Privacy Policy

Sharp Labs operates as MIVAJISA OÜ, a company incorporated in Estonia (registry 17503969), and serves clients internationally. We may process personal data of individuals and companies located in the European Union, Switzerland, and other jurisdictions. Where applicable, we comply with the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (FADP), and other relevant data protection laws, regardless of our place of incorporation.

We use the information we collect to:

• Respond to your inquiries and schedule discovery calls
• Provide and improve our services
• Send you relevant information about our services
• Analyze website usage and improve user experience
• Comply with legal obligations and protect our rights

We process personal data based on one or more of the following legal grounds:

• Your consent (e.g. when you contact us or book a discovery call)
• The performance of a contract or pre-contractual measures
• Our legitimate interests (e.g. improving our services and website)
• Compliance with legal obligations

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Contact and inquiry data is generally retained for up to 24 months, unless further engagement or contractual obligations apply.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With the providers listed below, who help us operate our website and our business
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

These providers help us run the website and only process your data to provide their service to us:

• Railway (USA): website hosting, on servers in the European Union (Netherlands).
• Cloudflare (USA): DNS and redirects between our domains.
• Umami: cookie-free visit statistics.
• Resend (USA): sending the emails from the contact and pilot forms, including your confirmation.
• Google Workspace (Google Ireland): the email service where we receive and answer your messages.
• beehiiv (USA): newsletter management, if you subscribe.
• Google reCAPTCHA: spam protection for the forms. Google processes this data under its own Privacy Policy.

We do not sell your data or share it with advertising networks.

The website is hosted on servers in the European Union. Some providers, such as Resend, beehiiv or Cloudflare, are US companies and may process data there. In those cases the transfer relies on the EU-US Data Privacy Framework where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission.

Sharp Labs uses artificial intelligence and machine-learning systems to support internal operations and service delivery. We do not use personal data or client-confidential information to train AI models unless explicitly agreed in writing. AI outputs are always subject to human oversight and are not used for fully automated decision-making that produces legal or similarly significant effects on individuals.

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals without meaningful human involvement.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to processing of your personal information
• Withdraw consent at any time
• Lodge a complaint with a competent data protection authority, including the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority

This website does not use advertising or cross-site tracking cookies, and it does not measure your visits with cookies. That is why we do not show a cookie banner. We only use these technologies:

• user-language (first-party, 1 year): remembers the language you pick in the language switcher. It is only stored if you change language.
• Google reCAPTCHA (set by Google, only on pages with a form): protects the contact and pilot forms from spam and bots. Google may store a security cookie (_GRECAPTCHA, up to 6 months) and process data about your device under the Google Privacy Policy and Terms of Service.
• Umami (statistics, no cookies): we count visits, page views, country, device type, referring site and clicks on some buttons in aggregate. Umami stores no cookies or identifiers on your device and does not give us your IP address. We do this on the basis of our legitimate interest in knowing which content is useful.

You can delete or block cookies in your browser settings. If you block the language cookie, the site still works and picks the language from the page address. If you block reCAPTCHA, you may not be able to send a form; in that case, write to us at contact@sharp-labs.com.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

contact@sharp-labs.com