Last Updated: November 2025

This Privacy Policy applies to the Mentiora brand and the website mentiora.ai,

which are operated by Periscoop AI AG. Mentiora is a trademark of Periscoop AI AG,

Switzerland. All legal relationships remain with Periscoop AI AG.

1. Contact / Controller

Controller: Periscoop AI AG

Address: Rieterstrasse 6, 8002 Zürich, Switzerland

Email: support@mentiora.ai

Optional dedicated privacy contact: privacy@mentiora.ai

If required under Art. 27 GDPR, our EU representative’s contact details will be provided

here.

Periscoop AI AG remains the controller for all processing activities related to the Mentiora website (mentiora.ai) and Mentiora-branded services.

2. Scope of this Privacy Policy

This Privacy Policy applies exclusively to interactions with our public website (https://mentiora.ai). It does not apply to any personal data we process on behalf of our Client(s) through our Services (“Customer Data”). Such processing is governed exclusively by a separate Data Processing Agreement (“DPA”).

We may update this Privacy Policy. Changes will be posted with an updated "Last Updated" date.

This Privacy Policy applies to the use of the website mentiora.ai and all associated services under the Mentiora brand, operated by Periscoop AI AG. Where legacy references to periscoop.com remain (e.g., archived pages), this Policy continues to apply provided the service is operated by Periscoop AI AG.

3. Personal Data Collected, Retention & Legal Basis

• Log Information: Browser type, IP address, operating system, referring URL, timestamp.

– Retention: As long as necessary for security and operation.

– Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR; proportionality under FADP).

• Business Inquiries: If you contact us, we process your name, email, company, and message.

– Retention: Until resolved; if relationship arises, for its duration.

– Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) or pre-contractual steps (Art. 6(1)(b) GDPR).

• Job Applications: If you apply, we process the data you provide.

– Retention: 6 months for unsuccessful applications; longer if required by law. Successful applications become part of personnel records.

– Legal Basis: Pre-contractual steps (Art. 6(1)(b) GDPR); consent (Art. 6(1)(a) GDPR) if longer retention.

Where legal retention obligations exist, we store data for the duration required by law.

4. Cookies & Similar Technologies

We use cookies and similar technologies only as required for technical operation and

security.

Essential Security Cookie:

• Name: __cf_bm

• Provider: Cloudflare, Inc. (CDN/Security)

• Purpose: Bot management and protection against harmful traffic; strictly necessary.

• Duration: ~30 minutes

• Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR).

Web Analytics:

• We may use Framer Built-in Analytics. This operates without cookies and without

persistent identifiers. No consent banner is required.

If we introduce further analytics/marketing tools in the future, we will update this Policy and implement a consent mechanism.

5. Third Party Service Providers & International Transfers

• Hosting: Framer B.V., Singel 542, 1017 AZ Amsterdam, Netherlands (Privacy Policy:

https://www.framer.com/privacy/).

• Security/CDN: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Privacy Policy: https://www.cloudflare.com/privacypolicy/).

These providers may receive your IP address and browser information. Transfers may

occur to the United States. Safeguards: EU–U.S. Data Privacy Framework (if applicable),

adequacy decisions, or Standard Contractual Clauses (SCCs).

6. Applicable Data Protection Law

We process data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

7. Your Rights & Supervisory Authorities

You have the rights to access, rectification, erasure, restriction, data portability, object to

processing, and withdraw consent where applicable. No automated decision-making or

profiling takes place.

Supervisory Authorities:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, CH-3003 Bern, https://www.edoeb.admin.ch

• EU: As our company is based outside the European Union, we have appointed a

representative in the EU in accordance with Art. 27 GDPR:

Dr. Christian Szidzek,

THALES Rechtsanwälte,

Prymstraße 1,

97070 Würzburg.

Please note: The supervisory authority responsible for processing your personal data

depends on the member state in which you have your habitual residence or in which an

alleged infringement occurs.

You can therefore contact the data protection supervisory authority in your Member State or another competent European data protection authority.

8. Children’s Data

Our website is intended for adults. Persons under 16 should not provide data without

parental consent. We do not knowingly collect such data.