1. Controller
The controller responsible for the processing described in this Privacy Notice is Panthea Group AG, Industriestrasse 28, 9100 Herisau, Schweiz.
Intended privacy contact address: privacy@exita.ch. This mail channel will be technically verified before production launch; until then, the contact form is available.
2. Principle and scope
This Privacy Notice describes how EXITA processes personal data for digital preparation, the ICE function and controlled death-case processes. It addresses customers, invited trusted persons, reporters and other affected persons.
We process only data necessary for the relevant purpose or provided voluntarily. Absolute security cannot be promised.
3. Data necessary for the service
This includes account and identity details, contact details, address and municipality, ICE and trusted-person data and the information selected for the preparation profile.
Depending on use, references relating to employment and social insurance, insurance, banks and providers, housing, telecommunications and subscriptions, mobility and memberships, digital accounts, pets and legal documents may be processed.
4. Voluntary and sensitive information
Funeral wishes, religious or spiritual information and comparable sensitive information are voluntary and restricted to their purpose. Leaving an optional field blank does not prevent basic use.
EXITA never intentionally stores passwords for banking, email, platform or other third-party accounts. Such passwords must not be uploaded or entered in free text.
5. Documents and proof of death
Uploaded documents, references and death certificates are processed for the preparation or verification purpose selected by the user. Documents in the private vault are stored encrypted and delivered through controlled access.
Uploading alone confirms neither authenticity nor legal effect of a document. Suspicious or insufficient evidence may be blocked and reviewed manually.
6. Processing purposes
We process data for account creation and authentication, preparation profiles and Readiness, ICE invitations, reminders, the document vault, death verification, workflow control, case reports and support.
Other necessary purposes include security, abuse and fraud prevention, error analysis, audit and evidence, and contractual, accounting and statutory obligations.
7. Security, authentication and audit data
EXITA processes technical security events, authentication status, shortened or pseudonymised network characteristics, permission decisions, consent and version records, and case events recorded in a manner that strongly limits subsequent alteration.
This necessary processing cannot be switched off during use through an optional analytics preference. It is separate from product analytics and marketing.
8. Optional product improvement
Optional first-party product analytics is off by default. It is enabled for a user only if they expressly switch on “Allow anonymous product improvement”, and can be switched off again at any time.
When the setting is off, EXITA stores no optional product analytics events for that user. Necessary security and audit events remain unaffected. Marketing is off by default.
10. Information about ICE trusted persons
A customer may provide contact details of a trusted person so that EXITA can send an invitation and manage expressly granted rights. The invited person receives information about the purpose, inviter and available choices.
ICE persons may request correction or decline an invitation. Their data is not used for advertising.
11. Payment data
Until a payment processor is authorised, EXITA processes no real card payment. Upon later activation, the product, amount, currency, payment status and necessary accounting references will be processed.
An activated payment service and related recipients or international transfers are specifically identified in a versioned Privacy Notice before activation.
12. Recipients and processors
Personal data is disclosed only to actually configured service providers, expressly authorised persons or recipients of an approved administrative process. Permissions and purpose limit its scope.
The production environment is configured at Hosttime. The specific contractual role, subprocessors and storage locations will be conclusively verified before go-live and transparently identified in the approved version. Inactive Stripe, Cloudflare, Microsoft, API or automation integrations are not presented as active recipients.
13. International disclosures
No additional transfers to third countries through advertising or behavioural analytics are planned for the currently prepared V1. We do not, however, generally promise that data will always be processed exclusively in Switzerland.
If a future activated service requires international disclosure, we will examine and document the recipient country, basis and appropriate safeguards and update this Notice before activation.
14. Retention and deletion
Data is retained only as long as necessary for its purpose, the contract, security, evidence and statutory duties. Duration depends on the data category, account status and any active death case; we do not invent blanket binding retention periods.
Deletion requests may be restricted or deferred if mandatory retention, an active death case or evidence and audit duties prevent deletion. Deleted data may remain temporarily in protected backups until their scheduled rotation.
15. Rights of affected persons
Subject to statutory requirements, affected persons may request access, correction, deletion and, where applicable, delivery or transfer of data. They may object to processing where the law provides for it.
Consent to optional processing may be withdrawn at any time with future effect. The Privacy Center provides export, preference and deletion requests; identity and authority may be checked before information is disclosed.
16. Automated processes
EXITA uses automation for Readiness calculation, routing, reminders, queue processing and status assignment. This does not create an automated legal decision on inheritance, bank assets or the validity of a death.
Critical death-case execution remains governed by verification, permission and approval. Steps that cannot be resolved safely are referred for controlled manual review.
17. Information security
Depending on the type of data, EXITA uses encryption, access controls, private document storage, two-factor and step-up authentication, data minimisation, audit and operational monitoring.
No system is absolutely secure. We review safeguards according to risk and restrict access to necessary roles and purposes.
18. Data security breaches
Security incidents are assessed, contained and documented. Panthea fulfils applicable statutory notification and information duties towards authorities and affected persons.
19. Support and correspondence
Contact and support messages are processed to answer enquiries, prevent abuse and evidence communication. Please do not send death certificates, passwords or unnecessary health data through the public contact form.
20. Changes and version
This Privacy Notice is updated when processing purposes, recipients, integrations or legal requirements materially change. Material changes are communicated transparently; necessary consents are obtained before the new processing.
Version 1.2. Research status: 26 September 2026. External counsel review and an effective date remain pending.