Legal
Privacy Policy
Last updated: 26 October 2026
This Privacy Policy describes how c.technology AG ("we", "us", or "our") collects, uses, and protects personal data when providing its software and digital services, including branded and white-labeled applications, to users and customers.
It applies to all digital products and services operated by c.technology AG (CHE-384.751.094), Stockerstrasse 33, 8002 Zurich, Switzerland — including but not limited to the apps and platforms c.technology Coride, clickahoy, clickrider, Hensa, Emovemotors, Frauscher, Torqeedo, Novus, and LiveWire, as well as all associated web and mobile applications operated by c.technology or its OEM and ecosystem partners.
1. Scope and Purpose
This Privacy Policy applies to all services provided by c.technology AG (the “Company”) through its SaaS platform, APIs, web portals, and mobile applications (collectively, the “Services”).
It also applies to our website, ctechnology.io (the “Website”). What the Website does in particular is described in sections 3, 4, 5 and 8 and in the Cookie Policy below.
It explains:
- what types of personal data we process,
- how and for what purposes we use such data,
- how we protect it, and
- what rights you have under applicable data protection law.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Data Controller
The controller responsible for data processing is:
c.technology AG
Stockerstrasse 33
8002 Zurich, Switzerland
E-mail: info@ctechnology.io
For white-labeled or OEM-integrated applications, c.technology acts as a data processor on behalf of the OEM or business partner who is the data controller. In such cases, that partner’s privacy policy also applies.
3. Categories of Data Processed
We may collect and process the following categories of data, depending on how you use our Services:
- a) Identification and Contact Data: Name, email address, phone number, organization, account ID.
- b) Account and Access Data: Login credentials (hashed), device identifiers, session information, language, time zone.
- c) Usage and Technical Data: Log files, IP address, browser type, app version, operating system, date and time of access, telemetry and diagnostic data.
- d) Vehicle and Telemetry Data (if applicable): VIN or engine ID, location data, speed, battery level, temperature, status events, and other performance metrics generated by connected vehicles.
- e) Communication Data: Messages, feedback, support requests, chat content or comments shared within the platform.
- f) Payment and Subscription Data: Billing address, subscription tier, payment provider information (handled securely via third-party payment processors such as Stripe, Apple, or Google).
- g) Website Usage Data: Only if you consent to analytics or marketing on the Website (section 8): the pages you view, the page you came from, the links and buttons you click (including which call to action you used and on which page), the date, time and length of your visit, browser type, operating system, device type and screen size, an approximate location derived from your IP address, and a recording of how you move, click and scroll on a page. See section 8.
- h) Website Form Data: When you send a form on the Website (contact, demo access, one-pager): your email address and, depending on the form, your first and last name, company, phone number and message, the topic you chose, and which button and page the form was sent from.
4. Purpose and Legal Basis of Processing
We process personal data for the following purposes and based on the corresponding legal bases:
| Purpose | Legal basis |
|---|---|
| Provide and maintain our Services | Contract performance (Art. 6 (1)(b) GDPR) |
| Manage user and OEM accounts | Contract performance |
| Enable connectivity and analytics for vehicles | Legitimate interest / Contract performance |
| Process subscriptions and payments | Contract performance / Legal obligation |
| Communicate with users (support, notifications, updates) | Legitimate interest / Consent |
| Improve products and develop new features (incl. AI-based analytics) | Legitimate interest |
| Ensure platform security and prevent misuse | Legitimate interest / Legal obligation |
| Comply with legal, regulatory, or contractual obligations | Legal obligation |
| Run and deliver the Website and protect its forms against spam and misuse | Legitimate interest (Art. 6 (1)(f) GDPR) |
| Answer requests sent through the Website forms and send the follow-up emails you asked for (e.g. your demo login) | Steps taken at your request before entering into a contract (Art. 6 (1)(b) GDPR) / Legitimate interest |
| Measure and improve the Website with PostHog (analytics, session recordings, heatmaps) | Consent (Art. 6 (1)(a) GDPR). You can withdraw it at any time, see section 10. |
| Recognise your browser over visits with HubSpot and see which pages led to a request | Consent (Art. 6 (1)(a) GDPR). You can withdraw it at any time, see section 10. |
| Remember your choice in the Website’s cookie box and be able to show what you agreed to | Legal obligation (Art. 6 (1)(c) with Art. 7 (1) GDPR) / Legitimate interest |
Where required by law (e.g., for location tracking or marketing communication), we obtain your explicit consent.
5. Data Sharing and Transfers
We may share data as follows:
- With OEMs, Dealers, or Ecosystem Partners: when operating white-labeled solutions, telemetry and customer data may be shared with the respective OEM under their responsibility.
- With Service Providers: we use trusted cloud and IT partners (e.g., hosting, analytics, payment processing) who act as data processors under strict contractual agreements (Art. 28 GDPR).
- With Affiliates or Successors: in case of corporate restructuring or merger, data may be transferred in compliance with legal requirements.
- With Public Authorities: only when required by law or court order.
For the Website, these service providers are:
- Deno Deploy (Deno Land Inc., USA) hosts the Website. Each request is answered from a Deno Deploy location near you, which can be inside or outside the EU. To deliver a page, Deno Deploy processes your IP address and the technical data of the request. The Website keeps no logs and sets no cookies of its own; any server logs are kept by Deno Deploy. The fonts and every other file of the Website come from there too: the Website loads nothing from Google.
- HubSpot (HubSpot, Inc., USA) is our CRM. It receives what you send through a Website form and, if you consent to marketing, the tracking data described in section 8, and it sends the follow-up emails. Our HubSpot account is hosted in HubSpot’s EU data center.
- PostHog (PostHog, Inc., USA) runs our Website analytics, if you consent to it. Our PostHog data is processed on PostHog’s EU cloud in Frankfurt, Germany.
Cross-border data transfers (e.g. to the EU/EEA, UK, or US) occur only if the destination provides an adequate level of data protection (e.g., through the EU Standard Contractual Clauses or the Swiss-U.S. Data Privacy Framework).
HubSpot, PostHog and Deno Land are based in the USA. Even where our data is stored in the EU, it can therefore be transferred to or accessed from the USA. HubSpot and PostHog commit to the EU Standard Contractual Clauses and take part in the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework.
6. Data Retention
We retain personal data only as long as necessary for the purposes stated above or as required by applicable law.
- Account data is kept as long as your account is active.
- Vehicle data is stored for the duration of your subscription and may be anonymized thereafter.
- Logs and telemetry data used for analytics or AI model training are anonymized or aggregated after the retention period expires.
- Legal retention periods (e.g. tax, accounting) remain unaffected.
7. Data Security
We use appropriate technical and organizational measures (TOMs) to protect your data, including:
- encrypted transmission (TLS 1.2+),
- encryption at rest for sensitive data,
- strict access control and role-based permissions,
- multi-region cloud redundancy and backup management,
- regular security audits and monitoring.
Despite these safeguards, no system is entirely immune from risks. In case of a personal data breach, we follow legal notification procedures.
8. Use of Cookies and Tracking Technologies
Our web and mobile applications use cookies and similar technologies (e.g. SDKs, analytics tools) to:
- enable core platform functions,
- remember preferences and session states,
- analyze user behavior to improve usability,
- measure performance and detect technical issues.
On the Website, this works as follows. When you first visit, a box at the bottom left asks for your consent, separately for analytics (PostHog) and marketing (HubSpot). Until you choose, and if you reject, neither runs, and nothing is stored in your browser except your choice. The Website works the same either way, forms included: what you send through a form goes to HubSpot (section 5), only without the link to your earlier visits.
- With your consent to marketing, HubSpot’s tracking code runs on every page. It sets cookies that recognise your browser on later visits and records the pages you view. When you send a form, HubSpot links your request to these visits, so we can see which pages led to it. HubSpot’s chat widget is switched off.
- With your consent to analytics, PostHog records page views, clicks on links and buttons (including which call to action you used and on which page), and that a form was sent, with the name of the form but nothing you typed into it. PostHog also captures other clicks on the page automatically, and it records sessions and heatmaps: how you move, click and scroll on a page. The content of input fields is masked in these recordings. The recordings also contain technical data, such as the timing of network requests and messages from the browser console.
- PostHog receives your IP address and uses it to derive an approximate location, such as your country and city. We do not use your precise location. PostHog gives your browser a random ID and creates no person profile for visitors of the Website.
You can change or withdraw your consent at any time under Cookie settings, also at the bottom of every page (section 10). In our apps, use the in-app settings or your device settings.
For details, including every cookie of the Website by name, see our separate Cookies Policy.
9. AI-Based Data Processing
Certain platform features (e.g., predictive maintenance, usage analytics, or AI-powered insights) involve the automated analysis of anonymized or pseudonymized data. Personal data is never used for automated decision-making that produces legal effects on users without human review.
10. User Rights
Under applicable data protection law, you have the following rights:
- Access – obtain a copy of your personal data.
- Rectification – correct inaccurate or incomplete data.
- Erasure – request deletion (“right to be forgotten”).
- Restriction – limit processing in specific circumstances.
- Data Portability – receive data in a structured, machine-readable format.
- Objection – object to processing based on legitimate interests.
- Withdrawal of Consent – where processing is based on consent, you can withdraw it at any time.
Withdrawing your consent on the Website. Open Cookie settings, also at the bottom of every page, and untick analytics, marketing or both, or choose “Reject all”. The Website then deletes the cookies and browser storage of PostHog and HubSpot that it can reach and reloads the page, and nothing is collected from then on. Withdrawing does not affect what was processed before. Your choice applies to the browser you made it in.
Requests can be submitted to info@ctechnology.io.
We may require identity verification before responding.
11. Children’s Privacy
Our Services are not intended for children under the age of 16. We do not knowingly collect personal data from minors. If we become aware that data was collected without appropriate consent, we will delete it promptly.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in technology, law, or our business operations.
Updated versions will be published on our website and take effect upon publication.
Material changes will be communicated by email or in-app notice where legally required.
13. Contact
If you have questions or concerns regarding this Privacy Policy or your personal data, please contact us:
c.technology AG
Stockerstrasse 33, 8002 Zurich, Switzerland
E-mail: info@ctechnology.io
Website: www.ctechnology.io
Cookie Policy
Last updated: 26 October 2026
This Cookies Policy explains how c.technology AG (“we”, “us”, or “our”) uses cookies and similar technologies in connection with our websites, mobile and web applications, and Software-as-a-Service (SaaS) platform (collectively, the “Services”).
It also explains how you can manage or block cookies, and how to give, change or withdraw your consent on our website.
1. What are cookies?
Cookies are small text files that are stored on your device when you visit a website or use a digital service. They help websites and applications remember your actions and preferences (such as login, language, or region) so that you don’t have to re-enter them every time.
In addition to cookies, we may use similar technologies such as:
- Local Storage and Session Storage in web browsers,
- SDKs (software development kits) in mobile apps, and
- Tracking pixels or web beacons in certain communications.
2. How we use cookies
On our website, ctechnology.io, one entry in your browser is strictly necessary: it keeps your choice in the cookie box. Everything else is set by HubSpot and PostHog, and only if you consent to marketing or analytics. We do not use advertising cookies. These are all of them:
| Name | Provider and purpose | Duration |
|---|---|---|
| ctio-consent (local storage) | c.technology, strictly necessary. Your choice in the cookie box (analytics and marketing, each yes or no) and when you made it, so we do not ask again on every page and can show what you agreed to. | 6 months, then we ask again |
| hubspotutk | HubSpot, marketing, only with your consent. Keeps track of your browser’s identity. It is passed to HubSpot when you send a form, so your request is linked to your earlier visits. | 6 months |
| __hstc | HubSpot, marketing, only with your consent. The main HubSpot cookie: the time of your first, last and current visit, and the number of sessions. | 6 months |
| __hssc | HubSpot, marketing, only with your consent. Keeps track of the current session and the pages viewed in it. | 30 minutes |
| __hssrc | HubSpot, marketing, only with your consent. Tells HubSpot whether you restarted your browser, so a new session is counted. | Until you close the browser |
| __cf_bm | HubSpot’s content delivery network (Cloudflare), on HubSpot’s own domains, security. Protects HubSpot’s services against bots. Set when HubSpot’s code loads, so only with your consent to marketing. | 30 minutes |
| ph_<project key>_posthog (cookie) | PostHog, analytics, only with your consent. A random ID for your browser and the current session, so visits and pages can be counted. Set for ctechnology.io and its subdomains. | 1 year |
| ph_<project key>_posthog and other ph_ entries (local storage and session storage) | PostHog, analytics, only with your consent. The rest of PostHog’s state for this browser and tab, such as the settings it receives from PostHog. | Local storage: until you delete it. Session storage: until you close the tab. |
In our platform and apps, we use cookies and similar technologies for the following purposes:
| Category | Purpose | Examples |
|---|---|---|
| Essential cookies | Required for basic functionality and security of the Service. | Authentication, session management, fraud prevention, load balancing |
| Functional cookies | Improve usability and remember user preferences. | Language, region, saved login state |
| Analytics cookies | Help us understand how users interact with our Services so we can improve performance and usability. | Page visits, navigation flow, crash reports |
| Performance cookies | Measure app and website performance and detect issues. | Response times, error logs |
| Marketing and third-party cookies | Used (where applicable) to deliver relevant content or integrate partner services. | Embedded maps, videos, third-party analytics, OEM-partner integration |
We do not use cookies to make automated decisions or to track users across unrelated third-party sites.
3. Third-party cookies and integrations
The cookies on our website come from these providers. Section 8 of the Privacy Policy describes what each of them records.
- HubSpot (HubSpot, Inc., USA; our account is hosted in HubSpot’s EU data center): the tracking code, with your consent to marketing, and the HubSpot forms behind our contact, demo access and one-pager forms. A form you send goes to HubSpot whether or not you consented.
- PostHog (PostHog, Inc., USA; our data is processed on PostHog’s EU cloud in Frankfurt, Germany): the website analytics, session recordings and heatmaps, with your consent to analytics.
Our platform and apps also work with trusted partners that help us operate or analyze our Services, including but not limited to:
- Cloud hosting and content delivery providers (e.g., AWS, Cloudflare),
- Analytics providers (e.g., PostHog),
- Payment service providers (e.g., Stripe, Apple, Google),
- OEM or ecosystem partners offering white-label integrations.
HubSpot, PostHog and our other service providers are bound by data protection agreements with c.technology AG and may only process data in accordance with our instructions and applicable law.
4. Cookie consent and management
When you first visit our website, a box at the bottom left asks for your consent, separately for analytics (PostHog) and marketing (HubSpot). Nothing is ticked in advance, and “Reject all” is as easy as “Accept all”. Until you choose, and if you reject, neither runs and nothing is stored except your choice. The website stays fully usable either way. Strictly necessary storage, such as the entry that keeps your choice, does not need your consent.
You can change your choice at any time: Cookie settings, also at the bottom of every page. If you withdraw a consent, the website deletes that provider’s cookies and storage that it can reach and reloads the page. We ask again after six months, or sooner if the tools or purposes change.
If your browser sends a Global Privacy Control signal, we treat it as “Reject all”. You can still give your consent under Cookie settings.
You can also manage your preferences at any time by:
- adjusting your browser settings to block or delete cookies and site data, for ctechnology.io or in general,
- using a browser extension that blocks trackers, or
- using the in-app privacy settings where available.
If you block or delete cookies, some functions of our Services may not work properly (e.g. login persistence, language settings).
5. Retention and expiration
The duration of each cookie on our website is listed in section 2. Your choice in the cookie box is kept for six months. A persistent cookie stays on your device until it expires or you delete it; a session cookie is deleted when you close your browser. Entries in local storage stay until you delete them, entries in session storage until you close the tab.
How long we keep the data of a form you sent is described in section 6 of the Privacy Policy. PostHog keeps analytics data and session recordings for the retention period set in our PostHog account.
In our platform and apps, cookies are stored for different periods depending on their purpose:
- Session cookies expire automatically when you close your browser or app.
- Persistent cookies remain on your device for a defined period (typically between 1 day and 12 months) unless deleted manually.
6. Legal basis
The use of cookies is based on:
- Art. 6 (1)(f) GDPR / legitimate interest: for essential and functional cookies required to operate the platform, and for the entry that keeps your choice on our website, which as strictly necessary storage needs no consent (Art. 5 (3) ePrivacy Directive, e.g. § 25 (2) TDDDG in Germany);
- Art. 6 (1)(a) GDPR / consent, together with Art. 5 (3) of the ePrivacy Directive as implemented in national law (e.g. § 25 (1) TDDDG in Germany, the PECR in the UK): for the analytics and HubSpot cookies on our website, and for analytics or marketing cookies in our platform and apps that are not strictly necessary;
- Art. 45c Swiss Telecommunications Act and the Swiss FADP: for equivalent processing under Swiss law.
You can withdraw your consent on our website at any time under Cookie settings (section 4), with effect for the future. Where we ask for your consent in our platform or apps, you may withdraw it at any time with future effect through the in-app privacy settings or via browser controls.
7. Updates to this Cookies Policy
We may update this Cookies Policy from time to time to reflect changes in technology, law, or our service offerings.
Updated versions will be published on our website and take effect upon publication. This version is dated 26 October 2026.
8. Contact
If you have questions or concerns regarding this Privacy Policy or your personal data, please contact us:
c.technology AG
Stockerstrasse 33, 8002 Zurich, Switzerland
E-mail: info@ctechnology.io
Website: www.ctechnology.io