Privacy Policy

Valid for pixify-ai.ch · Basis: Swiss Federal Act on Data Protection (FADP)

1. Controller

2. What Data We Process

We only process data that is necessary for the operation of Pixify-AI:

• Order data: Company or personal name, industry, description, offerings, contact details (phone, email, address), opening hours, as well as logos and images you upload – everything you provide in the order form.
• Domain holder information: The details of the legal owner (name, address, email, phone) required for the registration of your domain.
• Payment data: Payment is processed directly by Stripe. We ourselves do not store any credit card data, only payment status and subscription references.
• Technical data: Server log files and IP-based access limits (protection against misuse). This data is not evaluated in connection with your person.

2a. Access credentials for e-mail mailboxes

If we set up an e-mail mailbox for you, we generate a starting password for it. We store this encrypted on our server until you have changed it. We do this for one reason only: the password must reach you securely, and we must be able to verify whether the change has taken place.

• What: E-mail address and starting password, stored in encrypted form.
• Why: Performance of the contract (setting up the mailbox) and security of your access – Art. 31 para. 2 lit. a FADP.
• How long: Until the password change has been confirmed. The password is then deleted; only the details of when it was handed over and when it was changed are retained.
• Who: Exclusively the responsible body. No disclosure to third parties.

To verify the change, our system makes one automated login attempt to your mailbox each day. This solely determines whether the stored password is still valid. No messages are retrieved, read, stored or analysed. As soon as the login attempt is rejected, we delete the stored password automatically.

We openly point out: as administrator of the hosting account, we can reset the password of a mailbox and thereby gain technical access to it. This applies with any shared hosting provider. We do so only on your explicit instruction or on the basis of a legal obligation.

2b. Key figures from your Google profile

If your website is linked to a public Google Business Profile, we retrieve the published review count and average rating daily and store one daily snapshot each time. This allows us to show you how these figures have developed over recent months. The data concerned is publicly accessible information about your company, not data about individual reviewers. A maximum of 120 daily snapshots are stored; older ones are deleted automatically.

3. How We Use the Data

For contract performance: creation and operation of your website, registration of your domain in your name, hosting, invoicing, subscription management, and support. We also analyze which channels inquiries and orders come from (Section 4) to see which advertising works. We do not use third-party analysis tools and do not sell data to third parties; advertising pixels load only with your consent.

4. Cookies, Local Storage & Your Settings

Without your consent, pixify-ai.ch does not set any marketing or tracking cookies. If you allow "Advertising" in the privacy banner, cookies from advertising pixels are added (Section 4a). For the customer panel, a technically necessary session cookie ("PXAKUNDE") is set after login, which keeps you logged in and becomes invalid after logout or when the session expires. In your browser's local storage, we also store your selection in the privacy banner as well as intermediate stages of the order form; this information does not leave your device. You can adjust your selection at any time: Open privacy settings.

Where visitors come from

If you reach us via a marked link (for example from an ad, a newsletter, or a QR code) or from another website, we store this in your browser's local storage for a maximum of 90 days: the channel, the campaign name from the link, and the domain of the referring website. We do not store advertising or click identifiers. When you send us an inquiry or order, this information is included so we can see which advertising works. Additionally, we count visits by channel anonymously and only as a daily total – without cookies, without IP address. If you reject "Statistics" in the privacy banner, neither happens, and any previously stored information is deleted.

Ads on Google. We also run ads on Google. For this, no script and no cookie from Google runs on pixify-ai.ch; we do not store the click identifier "gclid" from the link. Whether an ad worked, we can see solely from the channel and campaign name as described above.

Evaluation with our own tool. Which ad generated how many inquiries and orders is evaluated by our own tool Ads-Pilot, which we operate ourselves. It receives sums by channel and campaign from this platform – number and amount – but no names and no contact information (for customer lists at Meta only the checksums of email addresses, Section 4a). It retrieves the numbers from the advertising networks (clicks, costs) from our own advertising accounts at Meta, Google and TikTok.

4a. Ad Measurement

We run ads on social networks. To see which ones work, we use the following measurement tools (none for Google – see Section 4):

• Meta Pixel by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Tracks which pages you visit and whether you place an order, start a Buchify trial month, or contact us after clicking an ad. It sets the cookies «_fbp» and, if you come via an ad, «_fbc» (each for 90 days). Meta privacy policy ↗

These tools only load once you allow "Advertising" in the notice. Until you do so, not a single byte is transmitted to Meta. You can withdraw your consent at any time: Change settings.

Server notifications. If you have allowed «advertising», our platform reports a purchase, the start of a Buchify trial month, the first paid annual fee thereafter, and an enquiry via a contact form directly to Meta (Conversions API) – including enquiries via the forms on web.pixify.ch and print.pixify.ch if you have allowed «advertising» there. Email address and phone number are transmitted only as a checksum (SHA-256), along with IP address, browser identification, the two Meta cookies, the page address and, in the case of an order, the amount – never your name and never the text of your message. For reporting the first annual fee after the Buchify trial month, we retain the two Meta cookies, IP address and browser identification for a maximum of 45 days; after that or after reporting, they are deleted. If an enquiry later becomes a quote or order, we also report that to Meta – with the same checksums, without names and without content. For this we retain the checksums of email and phone and the two Meta cookies for a maximum of 90 days after the enquiry. Without your consent, the server reports nothing.

Customer lists for advertising target groups. If you are a customer (website, shop or accounting), we give Meta the checksum (SHA-256) of your email address – never the address itself – so you don't see advertising for something you already have, and Meta can find people with similar interests («Custom Audience», «Lookalike Audience»). Meta matches the checksums against its accounts and uses them only for this purpose. The legal basis is our legitimate interest in advertising that doesn't run twice. You can object at any time: in the customer panel under «Data Protection & Advertising» or with a short message to us – from the next daily comparison onwards, your checksum will no longer be included.

In doing so, your IP address and information about your device are transmitted to the companies mentioned and processed there – including in countries outside Switzerland and the EU whose level of data protection does not correspond to that applicable here. The legal basis is your consent (Art. 6 revDSG).

4b. The Pixify app for iPhone, iPad and Android

The app displays your customer dashboard; the same data and purposes apply as in the browser. Additionally, only what a phone can do:

• Stay logged in: After login, the app receives a device key (a cookie that the app itself cannot read). This keeps you logged in for up to 90 days after last use. Logging out in the app or under «Security» invalidates it.
• Face ID, Touch ID, fingerprint: The app lock is checked by the phone itself. We do not receive any biometric data, only the answer «unlocked» or not.
• Camera and photos: only when you take or select a photo – such as a product image. The image is uploaded to your account; the app does not read any other photos.
• Notifications: If you allow notifications, we store a device identifier for notifications (push token) with your account. Delivery is via Apple's service (Apple Push Notification service) or on Android via Firebase Cloud Messaging from Google. The text never contains the name or address of your customer. You can turn each type off per device in the app, or all of them together in your phone's settings.
• No advertising and no analytics: The app contains neither an advertising pixel nor a tool for usage measurement and does not pass anything to advertising networks.

5. Disclosure to Third Parties (Processors)

For operations, we work with a small number of carefully selected partners:

• Stripe – secure payment processing and subscription management. You enter your payment data directly with Stripe.
• Hostinger (Hostinger International Ltd., Cyprus) – hosting of the websites and technical domain registration. Server location: Frankfurt am Main, Germany (EU). Your website content and the data from your client panel are stored there, not in Switzerland. For processing within the EU, the DSG and GDPR apply; a data processing agreement is in place.
• Cloudflare (Cloudflare, Inc., USA; storage in the EU) – backup only: Every day, a copy of the backup goes to a Cloudflare R2 storage in the EU. It is encrypted on our server beforehand (AES-256); only we have the key, Cloudflare cannot read the contents. Each day's copy remains there for fourteen days, each Sunday's copy for thirteen weeks, and each first-of-the-month copy for thirteen months. During this time it is locked against deletion and overwriting; afterwards it is automatically deleted. The copies serve only to restore data after an outage or error; we do not evaluate them. Cloudflare's data processing agreement with standard contractual clauses applies.
• SWITCH – the Swiss registration authority for .ch domains receives the holder data that is legally required for every .ch domain.
• Google Fonts – in exceptional cases only. The font is served from our own server; if the font files are temporarily unavailable, the site falls back to Google, and in doing so your IP address is transmitted to Google. Cookies are not set in either case. What currently applies is shown on our security page – it measures this upon each visit.
• Apple and Google – only if you allow notifications in the app: They deliver the notification to your phone (section 4b).
• Swiss Post – only for online shops that ship with Swiss Post: If a Swiss Post tracking number is entered for an order, Pixify queries Swiss Post to check whether the package has been delivered and then closes the order. Only the tracking number is transmitted; only the delivery status and time of delivery are stored, no names or addresses from the response. The shop can disable this in the shop panel.
• Anthropic (USA) – for the automatic creation and translation of website and shop texts, we transmit the company and product texts you entered in the order form or panel to the AI interface of Anthropic. No payment or login data is transmitted; the transfer to the USA is made on the basis of appropriate safeguards (standard contractual clauses).

5a. AI assistance in the customer panel and in the app

Three buttons in the customer panel work with the AI interface of Anthropic (USA): «Just say it» transmits your requested changes and your website contents (including address, telephone and names listed there); the SEO suggestion transmits company name, industry, location, services and brief description; the AI draft in the blog transmits the topic, company name, industry, location and brief description. Before any of these run for the first time, the panel – in the browser as well as in the app – explicitly asks for your permission; nothing is sent without it. You can withdraw permission at any time at the same place. In the sandbox it applies only to the session, and AI is switched off there.

The translation of multilingual websites and shops is part of the booked service (section 5) and is not dependent on this permission. The «Questions for Pixify?» assistant is not shown in the app.

5b. The assistant on pixify-ai.ch and the chat pilot

At the bottom right of pixify-ai.ch, the assistant «Question for Pixify?» answers questions about our services. What you type there is sent to Anthropic's AI interface (Anthropic Ireland, Limited is the contractual partner; processing can also take place in the USA on the basis of standard contractual clauses). Your IP address is not sent with it. Anthropic does not use the questions for training its models and generally deletes them after 30 days. We store the question with the date and the page on which you asked it – without IP address and without cookie – to see what visitors want to know, and delete it after 90 days. Please do not enter confidential information there.

We operate the chat pilot on our customers' websites as a data processor. The respective company is responsible for the questions; its privacy policy describes the chat pilot. The questions are sent to Anthropic in the same way, and we do not store them.

6. Retention

We retain order and contract data for the duration of the subscription and in accordance with legal retention obligations (generally 10 years for business records). Afterwards they are deleted. Uploaded images and website contents are removed after the contract ends. In the backups, deleted data remains until the respective copy expires – at the latest after approximately thirteen months (section 5, Cloudflare). Data is restored from them only after an outage or error.

7. Your Rights

You have the right at any time to request information about the data we store about you, as well as to have it corrected or deleted, provided no statutory retention obligations stand in the way. A brief message to info@pixify.ch is sufficient.

8. Data Security

The transmission is exclusively encrypted (TLS); calls via HTTP are redirected before a page is delivered. Access to the customer panel is secured by one-time login links, limited session duration and access restrictions; additionally you can enable confirmation via app in the panel (second factor). Your data is backed up daily: on our server for fourteen days, encrypted off-site for up to thirteen months (section 5, Cloudflare).

Anyone who discovers a security vulnerability should report it via security.txt. Which protective measures are currently in effect is shown on our security page – nothing stated there is a claim; it reflects what was measured upon each visit.

9. Changes

We may update this privacy policy as needed. The version published here at any given time shall apply.

→ Legal Notice