Privacy Policy

Helvetii AI GmbH ("we") is a Swiss company. We process personal data under the Swiss Federal Act on Data Protection (FADP) and, where we serve customers in the EU/EEA, additionally under the EU General Data Protection Regulation (GDPR).

1. Controller

Where we process documents on behalf of a customer, we act as processor; that processing is governed by the Data Processing Agreement concluded with the customer.

2. Data we process

• Account and contract data: name, email, organization, billing details, support communications.
• Usage data: IP address, device information, technical logs, and cookies strictly necessary to operate the service.
• Document content: documents submitted to our services are processed in memory to produce the requested output and are not stored beyond what is technically necessary to complete the request. Intermediate representations are not retained.

3. Why we process it

To provide and operate our services, manage accounts and billing, keep our services secure, comply with legal obligations, and — where you consent — for purposes we ask you about. Where the GDPR applies, the legal bases are contract, legitimate interest, legal obligation, and consent (which you may withdraw at any time).

4. Hosting, sharing and transfers

Our services are hosted in Switzerland, which the European Commission recognizes as providing adequate data protection. We do not sell personal data. We share it only with sub-processors that support our services (hosting and compute infrastructure, AI model inference, payment processing) and with authorities where required by law. Sub-processors are bound to equivalent data protection obligations, and processing remains within the Swiss and European data protection framework. Where a transfer to another country occurs, we rely on adequacy decisions or Standard Contractual Clauses. Our current sub-processor list is available on request at support@helvetii.ai.

5. Security

We apply technical and organizational measures appropriate to the risk, including encryption in transit and at rest, access controls, and logging. A description of our measures is available on request.

6. Retention

Account and usage data are retained for the term of the contract plus applicable legal retention periods, then deleted. Document content is not retained (see Section 2).

7. Your rights

You may request access, rectification, deletion, restriction, portability, or object to processing, and withdraw consent at any time: support@helvetii.ai (response within 30 days). You may lodge a complaint with the Swiss FDPIC or your competent EU supervisory authority. For documents we process on behalf of a customer, please contact that customer as controller.

8. Changes

We may update this policy; the version published on our website applies.