Privacy Policy
Last updated: September 19, 2026 · The version published at /legal/privacy/ applies.
1. Controller
NLP GmbH, Untere Wiltisgasse 5, 8700 Küsnacht, Switzerland
Email: support@multiple.chat
We process personal data in accordance with the Swiss Federal Act on Data Protection (revised FADP, revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Visiting the website
The website is delivered via Cloudflare. When you access it, technically necessary connection data is generated (truncated IP address, time, requested resource, referrer, browser type). The purpose is delivery of the website, operational security and defense against attacks.
Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR; Art. 31 revised FADP). Retention: server and security logs for no longer than 30 days.
3. Audience measurement
We use Cloudflare Web Analytics. This method does not set cookies and does not create personal profiles; only aggregated access figures are evaluated. For this reason, there is no consent banner on this website. Details: Cookies.
4. Submitting a tool
Data: name and URL of the tool, category, descriptions, information on pricing and privacy, your name, email address, company and country, the selected plan, the results of the automated pre-check, and the history of processing statuses.
Purpose: carrying out the review, communication about the submission, publication of the listing, prevention of abuse.
Legal basis: performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR); for abuse prevention, legitimate interest (Art. 6(1)(f)); for statutory retention obligations, legal obligation (Art. 6(1)(c)).
Retention: submission data for the duration of publication and two years thereafter; invoices and accounting records for ten years. Rejected submissions are deleted after twelve months, except for a technical block marker used to detect duplicates.
5. Automated pre-check
When you submit a tool, we access the website provided, evaluate public domain information (RDAP), check the domain against lists of known malicious sites and take a screenshot of the homepage. No special categories of personal data are processed in this process. No automated decision with legal effect within the meaning of Art. 22 GDPR takes place: an automated rejection affects only the submission, incurs no costs, and you may request a review by a human at any time.
6. Payments
We process payments via Stripe (Stripe Payments Europe Ltd., Ireland, and affiliated companies). You enter your payment data directly with Stripe; we do not receive complete card data, only the payment status, amount, time and a transaction identifier. The legal basis is performance of a contract (Art. 6(1)(b) GDPR). For transfers to third countries, Stripe relies on Standard Contractual Clauses (SCCs).
7. Emails about your submission
To process your submission, we send status notifications (receipt, payment, ownership verification, review, publication, re-review). These are sent via Resend. The legal basis is performance of a contract. These emails are not a newsletter and cannot be unsubscribed from while the submission is in progress.
8. Newsletter
Sign-up uses a double opt-in process: you first receive a confirmation email and are only subscribed after clicking the confirmation link. As proof, we store the time of sign-up and confirmation as well as the IP address used.
Legal basis: consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future via the unsubscribe link in every issue. Retention: until withdrawal; proof of consent is then retained for a further three years.
9. Abuse prevention
Forms are protected by Cloudflare Turnstile and are subject to a limit on the number of requests per IP address. Technical characteristics of the request are processed for this purpose. The legal basis is our legitimate interest in preventing automated abuse and spam requests (Art. 6(1)(f) GDPR).
10. Processors and recipients
| Service | Purpose | Location |
|---|---|---|
| Cloudflare | Delivery, security, database, audience measurement | EU/global, Standard Contractual Clauses |
| Stripe | Payment processing, invoices | EU/USA, Standard Contractual Clauses |
| Resend | Sending submission and newsletter emails | EU/USA, Standard Contractual Clauses |
Any further disclosure takes place only if we are legally required to do so.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. You may withdraw any consent given at any time with effect for the future.
To exercise these rights, contact support@multiple.chat. There is a separate form for removing a directory listing: Request removal.
Complaints: in Switzerland, to the Federal Data Protection and Information Commissioner (FDPIC); in the EU, to the supervisory authority of your habitual residence.
12. Published directory data
We do not publish the names of contact persons. We publish only information about the tool and the company behind it. If you believe a published detail is inaccurate, please use the correction form.
13. Changes
We update this policy when our processing changes. The version published here, with the date stated above, is authoritative.