Learnya Privacy
Privacy Policy

Learnya Privacy Policy

This statement explains how WorkStreams handles personal data for the Learnya admin dashboard and related operational services.

Updated February 2026

Definition

The term “personal data” refers to any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.

Data processing refers to any operation performed on the personal data of the user, regardless of the means used (automated or not). This includes collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication, dissemination or any other form of making available, matching or interconnection, restriction, deletion or destruction of this data.

Legal Basis

The data processing carried out by WorkStreams for Learnya is subject to the Federal Data Protection Act (DPA) and the Ordinance to the Federal Data Protection Act (ODPA).

Purpose

WorkStreams only processes data necessary for a user-friendly, secure, and reliable Learnya admin service. This may include data related to registration on a digital instance, navigation data, browser and device data, content data, metadata or secondary and usage data, location data, sales, contractual, and payment data.

Data processing is carried out only for the period necessary to achieve the purpose related to the use of the digital instance. If data needs to be used beyond the purpose or period for comparison statistics, for example, it is anonymized. Personal data that is no longer needed is deleted.

User Rights and Access to Personal Data

Users whose data is processed by WorkStreams have rights provided by Swiss data protection law. These rights include the right of access as well as the right to rectification, deletion, or blocking of processed personal data.

Users whose personal data is processed by WorkStreams have the right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

In light of these rights, users may request an extract of their personal data and/or request the deletion of their user account by contacting contact@workstreams.ch.

The entity responsible for processing personal data is:
WorkStreams, Sàrl, Route des Acacias 43, 1227 Les Acacias, Switzerland.

The person designated as responsible for data processing at WorkStreams, Sàrl is:
Mr. Fabrice Roublot, fabrice.roublot@workstreams.ch.

Server Location

Learnya is hosted in Switzerland. All servers are located in Switzerland and are owned or operated by WorkStreams Sàrl. No data transfer is made to another third party.

WorkStreams takes all technical and organizational measures to ensure the protection and security of data. Despite these measures, data processing on the Internet can present security vulnerabilities. Therefore, absolute data security cannot be guaranteed.

Data Security

All exchanges with Learnya servers are protected by SSL (Secure Sockets Layer) and TLS (Transport Layer Security) encryption. The dashboard operates via an HTTPS protocol, preventing interception and modification of data in transit.

Physical access to the servers or storage system is restricted to authorized personnel. All access is logged. Access to physical systems is protected by strong access controls, and access to software systems is protected by industry-standard encryption.

Privacy Policy

Only the information necessary for operating Learnya’s admin services is collected. No transfer or sharing of data with a third party is carried out. WorkStreams retains as little information as possible.

The retention period for data is as short as possible. It corresponds to the duration of the contract and the legal fiduciary requirements. Personal data retained may include:

Contact Data

  • Name
  • First Name
  • Job Title
  • Organization Name
  • Email Address
  • Language
  • Physical Address
  • Profile Picture
  • Identification Data
  • Password (hash) to allow authentication and service access

Security Data

  • IP Address
  • Operating System
  • Browser
  • Connection Date

Interaction Data

  • Messages and conversation history
  • Run metadata and execution events
  • Tool calls and responses
  • Guardrail decisions and safety flags
  • Queues, retries, and replay metadata
  • Usage metrics (latency, counts, durations)
  • Uploaded documents and attachments

Cookie Policy

Learnya uses a single cookie strictly necessary for secure access and session continuity. No preference, marketing, or third-party tracking cookies are used on the admin dashboard.

learnya_admin_jwt
Secure session token for authenticated access.

This is the only cookie used by Learnya’s admin dashboard. No third-party cookies are used.

Final Provisions

WorkStreams may modify and supplement this data protection statement at any time. Changes and additions will be announced in an appropriate form within the Learnya application.