Privacy Policy

1. Controller

digital opua GmbH, Rossblattenstrasse 4, 6318 Walchwil, Switzerland (UID CHE-435.289.702) is responsible for the processing of personal data described here. Contact: welcome@digital-opua.ch. Further details are in the Imprint.

2. Scope

This policy applies to the websites and services under the domains mineralis.io (public website and beta waitlist) and app.mineralis.io (the Mineralis research application, private beta). Other websites of digital opua GmbH have their own privacy policies.

3. Applicable law

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP, revised 2023) and, where applicable, the EU General Data Protection Regulation (GDPR).

4. What we process, and why

Server logs

IP address, timestamp, requested URL, referrer, and user agent are recorded by our hosting provider to operate the service, diagnose faults, and defend against abuse. Application logs written by Mineralis itself do not contain e-mail addresses; for waitlist signups only the domain part of the address is logged.

Beta waitlist (mineralis.io)

If you join the waitlist we store your e-mail address and, if you provide them, your name, your intended use case, the page you signed up from, and the time of signup. We use this data to contact you about beta access and the launch of Mineralis, and to understand who is interested in the product. The data is kept until you ask us to remove it or until the waitlist is closed after launch.

User accounts (app.mineralis.io)

Sign-in and account management are provided by Clerk (see section 5). We store your Clerk user identifier and e-mail address in our own database to link your account to your data (watchlists, subscription tier, audit trail of account actions). Accounts are kept for as long as the account exists.

AI research chat (app.mineralis.io)

Questions you ask in the research chat, together with the conversation context, are sent to an AI model to generate the answer (see section 5). Mineralis does not store your conversations: the conversation history is held in your browser for the duration of the session and is resent with each question. Please do not enter personal data of third parties into the chat. Mineralis rate-limits and logs chat usage (user identifier, number of messages, timestamps) to operate the beta fairly. Should we introduce stored conversation history, this section will be updated before that change goes live.

Web analytics

For reach and page-speed measurement we use the analytics built into our hosting (Vercel Web Analytics on both domains, Vercel Speed Insights on mineralis.io). Both are cookie-free, do not identify individual visitors, and do not track you across other websites. All requests stay on our own domain.

5. Processors and data locations

We rely on the following service providers to run Mineralis:

• Vercel Inc., USA — hosting of both websites, serverless compute in Frankfurt (region fra1), Web Analytics and Speed Insights, and the AI Gateway that forwards chat requests to the AI model provider. Edge locations worldwide, data processing agreement under GDPR Art. 28.
• Neon Inc., USA — managed PostgreSQL database; our data (waitlist, accounts, company data) is stored in the AWS region eu-central-1 (Frankfurt, Germany).
• Clerk Inc., USA — authentication and user management for app.mineralis.io. Clerk stores identity data (e-mail address, name, sign-in metadata) on servers in the United States; Clerk does not offer EU data residency. The transfer is covered by Clerk's certification under the EU-U.S. Data Privacy Framework and its Swiss-U.S. extension. Your research data is not stored with Clerk.
• Anthropic PBC, USA — AI models (Claude) that generate the research chat answers and company profile texts. Chat messages are transmitted to Anthropic via the Vercel AI Gateway to produce the response and are processed under Anthropic's commercial terms and its privacy policy.
• Voyage AI, USA — text embeddings used to index public company filings for search. Only document text from public filings is processed, no user data.

Where personal data is transferred to the United States, the transfer relies on the provider's certification under the Data Privacy Framework or on the EU Standard Contractual Clauses with the Swiss addendum.

6. Cookies

mineralis.io sets no cookies. app.mineralis.io uses strictly necessary session cookies set by Clerk to keep you signed in. We do not use advertising or cross-site tracking cookies, and we do not sell personal data.

7. Your rights

You have the right to access, rectify, and delete your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, or to be removed from the waitlist, write to welcome@digital-opua.ch. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if the GDPR applies to you, with your local supervisory authority.

8. AI crawlers and public content

The public content of mineralis.io is intended to be readable by search engines and AI crawlers. No personal data is processed in that context.

9. Changes

We may update this policy to reflect changes in law or in the services we use. The date at the top of the page shows the last revision.