1. Company Information
Optiverse AG is a company registered in Switzerland, with its principal office at Clausiusstrasse 16, 8006 Zürich, Switzerland.

2. Access to the Service
Optiverse provides a cloud-based platform for productivity and AI-enhanced collaboration. Access to the Service is offered on a subscription basis, as described on our website or in a valid order form. We may update or modify the Service to improve functionality or ensure legal compliance. For material changes, we will provide reasonable notice when feasible.

3. Subscriptions and Payment
Subscriptions are billed in accordance with your selected plan or order form. Payment is due in advance, and we reserve the right to suspend or terminate access to the Service for unpaid amounts.

4. Data Ownership and Processing
• Client Data Ownership: You retain all rights to the data, content, and materials you upload or generate within the Service (“Client Data”).
• Processing Purpose: We process Client Data solely to provide, maintain, and support the Service, in accordance with these Terms and our Privacy Policy.
• AI Training: Client Data is never used for advertising, profiling, or training artificial intelligence models without the Client’s explicit consent.
• Data Residency: Client Data is hosted in Zurich, Switzerland or Frankfurt, Germany.
• Export and Deletion: You may export or request deletion of your data at any time. Textual data is deleted immediately upon meeting deletion or within 24h for account deletion. Video recordings are retained for up to 30 days to allow for recovery and are then permanently deleted.

5. Security and Compliance
Optiverse designs its infrastructure in alignment with GDPR and the Swiss Federal Act on Data Protection (FADP). Key security practices include:
• Data encrypted at rest (AES-256) and in transit (TLS 1.3)
• Authentication via short-lived JWT tokens
• Role-based access control and Supabase Row-Level Security (RLS)
• Pre-signed video access URLs with expiration
• Infrastructure hosted in AWS and Supabase
• Daily backups with geo-redundant storage
• Key rotation every 90 days via AWS KMS
• Transcription handled internally or with GDPR-compliant LLM providers hosted in the EU
• Email authentication using SPF, DKIM, and DMARC
A detailed Security Overview is available upon request by contacting security@optiverse.ai.

6. Subprocessors and International Transfers
We may engage subprocessors to assist with service delivery. All subprocessors are contractually bound to data protection standards equivalent to this TOS and our DPA. A current list of subprocessors is available upon request. Data is stored exclusively in Switzerland or Germany. If data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses (SCCs).

7. Incident Response and Notification
In the event of a security incident that affects your data, we will notify you without undue delay, providing relevant information on scope, impact, mitigation efforts, and a point of contact.