Office

Privacy

What this booking system stores about you, why, and how long it keeps it.

Who is responsible

PEAKS Office is run by

Association Effective Altruism Geneva — Zweigniederlassung Zürich
Zeughausstrasse 31, 8004 Zürich, Switzerland
UID CHE-320.416.351

The branch belongs to Association Effective Altruism Geneva, Rue des Photographes 2, 1207 Genève, UID CHE-357.229.406, which is the legal entity responsible for this data.

Questions, corrections and deletion requests: team@peaks-office.ch.

What we store

This is a desk booking system for one co-working space, so the list is short and all of it exists to run the room:

  • Your account — name, email address, your role and membership status, and which tier you are on.
  • Your profile — a short bio, what you work on, the cause areas you care about, and a link. All of this is optional, all of it is visible to other members, and you can empty any of it at /me at any time.
  • Your use of the office — desk bookings, lunch sittings, room bookings, check-ins, and no-shows when you booked and did not come.
  • Emails we sent you — every message the system sends is stored in full, so the office can see what you actually received when something goes wrong.
  • An activity log — who changed what, so administrative decisions can be traced afterwards.

We do not use tracking cookies, we run no analytics, and we share nothing with advertisers. The only cookies are the one that keeps you signed in and the one that remembers whether you chose light or dark.

Signing in

You can sign in with Google or with a link sent to your email address. If you use Google, we ask for the minimum that identifies you — your name, email address and profile picture — and nothing else. We cannot read your mail, your files or your calendar, and we never ask for permission to.

Signing in with Google does not create an account here. If your address is not already a member, you are sent to the application form instead. That is deliberate: this is a vetted space, and the door is the application, not the login screen.

Sign-in links and session identifiers are stored only as cryptographic hashes. Someone who obtained a copy of our database still could not sign in as you with it.

How long we keep it

  • Check-in records are deleted automatically after 24 months. They exist to keep the office's occupancy figures honest, and they stop being useful long before they stop being personal.
  • Bulk-imported records nobody ever claimed are deleted after a year. Sitting on an old spreadsheet does not earn indefinite retention.
  • One-off event guests who never came back are deleted after a year, on the same reasoning.
  • Emails we sent you are deleted after 12 months. Being able to check what somebody actually received is worth something for a while; it is not worth keeping their messages forever.
  • The activity log is deleted after 36 months. It gets longer than the rest on purpose: it is how a decision about somebody's membership can still be explained to them a year later.
  • Your account and its bookings stay while you are a member, and go when you ask us to delete them.

These deletions are not a promise somebody has to remember — they run by themselves, every morning.

Who else sees it

Other members see your name, your profile if you filled one in, and that you are booked on a given day — that is the point of a shared office. Office administrators see everything listed above.

Three companies process data on our behalf, and no others: hosting on Vercel, the database on Neon (in Frankfurt, inside the EU), and email delivery through Resend (Ireland). Nobody sells anything to anyone.

Your rights

You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Write to team@peaks-office.ch and we will answer within thirty days — normally the same week. Under Swiss and EU data protection law you may also complain to a supervisory authority; in Switzerland that is the Federal Data Protection and Information Commissioner.