Privacy Policy
Last Updated: 14 October 2026 · Issued pursuant to Art. 19 nDSG (Swiss Federal Act on Data Protection, in force 1 September 2023) and, where applicable, Art. 13/14 GDPR.
Controller
Data We Process
| Category | Details |
|---|---|
| Email address | Provided at checkout for order confirmation delivery |
| Document content | Text of your uploaded CV or lease document, sent to the Anthropic API for analysis and kept temporarily by LivingEase (see Section 5) |
| Transaction data | Service purchased, amount, Stripe transaction ID, timestamp |
| Session data | Temporary token stored in Upstash Redis during payment verification |
| Technical / log data | IP address, browser type, request timestamps (processed by Vercel infrastructure) |
| Analytics data (with consent) | Pages visited, session duration, navigation path, collected by Google Analytics 4 and the Meta Pixel only after you accept analytics cookies |
| Error and session-replay data | Browser errors and session recordings collected by Sentry to help us diagnose technical issues |
| Advertising data (Google AdSense) | Ad requests, IP address, browser and device data and, where you have consented, advertising cookie identifiers, processed by Google to show and measure ads |
Purposes and Legal Basis
| Purpose | nDSG basis | GDPR basis |
|---|---|---|
| Delivering the AI analysis you purchased | Contract performance, Art. 31 para. 2 lit. a nDSG | Art. 6(1)(b) GDPR |
| Processing your payment via Stripe | Contract performance | Art. 6(1)(b) GDPR |
| Sending results by email via Resend | Contract performance | Art. 6(1)(b) GDPR |
| Security, fraud prevention, error logging | Legitimate interest | Art. 6(1)(f) GDPR |
| Retaining transaction records | Legal obligation, Art. 958f OR | Art. 6(1)(c) GDPR |
| Website analytics (Google Analytics 4), only if you consent | Consent, Art. 31 para. 1 nDSG | Art. 6(1)(a) GDPR |
| Marketing measurement (Meta Pixel), only if you consent | Consent, Art. 31 para. 1 nDSG | Art. 6(1)(a) GDPR |
| Showing and measuring advertising (Google AdSense), only if you consent where the law requires it | Consent, Art. 31 para. 1 nDSG | Art. 6(1)(a) GDPR |
We do not sell your data and we do not use your uploaded documents for marketing or profiling. Our website shows advertising from Google AdSense; Google may use cookies and similar technologies for this, and for visitors in Switzerland, the EEA and the UK Google asks for your consent first. You can decline or change your choice at any time. Analytics tools (Google Analytics 4 and Meta Pixel) are only activated with your explicit consent via the cookie banner. We do not perform automated decision-making with significant legal effects, AI output is informational only.
Sub-Processors and International Transfers
All US-based providers are bound by Standard Contractual Clauses (SCCs) as the transfer safeguard under Art. 16 nDSG, pre-approved contractual protections that bind US recipients to Swiss-equivalent data protection standards.
| Provider | Role | Country | Safeguard |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Payment processing | Ireland (EU) | EU adequacy, Switzerland recognises EU data protection as equivalent |
| Anthropic, PBC | AI document analysis (Claude API) | USA | SCCs |
| Vercel, Inc. | Website hosting and serverless infrastructure | USA | SCCs |
| Resend, Inc. | Transactional email (results delivery) | USA | SCCs |
| Upstash, Inc. | Temporary session token storage (Redis) | USA | SCCs |
| Sentry, Inc. | Error tracking and session replay | USA | SCCs |
| Google LLC | Website analytics (Google Analytics 4), only with consent | USA | SCCs |
| Meta Platforms, Inc. | Advertising measurement (Meta Pixel), only with consent | USA | SCCs |
| Google Ireland Limited / Google LLC | Advertising (Google AdSense), consent managed through Google's consent message | Ireland (EEA) / USA | SCCs, Google's data processing terms |
We do not sell your personal data. Your document content is shared only with Anthropic to generate your analysis. Anthropic does not use API inputs to train its models by default, and retains inputs for up to 30 days for safety monitoring. We do not use your documents for any AI training purposes.
Retention Periods
| Data | Retention period |
|---|---|
| Uploaded document content (CV, lease text) | Kept for up to 2 hours while you pay and your result is created, then deleted automatically |
| Analysis output (result) | Kept for 7 days so you can return through the link in your confirmation email, then deleted automatically. You can delete it earlier with the button "Delete my result now" |
| Working copy of a long lease translation | Deleted automatically after 24 hours |
| Refund record (order number and amount, no document content) | Deleted automatically after 90 days |
| Email address | Deleted 2 years after your last transaction |
| Session tokens (Upstash Redis) | Deleted automatically after 24 hours |
| Transaction records | 10 years, mandatory retention under Art. 958f OR |
| Server request logs (Vercel) | 30 days |
| Google Analytics cookies (_ga, _ga_*) | Up to 2 years, only if consent was granted; cleared immediately if consent is declined |
| Meta Pixel cookies (_fbp, _fbc) | Up to 90 days, only if consent was granted; cleared immediately if consent is declined |
| Google AdSense advertising cookies | Set and kept by Google; the duration is set by Google (see policies.google.com/technologies/cookies). Not set if consent is declined where the law requires it |
Cookies
| Type | Purpose | Consent required |
|---|---|---|
| Strictly necessary session cookie | Maintains your checkout session during payment verification (Upstash Redis-backed) | No, required for service delivery |
| Google Analytics cookies (_ga, _ga_*) | Measures page views, session duration, and navigation behaviour to help us improve the site. Only set if you accept analytics via the cookie banner. | Yes, requires your explicit consent |
| Meta Pixel cookies (_fbp, _fbc) | Measures the effectiveness of our content by tracking page views. Shared with Meta Platforms, Inc. (Pixel ID: 2442820362864514) to measure ad performance. Only set if you accept analytics via the cookie banner. | Yes, requires your explicit consent |
| Google AdSense advertising cookies | Used by Google to show ads, limit how often you see them and measure their results, and, where you consent, to personalise them. For visitors in Switzerland, the EEA and the UK they are only set after you accept in Google's consent message. | Yes, where the law requires it (Switzerland, EEA, UK) |
Analytics, measurement and advertising cookies (Google Analytics 4, Meta Pixel and Google AdSense) are only activated after you consent where the law requires it: through our cookie banner for analytics and measurement, and through Google's consent message for advertising. You can decline or withdraw consent at any time, the site works fully without them. Google acts as an independent controller for advertising: see how Google uses data at policies.google.com/technologies/partner-sites and manage ad settings at adssettings.google.com.
Your Rights
Under Art. 25 and 32 nDSG (and GDPR where applicable) you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data where no longer necessary
- Data portability, receive your data in a structured, machine-readable format (Art. 28 nDSG / Art. 20 GDPR)
- Restriction of processing in certain circumstances (Art. 18 GDPR)
- Object to processing based on legitimate interests (Art. 21 GDPR)
- Lodge a complaint with the Swiss supervisory authority
To exercise any right, email customer@livingease.ch. We will respond within 30 days.
Security
- TLS encryption for all data in transit
- Document content is sent to the Anthropic API and kept by LivingEase only temporarily: up to 2 hours for the input and up to 7 days for the result
- Upstash data expires automatically (see Section 5)
- Infrastructure access limited to the operator
Changes to This Policy
Material changes will be notified by email at least 30 days before taking effect. The current version is always published at this page.