nFADP Privacy Policy

IOSOR — PRIVACY POLICY (nFADP-ORIENTED)
IOSOR — Version 1.0.2 | Effective 2026-07-18
Binding language: English
The English language version of these documents is the sole legally binding text. Any summary or UI text in another language is provided for convenience only.

Operator: IOSOR is a B2B omnichannel communications project operated from the Lausanne area, Canton of Vaud, Switzerland. Formal Swiss company registration will be completed in due course; until then these documents refer to the project operator as “IOSOR” or “Provider”.
Contact: support@iosor.com


1. SCOPE
This policy explains how IOSOR processes personal data of website visitors, leads, and B2B client users. It is drafted to align with the Swiss Federal Act on Data Protection (nFADP) and, where relevant, GDPR.

2. CONTROLLER / OPERATOR
Until Swiss company registration is completed, IOSOR as described in the header acts as the operator responsible for this processing. Contact: support@iosor.com.

3. DATA WE PROCESS
Depending on interaction: identity and contact data (name, email, phone, company, website); preferred channel handles; account credentials metadata; billing and top-up request data; traffic/usage logs (destination, channel type, cost, status); support messages; technical logs (IP, user agent, timestamps); electronic signature records (name, hash, IP, locale).

4. PURPOSES AND LEGAL BASES (nFADP / GDPR where applicable)
- Providing the platform and prepaid services (contract / pre-contract).
- Security, fraud prevention, AUP enforcement (legitimate interest / legal obligation).
- Support and account management (contract / legitimate interest).
- Legal claims and compliance (legitimate interest / legal obligation).
- Marketing only where permitted and, where required, with consent.

5. SUBPROCESSORS / INFRASTRUCTURE
We use reputable infrastructure and messaging providers (e.g. hosting/CDN, database/auth, email delivery, SMS/voice connectivity). Data may be processed in Switzerland, the EEA, and other locations with appropriate safeguards where required.

6. RETENTION
We retain data as long as needed for the account, legal obligations, and dispute resolution, then delete or anonymise where practicable.

7. YOUR RIGHTS
Subject to Swiss (and where applicable EU) law: access, correction, deletion, restriction, objection, and portability where applicable. Contact support@iosor.com. You may lodge a complaint with the Swiss FDPIC (and, if applicable, an EU supervisory authority).

8. SECURITY
We apply organisational and technical measures appropriate to B2B communications infrastructure (access control, encrypted transport, least privilege where feasible). No method is 100% secure.

9. INTERNATIONAL TRANSFERS
Where data leaves Switzerland/EEA, we use appropriate safeguards (e.g. contractual clauses) as required.

10. COOKIES AND SIMILAR TECHNOLOGIES
10.1 The IOSOR website and Client dashboard use strictly necessary cookies and similar storage required for security and core functionality (for example session authentication, CSRF protection, and preferred UI language). These are essential to operate the service and are not used for advertising.
10.2 We do not currently set optional analytics or marketing cookies on the public website. If we introduce such technologies later, we will update this policy and, where required by applicable law, obtain consent before non-essential cookies are placed.
10.3 You can control cookies through your browser settings; blocking essential cookies may prevent login or language persistence.

11. CHANGES
We may update this policy and publish a new version/effective date. Material changes affecting clients will be notified via the platform or email where appropriate.

12. ENGLISH PREVAILS
The English language version of these documents is the sole legally binding text. Any summary or UI text in another language is provided for convenience only.