Skip to content
vorenq

Privacy policy

This policy explains how personal data is processed when you use vorenq, in accordance with the revised Swiss Federal Act on Data Protection (revDSG). Where the EU GDPR also applies, we observe it.

1. Controller

The controller responsible for the data processing described here is MomentumQ GmbH, Leutschenbachstrasse 95, 8050 Zürich, Switzerland. Data-protection enquiries: info@momentumq.com.

2. What data we process

  • Account data — name, email address and a hashed password; workspace memberships.
  • Session data — a server-side session identifier stored in a cookie.
  • Usage / log data — IP address, timestamp and browser user-agent, kept for a limited period for security and troubleshooting.
  • Content you provide — task briefs, messages, files your AI team produces, and the connector credentials you add (stored encrypted; see “Security”).
  • Customer data you process through vorenq — when an AI agent acts in a connected tool (e.g. an inbox, accounting or payment system), it processes the data in that tool on your behalf; for that data you are the controller and we act as your processor.

3. Purposes and legal bases

We process the data to provide and secure the service (performance of the contract), to operate and improve it and prevent abuse (legitimate interest), and on the basis of your consent where required. Providing the data is voluntary, but without it the service cannot be used.

4. Disclosure to processors and third parties

To run the service we rely on the following categories of processors, who act only on our instructions:

  • AI model providers (to generate the work): Anthropic (Claude), Moonshot AI (Kimi), and — where you enable them — OpenAI, Google (Gemini) and Mistral AI.
  • Connector providers (only the ones you connect, and only for the actions you authorise): e.g. Bexio, Stripe, Slack, Microsoft 365, Google Workspace, Threema and others listed on the Integrations page.
  • Hosting and database: [hosting + database provider, e.g. Vercel + Postgres provider].

We do not sell personal data. We disclose data to authorities only where legally required.

5. Disclosure abroad

Some processors (notably several AI model and connector providers) are located outside Switzerland, including in the USA. Where a recipient is in a country without adequate protection, the transfer is safeguarded by appropriate measures (e.g. the EU Standard Contractual Clauses and, where applicable, the Swiss-US Data Privacy Framework).

6. AI-assisted processing and automated decisions

vorenq uses AI agents that read and act on data automatically. Actions that carry real-world consequences — moving money, messaging a customer, writing a financial record, signing — are routed through a guardrail that pauses them for your explicit human approval before they run. Where processing could amount to an automated individual decision under Art. 21 revDSG, you can request human review via the contact above.

7. Retention

We keep personal data only as long as needed for the purposes above or as the law requires, then delete or anonymise it. Deleting a workspace removes its agents, runs, files and connector credentials.

8. Security

Connector credentials are encrypted at rest (AES-256-GCM) and decrypted only server-side at the moment a connector runs; they are never returned to the browser. Passwords are stored only as salted hashes. Access is scoped per workspace, and transport is over HTTPS.

9. Cookies

We use only strictly necessary first-party cookies — a session cookie, the current-workspace selection, and your light/dark theme preference. We do not use advertising or third-party tracking cookies, so no consent banner is required.

10. Your rights

You have the right to information about your data (we respond within 30 days), and to its correction, deletion and to object to processing. Contact us at info@momentumq.com. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC/EDÖB).

11. Changes

We may update this policy; the current version always applies. Last updated: 15 June 2026.

This is a compliant-by-default draft tailored to vorenq. Confirm the bracketed details and have it reviewed by Swiss counsel before launch.