1. who we are
The Blank Collar GmbH (trade name: The Blank Collar LLC)
Im Boden 4, 5616 Meisterschwanden, Switzerland
legal form: limited liability company (GmbH) · registered office: Meisterschwanden, Canton of Aargau
commercial register: Handelsregister des Kantons Aargau · UID: CHE-236.387.045 · CH-ID: CH-020-4068341-5
managing director: Kristjan Kabashi (sole signatory)
hey@theblankcollar.com
this policy explains what personal data we collect when you visit blankcollar.ai or use the hosted service, why we collect it, and what your rights are under the swiss federal act on data protection (ndsg/fadp) and the eu general data protection regulation (gdpr) where applicable.
2. what we collect
- website visitors — server logs (ip, user-agent, timestamp, requested path) retained for up to 30 days for operations and abuse prevention.
- contact forms and email — the information you submit (name, work email, company, message).
- workshop bookings — meeting context required to scope the engagement.
- hosted tier accounts — account identifier, email, authentication metadata, and the sources you connect. the knowledge layer content itself lives in your tenant.
3. legal bases
we rely on: (a) performance of a contract when you are a customer, (b) legitimate interest for operations, security and basic analytics, (c) consent where required, (d) legal obligation where a swiss or eu authority compels disclosure.
4. hosting and data residency
the marketing site is delivered via a global cdn. the hosted product stores customer data in switzerland by default. eu-only residency is available on request. nothing is persisted in us infrastructure without explicit configuration.
5. subprocessors
we use a small number of subprocessors for hosting, email delivery, error monitoring, and payments. a current list is available on request at hey@theblankcollar.com.
6. model providers
the product routes prompts to third-party model providers (claude, openai, google, or open-weight hosts) based on your configuration. prompts and the context we attach are transmitted to the selected provider under its own terms. we do not permit providers to use your content for training where that option is available.
7. your rights
you may request access, rectification, deletion, restriction, portability, or objection. write to hey@theblankcollar.com. we respond within 30 days. you also have the right to lodge a complaint with the swiss federal data protection and information commissioner (fdpic) or your eu supervisory authority.
8. retention
server logs: up to 30 days. contact and workshop records: up to 24 months after last interaction unless a contract requires longer. customer accounts: for the lifetime of the contract and up to 12 months after termination for backup and dispute purposes.
9. security
transport encryption (tls 1.2+), encryption at rest, role-based access, audit logs on privileged operations, and least-privilege access for our team. a security summary is available under nda.
10. international transfers
if we transfer data outside switzerland or the eea, we rely on the commission's standard contractual clauses, the swiss transborder data flow equivalence, or your explicit consent.
11. children
the service is built for business use. we do not knowingly collect data from children under 16.
12. changes
we will post material updates on this page and, for hosted customers, notify the account admin by email. the "last updated" date at the top reflects the most recent revision.
13. contact
privacy questions: hey@theblankcollar.com.