This Privacy Policy explains how Exdale AG ("we", "us", "our") collects, uses, stores, and protects personal information in connection with the website and platform Zame (the "Platform").

Zame connects registered Members worldwide — including assistants, clients, and suppliers — for the purpose of professional collaboration.

We operate solely as a technical intermediary. Exdale AG does not participate in, process, or manage any financial transactions between Members.

Exdale AG complies with:

• the Swiss Federal Act on Data Protection (FADP, 2023); and
• where applicable, the EU General Data Protection Regulation (GDPR).

If you are located in the European Union, the GDPR applies to the processing of your personal data by Exdale AG.

Exdale AG
Im Grund 21
8424 Embrach, Switzerland
Email: privacy@zame.global

We collect only the data necessary to operate and secure the platform.

a) Account Data

Name, email, password (hashed), profile details, country/region.

b) Communication Data

Messages exchanged between Members through Zame.

c) Technical Data

IP address, browser type, device information, and timestamps for security and analytics.

d) Optional Data

Profile photos, descriptions, and information voluntarily added by Members.

We do not collect payment data, government IDs, or sensitive information (e.g. religion, health, political beliefs).

All systems and databases are hosted on Exdale AG's own servers located in Switzerland.

We use encryption (TLS/HTTPS), firewalls, backups, and restricted access to protect your information.

No data are stored or mirrored in non-Swiss or non-EU jurisdictions without appropriate safeguards.

We do not transfer personal data to countries without adequate protection.

If we use third-party service providers (e.g. Mailgun, SendGrid, Google, Meta), we ensure:

• EU–US Data Privacy Framework certification or
• Standard Contractual Clauses (SCC) approved by the European Commission.

A current list of processors is available upon request at privacy@zame.global.

We store personal data only as long as necessary for the purposes stated:

• Account data → until account deletion + up to 12 months for backup and audit.
• Communication data → deleted automatically after 24 months of inactivity.
• Logs and technical records → 6 months unless required for security or legal reasons.

After expiry, data are securely deleted or anonymised.

Zame uses only essential cookies for login, session management, and security.

Analytics or marketing cookies are used only with prior consent via our Cookie Banner.

You can manage preferences through your browser or the on-site cookie settings.

Messages and shared content are visible only to the intended recipients.

Exdale AG does not read or analyse private communication except where required by law or for abuse investigation.

You may at any time:

• Access your personal data;
• Rectify inaccurate data;
• Request deletion ("Right to be forgotten");
• Restrict or object to processing;
• Request data portability;
• Withdraw consent (for marketing emails or analytics).

Requests can be sent to privacy@zame.global.

We will respond within 30 days in accordance with Swiss and EU law.

In case of a security incident involving your personal data, Exdale AG will:

• Document the incident internally;
• Notify affected users without undue delay if high risk exists; and
• Report to the Swiss FDPIC or relevant EU authority within 72 hours where required.

The platform is not intended for individuals under 16 years of age.

We do not knowingly collect data from minors.

We may update this Privacy Policy to reflect legal or operational changes.

If changes are material, we will notify Members via email or within the platform before they take effect.

Exdale AG
Im Grund 21, 8424 Embrach, Switzerland
Email: privacy@zame.global

© 2025 Zame, a project of Exdale AG - Version 1.0.1 January 2025 – All rights reserved