Privacy Notice

Resilient SA · Version 1.2 · Effective date: June 2026
Data controller: Resilient SA, Lausanne, Vaud, Switzerland
Data protection contact: Max Grossenbacher, info@resilient.ai
Applicable law: Swiss Federal Act on Data Protection (nDSG / revDSG, in force since 1 September 2023); EU General Data Protection Regulation (GDPR) where applicable to EEA residents.

1. Who we are

Resilient SA (CHE-343.059.581) is a Swiss company incorporated under Swiss law, with its registered office in Belmont-sur-Lausanne, Canton de Vaud, Switzerland. We develop AI-powered employee wellbeing and burnout prevention solutions for organisations. Our websites include resilient.ai and related subdomains and microsites (including the Burnout Cost Calculator at calculator.resilient.ai and the pilot signup form at join.resilient.ai).

2. What personal data we collect and why

2.1 Website contact forms

When you submit a contact form on our website, we collect your name, email address, company name, and the content of your message. We use this data to respond to your inquiry. Legal basis: our legitimate interest in responding to business inquiries (nDSG Art. 31 / GDPR Art. 6(1)(f)).

2.2 Burnout Cost Calculator (calculator.resilient.ai)

When you use our Burnout Cost Calculator, we collect your work email address and the organisational data you enter (company size, sector, location). We use this data to generate and send you your personalised results report. If you have ticked the consent checkbox on the form, we may also send you occasional insights and updates about employee wellbeing from Resilient SA. Legal basis for sending the report: performance of a service you have requested (nDSG Art. 31 / GDPR Art. 6(1)(b)). Legal basis for marketing communications: your explicit consent (nDSG Art. 31 / GDPR Art. 6(1)(a)). You may withdraw consent at any time by clicking the unsubscribe link in any email we send you.

2.3 Pilot signup form (join.resilient.ai)

When you sign up for a Resilient pilot programme through our signup form, we collect your name and your chosen wearable colour, and optionally your work location and email address if you provide them. We use this data to enrol you in the pilot, arrange your device, and contact you about getting started. Legal basis: performance of a service you have requested and steps taken at your request prior to participation (nDSG Art. 31 / GDPR Art. 6(1)(b)).

As part of the pilot, you may choose to join a WhatsApp support group operated by Resilient SA. Membership is optional and is used for support, feedback, and product updates. WhatsApp is provided by Meta Platforms, and your use of WhatsApp is also subject to WhatsApp's own privacy terms. Any health or wellbeing data generated in the Stoa app is handled separately and is never shared with your employer.

2.4 Website usage data (log files and cookies)

Our hosting infrastructure automatically records standard log data including IP addresses, browser type, pages visited, and timestamps. This data is used for security, performance, and analytics purposes. Legal basis: our legitimate interest in operating a secure and functional website.

We may use cookies to improve your experience. Where we use non-essential cookies or tracking technologies, we will ask for your consent via a cookie banner before activating them.

3. How long we keep your data

Contact form and calculator inquiry data: retained for up to 3 years from the date of last contact, unless you request deletion earlier.
Pilot signup data: retained for the duration of the pilot and for up to 12 months afterwards, unless you request deletion earlier.
Marketing communications: retained until you unsubscribe or withdraw consent.
Log files: retained for up to 12 months.

We delete or anonymise data when it is no longer needed for the purposes described in this notice.

4. Who we share your data with

We do not sell your personal data. We may share data with the following categories of trusted third-party service providers who process data on our behalf:

CRM and email delivery platforms (to send you your results and communications)
Cloud hosting and infrastructure providers
Messaging platforms (where you choose to join a pilot support group)
Analytics tools (aggregated, non-identifiable data only)

All third-party processors are contractually bound to process your data only on our instructions and in accordance with applicable data protection law. Where processors are located outside Switzerland or the EEA, we ensure adequate safeguards are in place (e.g. standard contractual clauses).

5. Your rights

Depending on your country of residence, you have the following rights regarding your personal data:

Right of access: you may request a copy of the data we hold about you.
Right to rectification: you may ask us to correct inaccurate data.
Right to erasure: you may ask us to delete your data where there is no overriding legal basis for us to retain it.
Right to restriction: you may ask us to limit how we process your data.
Right to data portability: you may request your data in a structured, machine-readable format.
Right to object: you may object to processing based on legitimate interests.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@resilient.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch, or with the supervisory authority in your EU member state if applicable.

6. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews of our infrastructure.

7. Children

Our services are not directed at persons under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us at info@resilient.ai and we will delete it promptly.

8. Changes to this notice

We may update this Privacy Notice from time to time. Where changes are material, we will notify you by email (if we hold your address) or by posting a prominent notice on our website. The effective date at the top of this document will always reflect the most recent version.

9. Contact

Resilient SA
Lausanne, Vaud, Switzerland
Email: info@resilient.ai
Website: www.resilient.ai