Privacy Policy

Last updated: 19 August 2026

This Privacy Policy explains how Stepwave ("Stepwave", "we", "us") collects and processes personal data when you use our website (www.stepwave.ai]) and interact with our contact and reservation form.

1. Controller

Stepwave is currently in formation and not yet incorporated. Until incorporation, the person responsible for the processing of your personal data (controller) is:

Dr. Patrick Manser
Stepwave AG (in formation)
Switzerland
Email: patrick@stepwave.ai

Upon incorporation, the newly founded company will assume the role of controller; this policy will be updated accordingly once incorporated.

2. What we collect

Contact and reservation form. When you use our form (to reserve your spot, make a referral, or explore a partnership), we collect: your chosen intent, the category that best describes you (e.g., health professional, family member, investor), your name, your email address, and – where you provide one – your message.

Health-related information. If you select a category such as "Person with early memory concerns", or if your message contains information about your health or the health of a person you refer, this constitutes sensitive personal data under Swiss data protection law. We process such information only because you have chosen to share it with us and express consent by submitting your information voluntarily, and only to respond to your request and manage your reservation or referral. You are not required to share health-related information – you may select "Other" instead and/or decide not to leave a message. You can ask us to delete that data at any time (see Section 8).

Newsletter. If you sign up for our newsletter, we use your email address to send it to you. You can unsubscribe at any time via the link in each newsletter or by contacting us at info@stepwave.ai.

Technical data. When you visit the website, our hosting provider processes standard server logs (e.g., IP address, browser/user agent, date and time of access, pages requested) as necessary for security and operation of the site.

Analytics. We use Google Tag Manager and Google Analytics, services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA), to measure and analyze how our website is used. These services use cookies and similar technologies and process usage data such as pages visited, time and duration of your visit, approximate location, device and browser information, and a truncated/processed form of your IP address. You can opt-out at any time in the cookie settings. Further information: https://policies.google.com/privacy.

Email. If you contact us directly at info@stepwave.ai, we process the personal data contained in your email in order to respond.

Fonts. The fonts used on this website are licensed and hosted on our own web servers. No connection to third-party font services (such as Google Fonts) is established when pages load.

External links. Our website links to third-party sites (e.g., LinkedIn, scientific publishers, project websites). Any data that are provided on those platforms is processed under their own privacy policies.

3. Purposes of processing

  • To register your reservation, referral, or partnership inquiry and contact you about it.
  • To inform you about Stepwave's launch, updates, and participation opportunities, and to send you our newsletter, where you have requested this.
  • To manage our relationship with you (e.g., reply to inquiries).
  • To secure and operate the website (fraud/spam prevention, troubleshooting).
  • To analyze the use of our website and improve our online offering.

4. Legal bases

Under the Swiss Federal Act on Data Protection (FADP), we process your personal data in accordance with the principles of lawfulness, proportionality, and transparency.

5. Recipients and processors

We do not sell your personal data. We share it only with service providers (processors) that we need to run the site and manage communications, or where required by law. These currently include:

  • Website hosting: Hostpoint AG (Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland) and TYPO3 (Bahnhofstrasse 4, CH-6340 Baar, Switzerland.
  • Form handling: Hostpoint AG and TYPO3.
  • Email: Hostpoint AG.
  • Web analytics: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Tag Manager and Google Analytics; parent company Google LLC, USA).
  • Website development and maintenance: Violetta Digital Craft GmbH, Waldheimstrasse 22, 6010 Kriens, Switzerland.

All processors are contractually bound to process personal data only on our instructions and to protect it appropriately.

6. Disclosure abroad

Our website, server logs, contact form, and email are all operated by Hostpoint AG in conjunction with TYPO3 in Switzerland. Your personal data is processed and stored in Switzerland; we do not currently disclose personal data to recipients outside Switzerland.

Should we engage further service providers abroad in the future, we will only transfer personal data to countries with an adequate level of data protection or on the basis of appropriate safeguards (in particular standard contractual clauses), and we will update this policy accordingly.

7. Retention

We keep your personal data only as long as needed for the purposes above – for example, until you ask to be removed from our contact list, or until the reservation/pilot program is concluded – unless we must retain data longer to comply with legal obligations. Server logs are retained by our hosting provider for a limited period for security purposes.

8. Your rights

Under Swiss law you have the right to:

  • request information about the personal data we process about you (access),
  • receive your data in a portable format (where processing is based on consent or a contract)
  • have inaccurate data corrected, and/or
  • have your data deleted.

To exercise your rights or to unsubscribe from our updates, contact us at info@stepwave.ai. We may need to verify your identity before acting on a request.

You also have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. If you are located in the EU/EEA, you may contact the supervisory authority of your place of residence.

9. Data security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. However, no online service can be guaranteed 100 % secure.

10. Cookies and tracking

In addition to technically necessary cookies, our website uses analytics cookies and similar technologies (Google Tag Manager / Google Analytics). We do not use advertising or marketing cookies.

11. Updates

We may update this policy from time to time, in particular upon incorporation of the company or when we add new services or providers. The current version covers pre-incorporation phase of our company. Updated versions will always be published on this page.