Privacy Policy

Last Updated: 31 January, 2026

RationalEdge AG (“RationalEdge”, “we”, “us”, or “our”), a Swiss company with registered offices at General-Wille-Strasse 19, 8002 Zürich, Switzerland (Commercial Register CHE-197.148.718), operates a security analysis platform (the “Service”).

This Privacy Policy explains how we collect, use, and share your information when you use our Service. By using the Service, you agree to this Privacy Policy.

1. WHAT INFORMATION WE COLLECT

Account Information:

• Name, email address, username, and password
• Company name and billing address (for business accounts)
• Payment information for paid subscriptions

Sample Submission Data:

• Complete content of files, URLs, or data you submit for analysis (“Samples”)
• IP address, date/time of submission, and browser information

Technical Data:

• IP addresses and device information when you access the Service
• Information about how you use the Service

IMPORTANT: Do not submit Samples containing confidential information, personal data, or trade secrets unless you have authorization and intend for such data to be shared with the security community.

2. HOW WE USE YOUR INFORMATION

We use your information to:

• Provide and operate the Service
• Manage your account and process payments
• Analyze Samples for security threats and generate reports
• Share Samples and analysis results with security partners and the community to improve global threat detection
• Communicate with you about the Service
• Improve and develop the Service
• Comply with legal obligations and protect our rights

3. WHO WE SHARE YOUR INFORMATION WITH

**IMPORTANT:** Do not submit Samples containing confidential information, personal data, or trade secrets unless you have authorization and intend for such data to be shared with the security community. Use the “Private” submission option if you need to keep Samples confidential to your organization.

Security Partners and Community: When you submit a Sample, how we share it depends on your submission choice:

• Public Samples: Shared with security vendors, researchers, and the community to enable collaborative threat detection. We may also share your anonymized submitter ID, geographic location, and submission time.
• Private Samples: Only visible to you and (for organizational accounts) other members of your organization. Private Samples are not shared with security partners or the broader community.

Service Providers: We may share information with trusted companies that help us operate the Service (e.g., hosting providers, payment processors).

Legal Requirements: We may disclose information to comply with laws, court orders, or to protect our rights and safety.

Business Transfers: Your information may be transferred if we are involved in a merger, acquisition, or sale.

4. INTERNATIONAL DATA TRANSFERS

Your data may be processed in Switzerland or other countries. We ensure appropriate safeguards for international transfers as required by Swiss and EU data protection law.

5. YOUR RIGHTS

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data (subject to limitations for Samples in our threat intelligence database)
• Object to processing or restrict how we use your data
• Receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC)

To exercise these rights, contact us at privacy@rationaledge.io.

Note on Sample Deletion:
We may retain public Samples in our threat intelligence database even after account deletion to maintain ongoing security protection for the community. Private Samples and their associated data can be deleted upon request.

6. DATA SECURITY AND RETENTION

We implement appropriate security measures to protect your data. We retain information as long as necessary to provide the Service, comply with legal obligations, and maintain security. Account data is typically retained while your account is active plus 2 years; Samples may be retained indefinitely for threat intelligence purposes.

7. LEGAL BASIS FOR PROCESSING

We process your data based on:

• Contract performance: To provide the Service you’ve requested
• Legitimate interest: To operate the Service, share Samples for security analysis, improve our platform, and protect against threats
• Legal compliance: To meet legal and regulatory requirements
• Consent: For marketing communications (where required)

8. CHANGES TO THIS POLICY

We may update this Privacy Policy. We will notify you of material changes via email or through the Service. Continued use after changes become effective means you accept the updated policy.

9. CONTACT US

For questions about this Privacy Policy or to exercise your rights:

Email: privacy@rationaledge.io

Address:
RationalEdge AG
General-Wille-Strasse 19
8002 Zürich, Switzerland

Swiss Data Protection Authority:
Federal Data Protection and Information Commissioner (FDPIC)
https://www.edoeb.admin.ch

Effective Date: 01 October, 2025