Privacy policy

[PLACEHOLDER: FIRST LAST NAME or company], [PLACEHOLDER: ADDRESS], Switzerland

Email for data protection matters: [PLACEHOLDER: EMAIL]

All details you enter in the form (e.g. personal details, employer, income, household, motivation letter), your photo and all files you add (e.g. ID, debt collection extract, payslips) are processed exclusively in your browser. The PDF is generated directly on your device as well. This data is not transmitted to our servers or to any third party. Exception: text you choose to send to the optional AI assistant (section 7).

So that you can continue later, this data is stored locally in your browser’s storage (IndexedDB) on your device until you delete it – using the “Delete my data” button or by clearing the site data in your browser settings. We have no access to it and can neither view nor restore it.

We also use your browser’s local storage (localStorage) for three entries that are never sent to us: “dossierfix.theme” (your light/dark theme choice), “dossierfix.unlock” (unlock code after payment with an expiry date, valid for 7 days; it contains an identifier of the Stripe session but no details about you) and “dossierfix.assistant.consent.v1” (your consent to the AI assistant, only if given). Session storage (sessionStorage) only holds technical flags “dossierfix.tracked.*” so that statistics events are not counted twice. Your dossier is kept in the IndexedDB database “dossierfix”. None of these are cookies; they are removed when you clear the site data, and “Delete my data” removes the dossier and the unlock code.

Please note: anyone with access to your device or browser profile can also see this data. If you use a shared device, delete your data after use.

Our server receives no form data and no files. When you start the payment, your browser only sends the chosen language to our server, which then opens a checkout page at Stripe. After payment, our server uses the session ID to check with Stripe that the payment was made and issues a signed unlock code. Only if you use the optional AI assistant does our server forward the text you send to Anthropic, without storing it (section 7).

We run no customer database and no user accounts.

This website is operated by Vercel Inc. (USA). When you visit the website, technically necessary data is processed, in particular IP address, date and time, requested address, referrer, browser and operating system, and status codes. This data is used to deliver the website, for security and for error analysis.

The legal basis is our legitimate interest in a secure, working website. Vercel keeps the log files only for a short period in line with its policies. [PLACEHOLDER: verify and add the retention period for the chosen Vercel plan]

Payments by credit card, debit card or TWINT are processed by Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, and its affiliates). The checkout page is operated directly by Stripe. The details you enter there (e.g. email address, card data) are processed by Stripe under its own responsibility for payment processing, fraud prevention and compliance with legal obligations. Stripe’s privacy policy applies (stripe.com/privacy).

We do not see full card details. Our Stripe account shows the transaction information provided by Stripe (e.g. amount, date, payment method and, where applicable, the email address you gave to Stripe). We use it only for accounting, refunds and statutory retention obligations (generally 10 years).

To understand how the website is used, we use Plausible Analytics (Plausible Insights OÜ, Estonia). Plausible sets no cookies and builds no user profiles across websites. Requests go to our own domain and are forwarded from there to Plausible, so your browser does not contact any third party directly.

We record: the page address visited (without parameters), referrer, browser, operating system, device type and the country derived from the IP address, as well as anonymous events (builder started, preview, checkout started, payment completed, download) with language, template, step and number of attachments. The content of your dossier is never transmitted.

The IP address is not stored; together with the browser it is only converted into an irreversible hash that changes daily. We only see aggregated statistics. The data is stored in the EU.

In the builder you can choose to use an AI assistant to ask questions about your rental application or to have your motivation letter revised or translated. The assistant is off by default. Before first use we inform you and ask for your consent; it is stored only locally in your browser (localStorage) and can be withdrawn in the assistant at any time.

Only the text you actively send is transmitted: the questions you type together with the history of the current conversation or, in “Improve letter” mode, the current text of your motivation letter. Uploaded files, your photo and your other form details are never transmitted automatically. If your text contains an AHV number, IBAN, email address or phone number, the assistant warns you and offers to remove them before sending.

The text is passed through our server to Anthropic (Anthropic PBC, San Francisco, USA, or the Anthropic entity named in the contract), which operates the Claude AI model as our processor; the reply is returned to your browser. Our server neither stores nor logs your questions or the answers. To limit abuse, the number of requests per IP address is counted in memory for at most 10 minutes; the IP address is not passed on to Anthropic. [PLACEHOLDER: verify Anthropic’s contracting entity, address and data processing agreement (DPA)]

Under Anthropic’s commercial terms, content sent via the API is not used to train AI models and is retained only for a limited period. [PLACEHOLDER: verify and add the current Anthropic API retention period per their policy] If you do not use the assistant, no data is transmitted to Anthropic. AI answers can be wrong and are not legal advice.

The transfer is based on your voluntary consent. You can withdraw it in the assistant at any time; this does not affect the lawfulness of transfers made before. DossierFix can be used fully without the AI assistant.

This website sets no cookies, neither our own nor third-party ones. The local storage entries listed in section 2 only serve the website’s functions, stay on your device and are not used to recognise you or for advertising.

On Stripe’s payment page (checkout.stripe.com), Stripe’s cookie rules apply.

Vercel Inc., USA – hosting and delivery of the website, server log files, running our server functions; processor. Transfer basis: Swiss-U.S. Data Privacy Framework or standard contractual clauses. [PLACEHOLDER: verify Vercel’s DPF certification and DPA]

Plausible Insights OÜ, Estonia (EU) – cookieless audience measurement (section 6); processor. Data stored in the EU; Estonia is a country whose level of data protection the Federal Council has recognised as adequate.

Anthropic (USA) – optional AI assistant, only with your consent (section 7); processor. Transfer basis: Swiss-U.S. Data Privacy Framework or standard contractual clauses. [PLACEHOLDER: verify Anthropic’s DPF certification or the standard contractual clauses in its DPA]

Stripe Payments Europe Ltd., Ireland (EU), and affiliated companies, including in the USA – payment processing (section 5); Stripe processes payment data as an independent controller. Ireland is a country with recognised adequate protection; transfers within the Stripe group to the USA are covered by Stripe’s safeguards. [PLACEHOLDER: verify Stripe’s role under the Stripe DPA]

Beyond that, we only disclose personal data where we are legally required to (e.g. to authorities).

Vercel and Stripe may process data in the USA. The Swiss Federal Council has recognised an adequate level of data protection for companies certified under the Swiss-U.S. Data Privacy Framework. Where no such certification exists, transfers are based on the European Commission’s standard contractual clauses as recognised by the FDPIC, with the adaptations required for Switzerland. If you use the optional AI assistant, the text you send is transferred to Anthropic PBC in the USA; the same safeguards apply. [PLACEHOLDER: verify Anthropic’s DPF certification or the standard contractual clauses in the data processing agreement]

Stripe Payments Europe Ltd. (Ireland) and Plausible (EU) are located in countries whose level of data protection the Federal Council has recognised as adequate.

Dossier data stays only on your device until you delete it. The unlock code expires after 7 days. Vercel keeps server logs only briefly. We keep transaction information at Stripe for as long as statutory retention obligations require. We do not store text sent to the AI assistant; for retention at Anthropic see section 7.

We make no automated individual decisions within the meaning of Art. 21 FADP or Art. 22 GDPR and carry out no profiling. Audience measurement only produces aggregated statistics. The AI assistant only makes suggestions that you review and accept or discard yourself; it decides nothing about you.

DossierFix is intended for adults (18 and over). Minors may only use and pay for DossierFix with the consent of their legal representative. We do not knowingly collect data from children; as dossier data stays on the device anyway, parents can delete it there at any time.

Under the FADP you have the right of access (Art. 25 FADP), to rectification and erasure of your personal data, to object to processing, and to receive or transfer your data (Art. 28 FADP). We usually answer requests within 30 days.

You control your dossier data directly in your browser: you can view, change and delete it at any time. Apart from payment data at Stripe and any email correspondence, we hold no data about you. For any request, please contact us at the email address above. We may ask for proof of identity.

Where the GDPR applies to our processing, we rely on the following legal bases: performance of a contract (Art. 6(1)(b) GDPR) for payment and unlocking; legitimate interests (Art. 6(1)(f) GDPR) for hosting, security, abuse limitation and cookieless audience measurement; your consent (Art. 6(1)(a) GDPR) for the optional AI assistant, which you can withdraw at any time (Art. 7(3) GDPR); legal obligations (Art. 6(1)(c) GDPR) for keeping accounting records.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can also lodge a complaint with a data protection supervisory authority in the EU, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

Switzerland benefits from an adequacy decision of the European Commission. Transfers to the USA go to recipients certified under the EU-U.S. Data Privacy Framework or are based on standard contractual clauses (Art. 46(2)(c) GDPR).

Representative in the EU (Art. 27 GDPR): we have not designated a representative in the EU. Our processing is occasional, does not include large-scale processing of special categories of data, and we store no dossier data on servers; we therefore consider the exemption in Art. 27(2)(a) GDPR to apply. [PLACEHOLDER: have this reviewed by a lawyer]

The website is served exclusively over an encrypted connection (HTTPS). A strict Content Security Policy only lets your browser connect to our own domain; no third-party scripts are loaded. Statistics events and requests to the optional AI assistant go through our server; payment is a redirect to Stripe’s payment page.

As your dossier data stays on your device, its protection also depends on the security of that device (screen lock, up-to-date software, no shared browser profile).

If we become aware of a data security breach that is likely to result in a high risk to your personality or fundamental rights, we report it to the FDPIC as soon as possible (Art. 24 FADP). We inform affected persons where this is necessary for their protection or the FDPIC requests it. Where the GDPR applies, we notify breaches to the competent supervisory authority or the affected persons in accordance with Art. 33 and 34 GDPR. Every breach is documented internally.

You can lodge a complaint with the supervisory authority: Federal Data Protection and Information Commissioner (FDPIC / EDÖB), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. People in the EU can also contact a supervisory authority in the EU (section 15).

We may amend this privacy policy if the website or the legal framework changes. The version published on this page applies.