AndThen

AndThen Privacy Policy

AndThen is a lean app for teams’ 1:1s, reviews and probation check-ins, currently in a closed beta. This website is operated by AndThen AG i.G. On this website you can ask us for a call about AndThen or join the waiting list for updates.

1. What is the purpose of this privacy policy?

This Privacy Policy explains how AndThen AG i.G., Gustav-Gull-Platz 11, 8004 Zurich, Switzerland (“Controller”, “we”, “us” or “our”) collects, uses and discloses your personal data as a Controller when you visit the AndThen website, ask us to contact you, join our waiting list or otherwise engage with us (“Website”).

We take the privacy of our users very seriously and process personal data in accordance with the Swiss Federal Act on Data Protection (“FADP”) and, where applicable, the General Data Protection Regulation (EU) 2016/679 (“GDPR”) (together “Applicable Data Protection Laws”).

2. Who is the Controller of your personal data?

AndThen AG i.G., Gustav-Gull-Platz 11, 8004 Zurich, Switzerland is the Controller within the meaning of Applicable Data Protection Laws in relation to the processing of your personal data.

You may address any questions you have to the following email address: [email protected]

3. Which personal data is collected and processed, when, and why?

3.1 Technical logs when you use our Website

While you access our Website we collect and process the following (personal) data:

  • Time zone information: time zone settings of the system or device.
  • Language settings: language preferences set on your system or device.
  • User agent information: details about your browser, such as its name and version.
  • System hardware information: details about the type of device you are using, such as whether it is a PC, smartphone or macOS device.
  • Network information: IP address, network information (e.g. WHOIS data) and inferred or approximate geolocation based on your IP address.

We collect and process this data for the following purposes:

  • Access facilitation: to enable you to access and use our Website.
  • Optimisation of our Website: to adapt the Website’s functionality to your system configuration and preferences.
  • Security and stability: to ensure the security, integrity and stability of our Website, including detecting and preventing fraudulent activity and protecting our network infrastructure.

The processing of this personal data is based on our legitimate interests in ensuring the functionality, security and continuous optimisation of our Website (art. 6 (1) (f) GDPR).

3.2 Requesting a call

If you ask us for a call, we collect and process your work email address, first and last name, company, job title, country, the size of your company and, if you give it, your phone number. The form shows which fields are optional.

We collect and process this personal data to contact you, arrange and hold the call, tell you about AndThen and, if you decide to use it, set up your team.

The processing of this personal data is based on:

  • steps taken at your request before entering into a contract between you or your organisation and us (art. 6 (1) (b) GDPR);
  • our legitimate interests in answering your request and communicating with you about AndThen (art. 6 (1) (f) GDPR).

3.3 Booking a time

After requesting a call you can pick a time directly. Bookings are made through Cal.com, which receives the details you enter there (such as your name, email address and chosen time) and sends us the booking. Calls take place on Google Meet. Cal.com and Google process this data as our service providers (see section 5).

3.4 Waiting list

If you join the waiting list, we collect and process your email address. The purpose is to send you a few short updates about AndThen, for example when places in the beta open up.

The processing of this personal data is based on your consent, which you give by joining the waiting list (art. 6 (1) (a) GDPR). You can withdraw it at any time by contacting us as described in section 9; we will then remove you from the list.

3.5 Communication and other requests

If you contact us with a question or request, we store and process your name, contact details and the content of your communication, to communicate with you about AndThen and our Website and to answer your queries.

The processing of this personal data is based on our legitimate interests in providing support and communicating with you (art. 6 (1) (f) GDPR) and, where your request relates to a contract, on the performance of that contract (art. 6 (1) (b) GDPR).

4. Do we use cookies and other tracking technologies?

We do not use cookies or other tracking technologies on our Website. If you sign in to the AndThen app, a strictly necessary cookie keeps you signed in. If this changes, we will inform you as required by applicable law.

5. Do we share your personal data with third parties?

Generally, only AndThen and its team have access to your personal data.

We may share your data with service providers (e.g. hosting and cloud providers, email providers, scheduling and video-call providers, SaaS providers, IT and software providers, AI tool providers) that work as data processors on behalf of or in cooperation with AndThen.

All third parties who have access to personal data on the Website are bound by strict confidentiality agreements and have, to the extent required by law, signed so-called data processing agreements.

We may also disclose your data if we are legally required to respond to subpoenas, court orders, claims, legal proceedings or other legal obligations.

Additionally, we may share your data if we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, emergencies involving potential threats to the physical safety of any person, violations of our terms of use, or if it is otherwise required by law.

Finally, we may also share your data with other third parties if you have given your consent, if we are obliged to do so under legal, regulatory or business requirements, if it is necessary in connection with a merger with another organisation, or if it is required in connection with legal proceedings or to establish or defend legal claims.

6. Do we transfer your personal data abroad?

We may transfer your data to third parties located abroad in connection with the purposes described in this Privacy Policy. The countries to which your personal data may be transferred include:

  • EU
  • UK
  • USA

If a country provides a lower level of data protection than Switzerland or the European Union, as is the case for the US, we rely on the Swiss–U.S. or EU–U.S. Data Privacy Framework where applicable, and/or use contractual agreements, specifically the EU Standard Contractual Clauses (SCCs) including a Swiss Addendum as required under the FADP, or other legal agreements, to ensure that your data is adequately protected.

7. How long do we retain your personal data?

We keep the personal data from call requests and other communication for as long as we are in contact about AndThen. If you or your organisation become a customer, we keep it for the duration of the contract plus any statutory retention requirements, generally ten (10) years after our last contact with you.

We keep your email address on the waiting list until you ask us to remove it.

Logs of the use of our Website are stored for back-up, analytics and security purposes.

If we have a legal obligation to store personal data for a longer period than the above, we comply with such requirements. We may also store your personal data for longer periods if we or third parties have an overriding interest in doing so (e.g. if this is necessary in connection with legal proceedings or to establish or defend legal claims).

8. How do we protect your personal data?

We want you to feel confident about using our Website. To this end, we have put in place appropriate technical and organisational safeguards intended to protect your data against accidental loss as well as unauthorised access, misuse, modification or disclosure. Nonetheless, as the internet is inherently open, we cannot guarantee that unauthorised individuals will never circumvent these safeguards or misuse your personal information for improper reasons.

For added protection, this Website uses TLS encryption to secure the transmission of information, including any requests you submit to us as the website operator.

All partners, employees and external service providers who access your information (including personal data) are bound by strict confidentiality requirements.

9. What rights do you have as a data subject?

Under the conditions and within the limits of applicable data protection laws, you have the following rights:

  • right of access;
  • right to rectification;
  • right to erasure (“right to be forgotten”), subject to statutory retention obligations;
  • right to restriction of processing;
  • right to data portability (where applicable);
  • right to object to processing based on legitimate interests.

Furthermore, you have the right to lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (www.edoeb.admin.ch). In the EU, the data protection authority of the country you are based in is responsible. You can find the respective data protection authorities here.

If you have given your consent for the processing of your personal data for a specific purpose, you have the right to withdraw it at any time. Once we receive notification that you have withdrawn your consent, we will no longer process your personal data for the purpose(s) you originally agreed to, unless we have another legitimate basis to do so.

Please note that we may refuse or restrict the exercise of these rights on legal grounds or as permitted under data protection laws. In such cases, we will inform you of the reasons for our decision as required by law.

If you wish to exercise any of the rights listed above, you can contact us at [email protected]. At our discretion, we may request proof of identity in order to process your request. If you contact us, we will do our best to respond as soon as possible and take the necessary steps accordingly.

10. Updates to this Privacy Policy

We reserve the right to update and amend this Privacy Policy from time to time to reflect changes in the way we process your personal data or due to changes in legal requirements. Any changes will be published on this Website. Please check back regularly to stay informed about updates or changes to our Privacy Policy.

Material changes will be communicated through the Website, by email or other suitable means.

Effective date: 11 November 2026
Last update: 11 November 2026