Privacy policy

Controller

RedSwiss Wealth (wealth-pms.redswiss.ch) is operated by Anthony Thomas, a private individual resident in Switzerland. For any question about your personal data: info@anthony-thomas.ch.

Two different roles

For asset managers' account data and for demo requests, we are the controller.

For the data asset managers enter about their clients (identity, contact details, risk profile, KYC status, portfolios, positions and cash flows), the asset manager is the controller: we process it only on their behalf and on their instructions, to provide them with the service. If you are an asset manager's client, please contact them first with any question about your data.

Data we process

• Account: name, email address, password (stored only as a hash, never in plain text), two-factor authentication settings.
• Sign-ins: IP address and browser of your sessions and recognised devices, so we can warn you about unusual sign-ins.
• Firm: details of the asset management firm, team members and invitations.
• Asset managers' clients: name, email address, phone, risk profile, KYC status and notes; where applicable, the account giving them access to the client portal.
• Portfolios: custodian, base currency, positions (securities, quantities, prices), valuations and cash flows.
• Demo requests: name, company, email address, phone, topic and message.
• Subscription: for paid plans, payment data is processed by Stripe. We do not store your card details.
• Statistics: cookieless audience measurement with a tool hosted on our own servers (Umami). Page addresses are recorded without parameters, tokens or identifiers.

Purposes

• Providing the service: managing clients and portfolios, multi-currency valuation, reports and client portal.
• Securing accounts: two-factor authentication, sign-in alerts, abuse prevention.
• Answering demo requests.
• Managing subscriptions and payments.
• Sending service emails: address confirmation, sign-in alerts, invitations, password resets.
• Improving the website with aggregated statistics.

We do not use the data for advertising and we do not sell it.

Legal bases

Where the EU General Data Protection Regulation (GDPR) applies, we process data to perform our contract with you, to answer your demo request, on the basis of our legitimate interest (security, cookieless statistics) or to meet our legal obligations.

Hosting and service providers

• Infomaniak Network SA (Switzerland): hosting of servers and databases. Client and portfolio data is stored in Switzerland.
• Resend (United States): sending emails. Resend stores email content and delivery logs in the United States; this transfer is covered by standard contractual clauses adapted to Swiss law.
• Stripe (Ireland and United States): subscription payments. Stripe is certified under the Swiss-U.S. Data Privacy Framework.

Exchange rates come from the European Central Bank; no personal data is sent to it. These providers only process data to deliver their services to us.

Retention

• Account: kept while active, then deleted within 30 days of your request.
• Clients, portfolios, positions and cash flows: kept as long as the firm's account exists, then deleted with it.
• Demo requests: kept for at most 24 months.

Some data may be kept longer where the law requires it, for example the payment records of your subscription.

Cookies

We only use cookies that the website needs to work: a session cookie to keep you signed in and a cookie that remembers your theme preference (light or dark). We use no advertising or tracking cookies.

Security

Traffic is encrypted (HTTPS), passwords are hashed, two-factor authentication is available, each firm's data is kept separate and clients only see their own portfolios in the portal.

Your rights

You can ask to access your data, correct it, delete it or receive a copy in a common format, and object to certain processing. Write to us at info@anthony-thomas.ch; we reply within 30 days.

You can also contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, the data protection authority of your country.

Changes

We may update this policy. The date of the current version is shown at the top of this page; for significant changes we will inform you by email or on the website.