Privacy Policy

Controller

147codez, owner Geranmayeh · Stettfurterstrasse 4b · CH-9548 Matzingen, Switzerland

Email: [email protected]

147codez develops and operates AI automation tools for companies (including Arivo, Offerto, Docura) as well as this website. This policy describes how we process personal data on 147codez.com and in the course of our services.

Visiting our website

When you access the website, technically necessary data is processed (e.g. IP address, browser type, timestamp) - in server logs for security and stability, for a maximum of 7 days.

For audience measurement we use our own, data-minimising statistics (anonymous session ID, without tracking cookies and without sharing with advertising networks). No profiles are created.

In addition we use Google Analytics 4, but only after your explicit consent via the notice on your first visit. If you decline or make no choice, Google Analytics is not loaded and no Google cookies are set.

Contact form & enquiries

When you contact us via the contact form or by email, we process the data you provide (e.g. name, email, phone, message) in order to answer your enquiry. Sending is handled by our email provider (see below). We use this data solely to process your enquiry.

Account, subscription & payments

For a customer account we process details such as email, company name and username. Payments and subscriptions are handled via Stripe. Your card details are processed exclusively by Stripe - 147codez does not store full payment data. Stripe also provides the customer portal for managing and cancelling the subscription.

Data in our tools (processing on behalf)

In our tools (e.g. Arivo, Offerto, Docura) we process personal data on behalf of the respective customer company. The customer company is responsible under data protection law; 147codez acts as a processor pursuant to Art. 9 of the Swiss FADP. The details are governed by the respective data processing agreement (DPA) between 147codez and the customer company.

Cookies & local storage

We do not use advertising cookies. For operation (e.g. staying logged in, settings, your cookie choice) technically necessary local storage in the browser (LocalStorage) is used. This data does not leave your device for advertising purposes.

Analytics cookies are only set if you explicitly consent to web analytics. These are the cookies _ga and _ga_* from Google Analytics with a lifetime of up to 24 months. You can revoke your decision at any time by deleting the website data in your browser.

Third parties & processors

We work with the following service providers:

• Vercel - Website hosting (frontend). Server location EU (Frankfurt), delivery via global CDN, SOC 2 certified.
• Railway - Backend hosting and database operation. Server location EU/USA, SOC 2 certified.
• Stripe - Payment processing and subscription management. PCI-DSS certified.
• Resend - Sending emails (contact, confirmations, system mails).
• Anthropic (Claude AI) - AI features (chat assistant, tools). Data is not used for model training. Server location USA.
• CARTO (CartoDB Inc.) - Map display on the contact page (static map tiles, data from OpenStreetMap). Your IP address is transmitted to CARTO when the map loads. Server location USA, no cookies are set.
• Google Ireland Ltd. / Google LLC - Google Analytics 4 for audience measurement, only with your consent. Server location USA.

The required data processing agreements (DPA) are in place with these providers; they meet the requirements of the Swiss FADP and, where applicable, the GDPR.

Some of these providers are based abroad, in particular in the USA. Personal data is only disclosed abroad if an adequate level of data protection exists or appropriate safeguards pursuant to Art. 16 et seq. of the Swiss FADP are in place (e.g. Standard Contractual Clauses or recognised adequacy decisions).

Data storage & deletion

We store personal data only for as long as necessary for the respective purpose or required by law. Data in the tools is treated according to the respective DPA and deleted within 30 days after the end of the contract. You can request the deletion of your data at any time at [email protected].

Your rights

You have the right of access (Art. 25 FADP), the right to receive and transfer your data (Art. 28 FADP) and the right to have inaccurate personal data corrected (Art. 32 para. 1 FADP). A claim for deletion follows from Art. 32 FADP in conjunction with the data processing principles. Where the GDPR applies, Art. 15-20 GDPR additionally apply. Requests to: [email protected]

You also have the right to lodge a complaint with the competent supervisory authority - in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the respective competent data protection authority.

Applicable law

The Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023) applies, as well as, where applicable, the GDPR of the European Union. The place of jurisdiction is Frauenfeld, canton of Thurgau, Switzerland.