Privacy policy

This policy explains which personal data we process when operating DUDE.AI, why, and on what basis. It applies under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

Techfunder World AG
Industriestrasse 9
6302 Zug
Switzerland
E-mail: ag@brn.ai · Phone / WhatsApp: +49 171 1254074

We have not currently appointed a representative in the EU under Art. 27 GDPR. We have not appointed a data protection officer; please send privacy requests to ag@brn.ai.

2. Visiting the website

When you open pages, your browser sends technically necessary data (IP address, date and time, address requested, referrer, browser and operating system details). We use it to deliver the website and to protect it against misuse (for example, by limiting sign-in attempts). Where server logs are kept, we delete them after at most 30 days unless they are needed to investigate a security incident. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

We serve fonts and all page components ourselves; no third-party content is loaded when you visit. We use no analytics, tracking or advertising services.

3. Cookies and local storage

We only set cookies and storage entries that are strictly necessary for the functions you use (sign-in, language, intro list). No consent is required for these (§ 25(2) no. 2 of the German TDDDG). The full list is on the Cookies page.

4. Intro requests and briefs by WhatsApp or e-mail

When you send your intro list or your brief, your device opens WhatsApp or your e-mail program with a prepared message. We only receive what you send (for example name, company, country, the profiles you picked, your pitch) and use it to answer your request and arrange introductions. We pass your pitch only to the people you asked to be introduced to. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract), otherwise Art. 6(1)(f). WhatsApp is operated by WhatsApp Ireland Limited (Meta); WhatsApp's own privacy policy applies to its use, and data may be transferred to the USA. We keep requests as long as needed for the business relationship, and business correspondence as long as the law requires.

5. Account and credits

For an account we process your e-mail address, name, organisation, role (buyer or builder), currency and language, as well as credits bought and used, orders (for introductions also your pitch and phone number), unlocked leads and your alert settings. The purpose is to provide the account and the paid services; the legal basis is Art. 6(1)(b) GDPR. For signing in, we store your private account link only as an irreversible hash. You can download your data and delete your account at any time in the account area; we then remove your details but keep booking and payment records as long as the law requires (in Switzerland usually 10 years, Art. 958f Code of Obligations).

6. Payments through Stripe

You pay for credits through Stripe. You enter payment details directly at Stripe; we receive no card data, only the amount, currency, status and a reference of the payment. For accounts in Switzerland, the contracting party is Stripe Payments Europe, Limited (Ireland). Stripe processes, among other things, your e-mail address, name, billing address, tax ID and payment data, partly as an independent controller (for example for fraud prevention and legal obligations), and may transfer data to other countries including the USA. Details: stripe.com/privacy. Legal basis: Art. 6(1)(b) and (c) GDPR.

7. E-mails from us

We send sign-in links, order confirmations and, if you switch them on in your account, alerts about new leads. You can switch alerts off in your account at any time.

8. Builder profiles

Under "Builders" we show summaries of public posts in which people say themselves that they build AI agents, LLM or automation systems and are available for work (for example on Hacker News). From these we only take the kind of systems, skills, experience, availability, work mode and place (city/country), and we keep the link to the post internally. We do not copy names, usernames, employers, e-mail addresses, phone numbers or photos, and no link to the post appears publicly. The purpose is to connect buyers with builders; the legal basis is our legitimate interest, and that of the buyers, in these introductions (Art. 6(1)(f) GDPR), the people concerned having made their availability public themselves. We only make contact through the channel the post itself names, and point to this policy when we do. You can object at any time: we remove or correct your profile when you write to ag@brn.ai, usually within 5 working days.

9. Leads (projects)

Under "Projects" we show summaries of public tenders, project and job ads and startup posts that ask for AI agents, assistants, automation or AI features. Publicly we show them without the buyer's or company's name, the reference and the source; signed-in users can unlock the buyer, the reference, the link to the source and the original title with credits. We process personal data in them (such as a contact person named in a notice) on the basis of Art. 6(1)(f) GDPR. We remove or correct a listing on request (ag@brn.ai). For internal work we use Notion (Notion Labs, Inc., USA), Gmail (Google) and a self-hosted WhatsApp connection.

10. Recipients and transfers abroad

Data is only received by the service providers named above for their task, by our team (BRNZ), and by authorities where we are legally obliged. The EU Commission has issued an adequacy decision for Switzerland. Transfers to countries without an adequate level of data protection (for example the USA) only take place with appropriate safeguards, such as the recipient's certification under the Data Privacy Framework or standard contractual clauses.

11. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw any consent at any time. Write to ag@brn.ai; downloading and deleting are also available directly in your account. You can lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your place of residence or work.

12. Security and automated decisions

The connection to the website is encrypted (HTTPS), and access to internal data is password-protected. We do not make automated individual decisions or create profiles.

13. Changes

We update this policy when our processing changes. The version published here applies.

Last updated: 2 November 2026