Only the French version is authoritative; in case of any difference, it prevails. Read the French version
Privacy policy
Before you analyse a website. To read your website and write your profiles, SwissLaunchKit sends the text of its public pages, and what you enter about your business, to Anthropic, our artificial intelligence provider, which processes them in particular in the United States (article 4).
1. Who is the controller
Karman Consulting Sàrl, Chemin du Carré 8b, 1271 Givrins, Switzerland, UID CHE-396.156.863. For any question about your data: hello@swisslaunchkit.ch.
2. The data we process, and why
| Data | Why |
|---|---|
| Account: your email address; the login link, stored in encrypted form, valid for 15 minutes; a signed session cookie, valid for 30 days. | Log you in without a password and attach your purchases to your account. |
| Team: the email address of the colleagues you invite to a website, the date of the invitation and of their first login; the invitation link, stored in encrypted form, valid for 7 days; the invitation email. | Allow your colleagues, with an address on your website's domain, to work on that website without paying. You must tell them that you are passing us their address. |
| Purchase: date, amount and currency, identifiers of the Stripe session and payment, website tied to the licence and the date it was tied; when you click the payment button, your email address, the version of the terms of sale, the exact text and version of the box ticked, the date, the time, the IP address and the browser used; the order confirmation email. | Perform the sale, keep the accounts, and prove what you accepted in the event of a payment dispute. These items, except the browser, are also attached to the payment at Stripe. |
| Delivery log: for each licence, date of the first and last display of the complete list, number of displays, website, number of results, IP address. | Prove that the list was delivered (terms of sale, article 7). |
| Analysis: the website address, the text of its public pages, your business profile, your answers to the additional questions (including topics to avoid), the sender you specify (name, role, signature details), your base email and your approvals. | Choose your sources, write your profiles and emails, and make them available to you on any device. |
| Protection against abuse: usage counters by IP address and by email address, per hour, including for invitations. | Limit the sending of login links and abusive analyses. |
| Technical logs of the host: IP address, date, page requested. | Serve the pages and ensure the security of the website. |
We do not sell any data, run no targeted advertising and use no audience-measurement tool. Avoid entering sensitive data (health, opinions, third-party data) in the free fields: it is not needed.
3. Choice of sources: without artificial intelligence
The choice of the sources offered to you follows fixed rules (type, canton, language, cost), with no artificial intelligence model. No decision producing legal effects concerning you is taken in an automated way.
4. Writing and reading the website: Anthropic, in the United States
What is sent. To find the canton of your head office and write your profiles and emails, we send to Anthropic Ireland, Limited (Ireland), which provides the Claude models and runs them on computing infrastructure located in several countries, in particular in the United States: extracts of the text of the public pages of the analysed website and its metadata, your business profile, your answers to the additional questions, your base email and the name of the sender you specified. Your login email address and your payment details are not sent.
Why, and on what basis. This transfer is necessary to provide the service you are buying (writing on demand). Anthropic acts as a processor on our behalf, under its data processing addendum. Anthropic is not certified under the Swiss-U.S. Data Privacy Framework. The transfer to the United States therefore relies on the European Commission's standard contractual clauses, supplemented by a Swiss addendum designating the FDPIC as the competent authority, incorporated into Anthropic's data processing addendum and recognised in Switzerland as a safeguard (art. 16 para. 2 let. d nFADP). For your own data, the transfer is also directly connected with the performance of our contract with you (art. 17 para. 1 let. b no. 1 nFADP).
Safeguards. Under its commercial terms, Anthropic does not use data received through its programming interface to train its models.
Duration. Under its published rules, Anthropic deletes the data received through its interface and the texts produced within 30 days. It may keep them longer to enforce its usage policy: up to 2 years for content flagged as contrary to that policy. On our side, the texts written remain in your account area for the period stated in article 7 of this policy.
5. Our other providers
| Provider | Role | Place of processing | Safeguard for Switzerland |
|---|---|---|---|
| Vercel Inc. | Hosting of the website and server functions | Server functions in Frankfurt (Germany); company and part of the processing in the United States | Certified under the Swiss-U.S. Data Privacy Framework |
| Stripe Payments Europe, Limited and Stripe, LLC | Payment by card and TWINT. Card details go directly to Stripe, never to us. For fraud prevention and its legal obligations, Stripe also acts in its own name, under its own privacy policy. | Ireland, United States | Stripe, LLC certified under the Swiss-U.S. Data Privacy Framework; standard contractual clauses adapted to Swiss law |
| Resend (Plus Five Five, Inc.) | Sending of login, invitation and confirmation emails | Sent from Ireland; account data and sending logs in the United States | Standard contractual clauses adapted to Swiss law (not certified for Switzerland) |
| Anthropic Ireland, Limited | Reading the website and writing (article 4) | Ireland; processing in particular in the United States | Standard contractual clauses with Swiss addendum |
| Upstash, Inc. (subscribed through Vercel) | Storage of accounts, teams and per-website data, anti-abuse counters (IP address, email address) | Database in Frankfurt (Germany); company in the United States | Certified under the Swiss-U.S. Data Privacy Framework |
| Functional Software, Inc. (Sentry) | Reporting of website errors: error message, page and browser concerned. IP address not stored. | Data in Germany (Sentry's European region); company in the United States | Certified under the Swiss-U.S. Data Privacy Framework |
Fonts are served by our own website: your browser contacts no third-party service to display them.
Contracts and disclosure abroad. We have concluded a data processing agreement with each of these providers (art. 9 nFADP), incorporated into its terms. Each may use other sub-processors, whose list it publishes. The United States offers a level of protection recognised by the Federal Council only for companies certified under the Swiss-U.S. Data Privacy Framework: this is the case for Vercel, Stripe, LLC, Upstash and Sentry (checked at dataprivacyframework.gov on 28.10.2026, on 29.10.2026 for Sentry). For Resend and Anthropic, which are not certified for Switzerland, the disclosure relies on the European Commission's standard contractual clauses adapted to Swiss law, incorporated into their terms (art. 16 para. 2 let. d nFADP). Ireland and Germany offer an adequate level of protection.
6. Cookies and storage in your browser
SwissLaunchKit uses only one cookie, your session cookie, which is essential to stay logged in. Your browser also keeps your work in progress (local storage) so that you do not lose it when reloading the page. No advertising cookies, no audience-measurement cookies.
7. How long we keep your data
| Data | Duration |
|---|---|
| Account and per-website data | 24 months after the last login, then deletion; earlier deletion on request |
| Proof of purchase and delivery log (box ticked, IP address, browser, confirmation, displays of the list) | 24 months after payment |
| Accounting records (sales) | 10 years (art. 958f CO) |
| Login link | 15 minutes |
| A colleague's invitation link | 7 days |
| Session cookie | 30 days |
| Anti-abuse counters | 40 days at most |
| Data sent to Anthropic | 30 days at most at Anthropic; up to 2 years for content flagged as contrary to its usage policy (article 4) |
8. Your rights
You may at any time request access to your data (art. 25 nFADP), its rectification or erasure, object to processing, and receive the data you have provided to us in a common format (art. 28 nFADP). Write to hello@swisslaunchkit.ch: we respond within 30 days. We may keep what the law obliges us to keep, in particular accounting records.
You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch. If you live in the European Union, you may also contact the data protection authority of your country.
9. Security
Connections to the website are encrypted (HTTPS). The access keys to our providers stay on the server and never appear in the page. Login links are stored in encrypted form and expire quickly. In the event of a data breach presenting a high risk for you, we inform the FDPIC and, if necessary, the persons concerned (art. 24 nFADP).
10. Changes
We may change this policy, for example when we take on a new provider. The version date at the top of the page is authoritative.