Privacy PolicyPrivacy Policy

147codez, owner Geranmayeh · Stettfurterstrasse 4b, CH-9548 Matzingen, Switzerland

Email: [email protected]

147codez develops and operates AI automation tools for companies (including Arivo, Offerto, Docura) as well as this website. This policy describes how we process personal data on 147codez.com and in the course of our services.

When you access the website, technically necessary data is processed (e.g. IP address, browser type, timestamp) - in server logs for security and stability, for a maximum of 7 days.

For audience measurement we use our own, data-minimising statistics (anonymous session ID, without tracking cookies and without sharing with advertising networks). No profiles are created.

In addition we use Google Analytics 4, but only after your explicit consent via the notice on your first visit. If you decline or make no choice, Google Analytics is not loaded and no Google cookies are set.

When you contact us via the contact form or by email, we process the data you provide (e.g. name, email, phone, message) in order to answer your enquiry. Sending is handled by our email provider (see below). We use this data solely to process your enquiry.

On our website you can ask questions to an AI chat assistant. To do this, we process your messages and the conversation so far in order to generate a reply. Replies are generated by the AI model Claude from Anthropic, which we run via Amazon Bedrock (Amazon Web Services) in Zurich. Processing stays in Switzerland and the EU. Your messages are not used to train AI models.

We do not store the conversation on our servers. It is kept only in your browser's storage (SessionStorage) and is deleted when you close the tab. You can delete it yourself at any time with "New" in the chat.

If you book an intro call or send an enquiry via the chat, we process your details (e.g. name, email, phone, company, request) in the same way as for appointment booking or the contact form. This only happens after you have confirmed the summary in the chat.

In the "Your bot" area you can enter the address of a website. We then read publicly accessible pages of that website so that the assistant can show a preview based on that content. We keep this content in memory for at most one hour and do not store it permanently. Only enter addresses of websites you run yourself or whose content is public.

Replies are generated automatically and may contain errors. Only our quotes and confirmations by email are binding. Do not enter sensitive personal data in the chat (e.g. health data).

For a customer account we process details such as email, company name and username. Payments and subscriptions are handled via Stripe. Your card details are processed exclusively by Stripe - 147codez does not store full payment data. Stripe also provides the customer portal for managing and cancelling the subscription.

In our tools (e.g. Arivo, Offerto, Docura) we process personal data on behalf of the respective customer company. The customer company is responsible under data protection law; 147codez acts as a processor pursuant to Art. 9 of the Swiss FADP. The details are governed by the respective data processing agreement (DPA) between 147codez and the customer company.

We do not use advertising cookies. For operation (e.g. staying logged in, settings, your cookie choice) technically necessary local storage in the browser (LocalStorage) is used. This data does not leave your device for advertising purposes. In addition, our upstream security filter Cloudflare may set a technically necessary cookie (__cf_bm) to fend off automated access.

Analytics cookies are only set if you explicitly consent to web analytics. These are the cookies _ga and _ga_* from Google Analytics with a lifetime of up to 24 months. You can revoke your decision at any time by deleting the website data in your browser.

We work with the following service providers:

Vercel

Website hosting (frontend). Server location EU (Frankfurt), delivery via global CDN, SOC 2 certified.

Cloudflare, Inc.

DNS management as well as an upstream content delivery network and security filter. Every visit to the website passes through Cloudflare, whereby technical data (IP address, browser type, requested address) is processed. To fend off automated access, Cloudflare may set a technically necessary cookie (__cf_bm). Worldwide server network with delivery from the nearest location.

Hostpoint AG

Domain management for 147codez.com as well as a still existing backup mailbox. Server location Switzerland.

Railway

Backend hosting and database operation. Server location EU/USA, SOC 2 certified.

Stripe

Payment processing and subscription management. PCI-DSS certified. Contracting party Stripe Payments Europe Ltd., Ireland (EU); processing in the USA is possible.

Resend

Sending emails (contact, confirmations, system mails). Server location EU (Ireland).

Amazon Web Services EMEA SARL (Amazon Bedrock)

Operation of the AI chat assistant on the website (model Claude from Anthropic). Region Zurich, routing only within the EU. Inputs and outputs are not stored and not used for model training. Server location Switzerland/EU.

Google Workspace (Google Ireland Ltd.)

Operation of our mailbox [email protected]. When you write to us, your message including sender details is stored with Google. Server location EU/USA.

Anthropic (Claude AI)

AI features in our tools (e.g. Arivo, Offerto, Docura). Data is not used for model training. Server location USA.

Google Ireland Ltd. / Google LLC

Google Analytics 4 for audience measurement, only with your consent. Server location USA.

Sentry (Functional Software Inc.)

Error and stability monitoring of the website. In the event of an error it records technical data (e.g. browser type, page visited, IP address, error message). Server location EU (Frankfurt), no cookies are set and no session recordings are made.

Google Ireland Ltd. (Google Calendar, Google Meet)

Appointment booking via our page /termin. We store name, email, phone, company, topic and time slot in our own management system. The appointment is also added to our Google Calendar; for video calls Google creates a Meet link. Server location EU/USA.

Jitsi Meet (8x8 Inc.)

Fallback for video calls via meet.jit.si if no Google Meet link can be created. When joining, technical connection data (e.g. IP address) is transferred to 8x8. Servers partly in the USA.

The required data processing agreements (DPA) are in place with these providers; they meet the requirements of the Swiss FADP and, where applicable, the GDPR.

Some of these providers are based abroad, in particular in the USA. We only disclose personal data abroad if one of the following conditions is met:

1. The recipient country provides an adequate level of data protection recognised by the Federal Council (Annex 1 of the Data Protection Ordinance). For the USA this has applied since 15 September 2024, provided the receiving company is certified under the Swiss-U.S. Data Privacy Framework.
2. Appropriate safeguards pursuant to Art. 16 para. 2 of the Swiss FADP are in place, in particular the Standard Contractual Clauses recognised by the FDPIC or binding corporate rules.
3. An exception under Art. 17 of the Swiss FADP applies, such as your explicit consent or the necessity for the performance of a contract.

We store personal data only for as long as necessary for the respective purpose or required by law. Data in the tools is treated according to the respective DPA and deleted within 30 days after the end of the contract. You can request the deletion of your data at any time at [email protected].

You have the right of access (Art. 25 FADP), the right to receive and transfer your data (Art. 28 FADP) and the right to have inaccurate personal data corrected (Art. 32 para. 1 FADP). A claim for deletion follows from Art. 32 FADP in conjunction with the data processing principles. Where the GDPR applies, Art. 15-20 GDPR additionally apply. Requests to: [email protected]

You also have the right to lodge a complaint with the competent supervisory authority - in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the respective competent data protection authority.

The Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023) applies, as well as, where applicable, the GDPR of the European Union. The place of jurisdiction is Frauenfeld, canton of Thurgau, Switzerland.