Privacy Policy

AMEXA Agency SA, IDE CHE-101.799.702, Route de Gimel 3d, Mont-sur-Rolle, Switzerland, is the data controller for personal data processed through the AZAL Partners portal (“Portal”). This policy is issued under the Swiss Federal Act on Data Protection (FADP) and, to the extent processing is connected to individuals in the EU/EEA, the GDPR.

From you, when you apply and while you use the Portal:

• Identity and contact details: legal name, registered address, jurisdiction, phone number (optional), email address.
• Entity and regulatory information: entity type, sector, and — where applicable — regulatory/fiduciary status, licence details, and supporting documents you choose to upload.
• Professional information: LinkedIn profile, network description, geographic markets, languages spoken, relevant experience.
• Banking details, once provided, for the purpose of paying commission.
• Your donation election (percentage and reforestation site), if you choose to set one.

About a third party, entered by you:

when you submit a referral, you provide us with a prospective client's name and contact details. We process this information solely to evaluate and act on your introduction — see Section 4.

Automatically:

authentication events (sign-in timestamps) and basic technical logs necessary for security and to operate the Portal. The Portal does not use advertising or analytics cookies; it uses only the minimum technical session data necessary for you to remain signed in.

• To evaluate and administer your application and ongoing status as a partner (performance of, and steps prior to entering into, your Business Introducer Agreement);
• to process and act on referrals you submit;
• to calculate and pay commission and any applicable cashback;
• to comply with our own legal, tax, and regulatory obligations as a Swiss financial intermediary;
• to maintain the security of the Portal and prevent unauthorised access.

Where you submit a referral, you — not AMEXA — are responsible for having a lawful basis to share that person's information with us, and for having informed them, as your Business Introducer Agreement requires, that you are introducing them to AMEXA. AMEXA processes this information as necessary to evaluate the introduction and, if accepted, to conduct its own client onboarding — including identification and due diligence — directly with that individual, separately from this Portal.

• AMEXA personnel, on a need-to-know basis, to review applications and referrals and administer the partner relationship;
• Documenso, our e-signature system — self-hosted on AMEXA's own infrastructure in Switzerland; signing data does not pass through any third-party e-signature vendor's own servers;
• Resend, our transactional email provider, used solely to deliver sign-in links, codes, and notification emails. Resend is a US-based service provider; sending an email through it may involve a transfer of your email address and message content outside Switzerland/the EEA. We rely on Resend's own data-protection safeguards for this transfer; [counsel to confirm the specific transfer mechanism — e.g. standard contractual clauses — before this policy is finalised];
• Infomaniak, our hosting provider, based in Switzerland, which hosts the Portal's infrastructure and database;
• Equals Money and other product providers or liquidity providers, but only in respect of an accepted Introduced Client's own onboarding — not in respect of your own partner data, except as necessary to pay you commission.

We do not sell personal data, and we do not share it for third-party advertising purposes.

We retain your application and partner data for as long as your Business Introducer Agreement is in force, and for a period afterward as necessary to meet our legal, tax, and record-keeping obligations (including the Commission survival provisions of your Agreement). [Counsel to confirm a specific retention period consistent with Swiss commercial and tax record-keeping requirements.]

The Portal uses encrypted connections (TLS) throughout, passwordless authentication (removing password-related risks such as reuse or credential leaks), and access-controlled administrative systems. Production database backups are encrypted.

Under the FADP (and the GDPR, where applicable), you have the right to request access to, correction of, or deletion of your personal data, and to object to certain processing. To exercise any of these rights, contact azal.partners@amexaagency.com. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or, where the GDPR applies to you, with your local supervisory authority.

The Portal is intended for use by business professionals and is not directed at, or intended for use by, individuals under the age of 18.

We may update this policy from time to time. The “Last updated” date above reflects the most recent revision.

Questions about this policy, or requests concerning your personal data, may be directed to azal.partners@amexaagency.com.