Who controls your data
The operator of SwissPilot is responsible for processing your personal data. The operator's legal identity (name, address, commercial register entry) is not yet configured — HUMAN LEGAL REVIEW REQUIRED before public commercial launch. No contact details are invented here.
What SwissPilot collects
- Account data: your email address and the name you choose to display. Passwords are handled by our authentication provider — SwissPilot never sees or stores them.
- Swiss Profile answers: residence stage, canton/municipality, nationality group, permit situation, employment, housing, family and vehicle status — only what the plan actually needs.
- Documents you upload: scanned administrative letters. Stored privately, visible only to you.
- AI conversations: your questions and the assistant's answers.
- Deadlines and reminders you or verified rules create.
- Subscription status (free or PRO) — never your card details.
- Analytics events (only with your consent): pseudonymous usage signals. We never collect document content, conversation content, private notes, passwords or exact addresses in analytics.
Why and how we use it
Your profile answers determine which administrative steps apply to you. Documents are analyzed to explain them in your language. Deadlines produce reminders you asked for. We do not sell your data and do not use profile information for unrelated marketing.
AI processing
SwissPilot uses artificial intelligence to explain administrative information. Only the minimal context needed for your answer is sent to the AI provider (for example your canton, not your whole profile). Your documents are never attached automatically. Which provider processes the data, where processing occurs, and whether data may be used for model training is UNKNOWN — VERIFY WITH PROVIDER. We do not claim your data is never used for AI training until this is contractually verified.
Document processing
Uploaded documents are stored privately with owner-only access. Files are not publicly browsable or reachable through predictable URLs; access uses short-lived authorized links. You can delete any document at any time.
Analytics
Analytics is optional and consent-based (essential-only by default). Events are first-party, pseudonymous and validated server-side; unauthorized fields are dropped.
Payments
Payments are processed by Stripe. SwissPilot never receives or stores your full card number, CVV or bank credentials. We store subscription status and provider identifiers for billing accuracy.
Communications
We send transactional messages only (account security, password reset, requested deadline reminders, payment confirmation, important service notices). Accepting these Terms is never treated as marketing consent.
Third-party providers
SwissPilot runs on the Base44 platform (hosting, database, authentication, storage). AI, email and payments are provided by external services. Details per activity live in our internal processing register. Provider infrastructure facts (server country, encryption standards, backup schedules, certifications) are UNKNOWN / VERIFY WITH PROVIDER — we do not invent them.
International data transfers
Data may be processed outside Switzerland (for example by the platform, AI, email or payment providers). Actual transfer destinations and safeguards are UNKNOWN until verified with each provider — LEGAL REVIEW REQUIRED.
Retention
We keep your data while your account is active. When you delete your account, your profile, plan, documents, conversations, deadlines and notifications are deleted. Some records are retained for legal reasons (for example payment/transaction records for accounting, and the record of which Terms version you accepted). Exact retention periods: LEGAL REVIEW REQUIRED.
Security
Access to your data is restricted server-side: every read and write is checked against your account identity, and admin functions require a server-verified admin role. Documents are private by default. We do not claim security certifications we have not verified.
Your rights
You can access, correct, export or delete your personal data from Profile → Privacy:
- Download my data — a readable export of your own records (never another user's, never secrets).
- Delete my account — a real deletion workflow that explains what is deleted and what is retained for legal reasons.
- Correct information — edit your profile at any time; your Swiss Plan updates safely. For anything else, submit a privacy request and we will review it. Privacy contact: published only once a real monitored channel exists.
Changes to this policy
This policy is versioned. Material changes are announced in the app; significant changes may require re-acceptance. We never claim practices we do not actually follow.
This document is a structured DRAFT — LEGAL REVIEW REQUIRED before public commercial launch. It is not attorney-approved legal advice.