Treselia is built so that we hold as little as possible. The client's documents are read on your firm's computers, and your firm's knowledge stays in your firm's own folder. This page explains what we do receive, why, and what you can ask of us.
Who is responsible
MindtheGap Sàrl, Avenue Ernest-Hentsch 4, 1207 Geneva, Switzerland
Questions about your data: christen.mtg@gmail.com
This notice follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
If you e-mail us, we use your name, e-mail address and message to reply and to follow up on your request. We keep this correspondence for two years after our last exchange, or longer where Swiss law requires it as part of business records (up to 10 years).
Your account. Name, e-mail address, firm and role, so you can sign in and your colleagues can work with you.
The client's documents. They are read on your firm's computers. To fill a sheet, answer a question or read a data room, the text needed passes through our servers in Zurich for that request only and is not kept. Apart from the encrypted client uploads described below, we do not keep a copy of your files.
Your firm's knowledge. Approaches, questions, lessons, templates and the archive index sit in your firm's own folder, encrypted per colleague and access level. We do not hold them, and nothing is shared between firms.
Client upload links. A file a client sends through an upload link is encrypted in the client's browser before it leaves. We store only that encrypted file, which we cannot read, until your firm collects it. It is then deleted, and in any case after 30 days.
Usage records. For each operation we record what was done, when, for which account, and what it cost, so we can bill and keep the service running. These records contain no document content.
AI processing. The AI that reads and drafts runs in Switzerland and the EU, on our behalf, under contract. It receives only the text a request needs.
Public legal sources. For some documents Treselia looks up public sources, such as the law that applies. Those searches are meant to contain legal terms only: before a search leaves our servers, a check screens it for facts from the client's file. The search service may be located outside Switzerland.
Payment. If your firm pays by card, a payment provider processes the card details. We do not see or store them.
Legal basis, where the GDPR applies. Running Treselia for your firm rests on our contract with your firm. Replying to your e-mails and keeping the site and service secure rest on our legitimate interest in doing so. Keeping business records rests on our legal obligation.
Only service providers that work for us: cloud hosting in Zurich, AI processing in Switzerland and the EU, e-mail, payment and the search service named above. They may use the data only to provide their service to us. We do not sell data and we do not use it for advertising.
Data stored by Treselia stays in Switzerland. AI processing can take place in the EU, which Switzerland recognises as offering adequate protection. Where a provider is in another country, we rely on the safeguards the law requires, such as the standard contractual clauses.
Data is encrypted in transit and at rest. In the desktop app, saved work is encrypted per colleague and access level, and private keys stay on the computer. Access to our systems is restricted to the people who need it.
You can ask us what data we hold about you, have it corrected or deleted, receive a copy, and object to its use. Write to christen.mtg@gmail.com. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, your local data protection authority.
When your firm uses Treselia on its clients' files, your firm decides what happens with that client data, and we process it on your firm's behalf. A client who wants to exercise their rights should contact the firm.
We will update this page when Treselia changes how it handles data. The date at the top shows the latest version.