protected]; downloading and deleting are also available directly in your account. You can lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your place of residence or work.
12. Security and automated decisions
The connection to the website is encrypted (HTTPS), and access to internal data is password-protected. We do not make automated individual decisions or create profiles.
13. Changes
We update this policy when our processing changes. The version published here applies.
Last updated: 18 October 2026