Privacy Policy

Effective Date: [November 17th 2025] Last Updated: [November 17th 2025]

1. Introduction

We at Oten Switzerland GmbH (“OXU”, “we”, “us”, “our”) provide the OXU workspace and its product — a developer portal supporting application creation, publishing, monetization, identity/auth, access control, and distribution; a Store as an end user. This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you:

• Use the OXU workspace as a developer or end-user;

• Sign up for, access or publish an application via OXU developer portal; or

• Interact with the workspace's websites, portals, services, or interfaces.

2. What data we collect

2.1 Personal Information Depending on your role (Developer, Workspace Admin, Organization Admin, End User, or Viewer), we may collect:

• Contact and identity details (e.g., name, email address, organization, job title, phone number and so on)

• Account credentials and role assignment information

• Payment and billing information (e.g., billing address, invoice information, payment method metadata and so on)

• Usage data (which apps you publish, subscribe to, access, your role actions and so on)

• Developer and workspace metadata (workspace name, roles granted, permissions assigned)

2.2 Non-Personal / Technical Information We also collect or receive:

• Device and browser information with OS, version, browser type, screen resolution

• Log information and analytics of timestamps, feature usage, subscriber counts, API call volumes

• Cookies and tracking technologies to support authentication, security, analytics, preferences

We use your personal and non-personal information to:

We do not sell your personal information to third parties. We may share data when necessary including:

We retain personal data only as long as reasonably necessary for the purposes described or as required by law. Upon account termination or role removal, we will securely delete or anonymize your data, except where required for audit, compliance or legitimate business needs.

Depending on your region, you may have rights including:

We use cookies and similar tracking technologies to support core functionality (authentication, security), preferences, analytics, and user experience. You may disable or manage cookies via your browser settings, but please note disabling essential cookies may limit your ability to use the Platform fully.

We implement appropriate technical and organizational safeguards to protect your data of encryption in transit and at rest, access controls, regular security reviews, role-based monitoring, audit logs and multi-factor authentication where applicable. Nevertheless, no system is entirely risk-free, and we cannot guarantee absolute security.

As a global platform, your personal data may be transferred to, stored and processed in different countries, including where our service providers or operations are located. We ensure that appropriate safeguards are in place of standard contractual clauses, equivalent protections,… when transferring your data internationally.

The Platform is not intended for children under [ 16 or as per local law ]. We do not knowingly collect personal information from children without parental consent. If you become aware that a child has provided us with personal data, please contact us and we will delete that information.

We may update this Privacy Policy from time to time to reflect changes in practices or legal requirements. We will notify you by posting the revised policy with a new “Last Updated” date. We encourage you to review this document regularly.