Workspace 41 Privacy Policy
Version of 10 November 2026. This policy applies to the workspace41.ch website, your account and member area, the VIP Lounge and the pre-sale of the Founding Partner offer. A presentation video hosted by YouTube is only loaded if you choose to play it. This is a translation: in case of discrepancy, the French version prevails.
1. Controller
PWRstation Holding SA, Rue du Bourg 27, 1003 Lausanne, Switzerland, operator of the Workspace 41 brand. The company will shortly change its name to Sovereign X-Labs SA.
Contact for any question about your data: admin@workspace41.ch
2. Data processed
| Data | Purpose |
|---|---|
| Email address, one-time sign-in codes, second factor (TOTP) if you enable it, sign-in log | Creating your account, signing in and account security |
| IP address and number of code requests | Limiting abuse and protecting against automated sign-ups |
| Name, first name, email address, company, country | Reservation, invoicing, communication about your purchase |
| Country of residence and, if you provide it, the AHV compensation office certificate | Taking part in Third Circle and withdrawing commissions above CHF 2,000 per year |
| Referral link used and Third Circle chain | Calculating and paying commissions |
| Reservation and payment status, member number | Performance of the contract and accounting |
| Optional profile: photo, banner, first name, name, city, country, tagline, bio, "I offer" and "I am looking for" | Member directory, if you make your profile visible; suggestions by Celia (keywords, bio, first post) |
| Address of your LinkedIn profile and verification date | Optional LinkedIn verification and uniqueness of profiles |
| Posts: text, images, links, keywords and mentions | Publication to members whose profile is visible |
| Connected mailbox: address, servers, encrypted app password; emails, attachments, contacts and calendar events | Mail, contacts and calendar, for you only |
| Email preferences | Sending Workspace 41 posts by email, if the option is on |
| Connection requests and reports | Running the directory and moderation |
We only collect the data needed for these purposes.
3. Grounds for processing
We process your data to perform the contract you conclude with us, to meet our legal obligations, in particular for accounting, and to protect the security of the Service. The visible profile and the LinkedIn verification rely on your choice, which you can withdraw at any time.
4. Profile and member directory
The profile is optional. It is only visible to members who have made their own profile visible. Until the Service opens, only Founding Partners' profiles are visible; other members' profiles become visible when the Service opens. It is never published on the Internet and is not accessible to search engines.
You can remove your profile from the directory at any time from your member area. It then immediately stops being visible. Your profile data is not copied anywhere else.
Photos and banners are stored by us, in Switzerland. Their metadata, in particular the GPS position, is removed when they are stored.
5. LinkedIn verification
The LinkedIn verification is optional. You can fill in your profile yourself.
If you use it, you give us the address of your own LinkedIn profile and temporarily add a code to your LinkedIn headline. We then have your public profile read, once per verification, by our processor Apify Technologies s.r.o., Vodičkova 704/36, 110 00 Prague 1, Czech Republic.
We offer to pre-fill your profile with your headline, your bio, your location and your images. We only keep the information you confirm, together with the profile address and the verification date. The full result of the reading is not kept.
Apify may use sub-processors outside the European Union. It covers them with the Standard Contractual Clauses of the European Commission. LinkedIn is not a partner of Workspace 41.
6. Mail, contacts and calendar
If you connect your mailbox, Workspace 41 retrieves your mail to display it to you, sends your messages on your behalf, creates your contact records and keeps your calendar. This data is visible only to you. We do not look at it, except at your express request to assist you.
Your app password is encrypted as soon as you enter it. Only the Workspace 41 mail service can decrypt it, to connect to your mailbox; it is never displayed or stored unencrypted. Remote images in emails are blocked by default to prevent tracking. Received attachments are retrieved from your mailbox when you open them, then kept for no more than 24 hours.
Celia only reads an email thread when you ask her for a suggested reply. Only that thread is then sent to her, under the terms of section 7. No email is sent without your action.
Your emails contain data about your correspondents. You remain responsible for it: Workspace 41 processes it on your behalf, solely to provide you with this service.
7. Hosting and recipients
Your data is hosted in Switzerland by Infomaniak. The Service's emails are sent through Infomaniak. Apify is involved only in the LinkedIn verification, if you use it.
We do not sell your data and do not pass it on to any third party for advertising purposes. It may be disclosed to our advisers bound by confidentiality, or to an authority when the law requires it.
Celia, the Service's assistant, currently relies on an artificial intelligence model provided by OpenAI Ireland Ltd, Dublin, Ireland. Only the data needed for the requested task is sent to it, for example the text of your bio to suggest keywords, or an email thread to suggest a reply. OpenAI does not use this data to train its models and keeps it for no more than 30 days to detect abuse. Processing may take place in the United States: this transfer is covered by the Standard Contractual Clauses of the European Commission. We will move to a Swiss or European provider as soon as one passes our tests. Any new provider will be named in this policy before it is put into service.
8. Retention period
- Invoicing: 10 years, as required by Swiss law.
- Unpaid reservations: deleted 90 days after their cancellation, unless the law requires otherwise.
- Accounts whose address was never confirmed: deleted after 30 days.
- Free accounts: after 22 months without signing in, we send you a reminder. After 24 months without signing in, the account is deleted. If it is part of a Third Circle chain, it is anonymised.
- Profile: deleted when you delete it or when your account is deleted.
- Mail: the last 90 days are retrieved when you connect your mailbox; emails, contacts and calendar are deleted when you disconnect the mailbox or close your account. Attachments: no more than 24 hours.
- Other data: kept as long as your account exists.
9. Emails
We send you the emails essential to the Service, such as sign-in codes and security messages. We also send you Workspace 41 posts: this option is on by default, and you can turn it off at any time in your settings or through the link in every email.
10. Cookies
The site only uses cookies needed for its operation and security: your sign-in session and, if you arrive through a referral link, that link until your account is created. It uses no advertising or tracking cookies.
11. Your rights
You may request access to your data, its correction or its deletion, subject to our legal retention obligations. You can download a copy of your data and close your account from your settings, or write to us at admin@workspace41.ch. You may also contact the Federal Data Protection and Information Commissioner.
12. Security
We protect your data with appropriate technical and organisational measures, in particular encryption of communications, restricted access to data and a second sign-in factor that you can enable.
13. Changes
We may change this policy. The version in force is published on workspace41.ch.