Privacy Policy

Data Controller (marketing site):
Adamas Group SA
Route des Acacias 43, 1227 Geneva, Switzerland
Email: mail@stak.pe

Data Processor (application data):
Adamas Group SA processes application data on behalf of our customers (the data controllers for their investor and deal data). A Data Processing Agreement is available at /legal/dpa.

Marketing site visitors:

• Contact information submitted via forms (name, email, company)
• Usage analytics (pages visited, interaction time, referral source)
• Device and browser information (user agent, screen resolution, IP address)
• Cookie data (subject to your consent preferences)

Platform users:

• Account data (name, email, role, organization)
• Customer data (deals, investors, investments, documents) — processed on behalf of the customer
• Payment information (processed by our payment provider)
• Usage logs and audit trail

Demo environment data is entirely fictitious and does not contain real personal data.

• Consent — For marketing emails, analytics cookies, and marketing cookies. You may withdraw consent at any time.
• Contractual necessity — To provide the Service under your subscription agreement.
• Legitimate interest — For security monitoring, fraud prevention, and service improvement.
• Legal obligation — For tax records, regulatory compliance, and law enforcement requests.

We use the following subprocessors to operate the Service:

For transfers outside the EEA/Switzerland, we rely on Standard Contractual Clauses (SCCs) per GDPR Art. 46(2)(c) and equivalent safeguards under nFADP.

• Marketing cookies: up to 1 year (with consent)
• Audit logs: 30 days (Starter), 1 year (Professional), unlimited (Enterprise)
• Account data: until account deletion request or termination
• Post-termination backup: up to 30 days, then permanently deleted within 90 days

Under GDPR (Art. 15–22):

• Right to access your personal data (Art. 15)
• Right to rectification of inaccurate data (Art. 16)
• Right to erasure / "right to be forgotten" (Art. 17)
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing (Art. 21)
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Under Swiss nFADP (Art. 25–29):

• Right to information (Art. 25)
• Right to access (Art. 26)
• Right to correction (Art. 27)
• Right to deletion (Art. 28)
• Right to restrict processing
• Right to data portability

To exercise your rights, contact us at mail@stak.pe with the subject line "Data Protection Request". We will respond within 30 days.

We use cookies and similar technologies. You can manage your cookie preferences at any time. For full details, see our Cookie Policy.

• 256-bit TLS encryption for data in transit
• AES-256 encryption for data at rest
• Two-factor authentication (2FA/TOTP)
• Role-based access control (RBAC)
• Full audit logging of all data access
• Rate limiting and DDoS protection
• Security headers (CSP, HSTS, X-Frame-Options)

For more details, visit our Security Trust Center.

We do not sell personal data to third parties. We share data only with subprocessors listed in Section 4, and only as necessary to provide the Service.

We may disclose data if required by law, court order, or to protect the rights, property, or safety of Adamas Group SA, our users, or the public.

We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days before they take effect. The "Effective Date" at the top reflects the most recent version.

For data protection inquiries:

Adamas Group SA
Route des Acacias 43
1227 Geneva, Switzerland
Email: mail@stak.pe

You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.