Privacy Policy
Last Updated: 13 May 2026 · Issued pursuant to Art. 19 nDSG (Swiss Federal Act on Data Protection, in force 1 September 2023) and, where applicable, Art. 13/14 GDPR.
Controller
Data We Process
| Category | Details |
|---|---|
| Email address | Provided at checkout for order confirmation delivery |
| Document content | Text of your uploaded CV or lease document, transmitted to Anthropic API for analysis, not stored by LivingEase |
| Transaction data | Service purchased, amount, Stripe transaction ID, timestamp |
| Session data | Temporary token stored in Upstash Redis during payment verification |
| Technical / log data | IP address, browser type, request timestamps (processed by Vercel infrastructure) |
| Analytics data (with consent) | Pages visited, session duration, navigation path, collected by Google Analytics 4 and the Meta Pixel only after you accept analytics cookies |
| Error and session-replay data | Browser errors and session recordings collected by Sentry to help us diagnose technical issues |
Purposes and Legal Basis
| Purpose | nDSG basis | GDPR basis |
|---|---|---|
| Delivering the AI analysis you purchased | Contract performance, Art. 31 para. 2 lit. a nDSG | Art. 6(1)(b) GDPR |
| Processing your payment via Stripe | Contract performance | Art. 6(1)(b) GDPR |
| Sending results by email via Resend | Contract performance | Art. 6(1)(b) GDPR |
| Security, fraud prevention, error logging | Legitimate interest | Art. 6(1)(f) GDPR |
| Retaining transaction records | Legal obligation, Art. 958f OR | Art. 6(1)(c) GDPR |
| Website analytics (Google Analytics 4), only if you consent | Consent, Art. 31 para. 1 nDSG | Art. 6(1)(a) GDPR |
| Marketing measurement (Meta Pixel), only if you consent | Consent, Art. 31 para. 1 nDSG | Art. 6(1)(a) GDPR |
We do not use your data for marketing or profiling. Analytics tools (Google Analytics 4 and Meta Pixel) are only activated with your explicit consent via the cookie banner and can be declined at any time. We do not perform automated decision-making with significant legal effects, AI output is informational only.
Sub-Processors and International Transfers
All US-based providers are bound by Standard Contractual Clauses (SCCs) as the transfer safeguard under Art. 16 nDSG, pre-approved contractual protections that bind US recipients to Swiss-equivalent data protection standards.
| Provider | Role | Country | Safeguard |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Payment processing | Ireland (EU) | EU adequacy, Switzerland recognises EU data protection as equivalent |
| Anthropic, PBC | AI document analysis (Claude API) | USA | SCCs |
| Vercel, Inc. | Website hosting and serverless infrastructure | USA | SCCs |
| Resend, Inc. | Transactional email (results delivery) | USA | SCCs |
| Upstash, Inc. | Temporary session token storage (Redis) | USA | SCCs |
| Sentry, Inc. | Error tracking and session replay | USA | SCCs |
| Google LLC | Website analytics (Google Analytics 4), only with consent | USA | SCCs |
| Meta Platforms, Inc. | Advertising measurement (Meta Pixel), only with consent | USA | SCCs |
We do not sell your personal data. Your document content is shared only with Anthropic to generate your analysis. Anthropic does not use API inputs to train its models by default, and retains inputs for up to 30 days for safety monitoring. We do not use your documents for any AI training purposes.
Retention Periods
| Data | Retention period |
|---|---|
| Uploaded document content (CV, lease text) | Not stored by LivingEase, transmitted to Anthropic API in real time only |
| Analysis output | Not stored, delivered to your browser session only |
| Email address | Deleted 2 years after your last transaction |
| Session tokens (Upstash Redis) | Deleted automatically after 24 hours |
| Transaction records | 10 years, mandatory retention under Art. 958f OR |
| Server request logs (Vercel) | 30 days |
| Google Analytics cookies (_ga, _ga_*) | Up to 2 years, only if consent was granted; cleared immediately if consent is declined |
| Meta Pixel cookies (_fbp, _fbc) | Up to 90 days, only if consent was granted; cleared immediately if consent is declined |
Cookies
| Type | Purpose | Consent required |
|---|---|---|
| Strictly necessary session cookie | Maintains your checkout session during payment verification (Upstash Redis-backed) | No, required for service delivery |
| Google Analytics cookies (_ga, _ga_*) | Measures page views, session duration, and navigation behaviour to help us improve the site. Only set if you accept analytics via the cookie banner. | Yes, requires your explicit consent |
| Meta Pixel cookies (_fbp, _fbc) | Measures the effectiveness of our content by tracking page views. Shared with Meta Platforms, Inc. (Pixel ID: 2442820362864514) to measure ad performance. Only set if you accept analytics via the cookie banner. | Yes, requires your explicit consent |
Analytics and measurement cookies (Google Analytics 4 and Meta Pixel) are only activated after you explicitly accept them via the cookie banner. No analytics or tracking cookies are set without your consent. You can decline or withdraw consent at any time, the site works fully without them.
Your Rights
Under Art. 25 and 32 nDSG (and GDPR where applicable) you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data where no longer necessary
- Data portability, receive your data in a structured, machine-readable format (Art. 28 nDSG / Art. 20 GDPR)
- Restriction of processing in certain circumstances (Art. 18 GDPR)
- Object to processing based on legitimate interests (Art. 21 GDPR)
- Lodge a complaint with the Swiss supervisory authority
To exercise any right, email customer@livingease.ch. We will respond within 30 days.
Security
- TLS encryption for all data in transit
- Document content transmitted directly to Anthropic API, not written to persistent storage by LivingEase
- Upstash session data expires automatically within 24 hours
- Infrastructure access limited to the operator
Changes to This Policy
Material changes will be notified by email at least 30 days before taking effect. The current version is always published at this page.