Skip to main content

Your Data Rights

Understanding Your Privacy Rights

As a Schatzi AI user, you have comprehensive rights regarding your personal data under Swiss (FADP) and European (GDPR) privacy regulations.

Right to Access

What This Means

You have the right to know what personal data we hold about you.

What You Can Request

  • Confirmation of whether we process your personal data
  • Access to your personal data
  • Information about how we use your data
  • Details about data retention periods
  • Information about data sharing (we don't share with third parties)

How to Exercise This Right

Contact us through:

  • Email: [support email]
  • Support form: [link to contact form]
  • Account settings: Data access request option (if available)

Response time: We will respond within 30 days

What You'll Receive

  • Account information (email, subscription details)
  • Billing and usage statistics (aggregated token counts)
  • Payment information (limited to what we retain)
  • Any other personal data we process

Note: Due to our zero data retention policy, we do not retain your prompts, uploads, or AI interaction content beyond immediate processing.

Right to Rectification

What This Means

You have the right to correct inaccurate personal data.

What You Can Update

  • Email address
  • Billing information
  • Account preferences
  • Company/organization details

How to Exercise This Right

Self-service (if available):

  1. Log into your account
  2. Navigate to Settings or Profile
  3. Update your information
  4. Save changes

Via support: Contact us with the information you'd like to correct, and we'll update it promptly.

Right to Deletion ("Right to be Forgotten")

What This Means

You can request deletion of your personal data.

What Can Be Deleted

  • Your account and profile information
  • Billing and payment records (subject to legal retention requirements)
  • Usage history and statistics
  • All associated personal data

What Happens When You Request Deletion

  1. Immediate effects:

    • Account access is revoked
    • Active subscription is cancelled
    • User data is marked for deletion
  2. Within 30 days:

    • Personal data is deleted from active systems
    • Deletion is logged for compliance
  3. Exceptions:

    • Financial records may be retained for legal/tax requirements (typically 10 years in Switzerland)
    • Aggregated, anonymized statistics (no personal identifiers)

How to Exercise This Right

Via account settings:

  1. Log into your account
  2. Navigate to Settings > Privacy
  3. Select "Delete Account"
  4. Confirm deletion request

Via support: Contact us with a deletion request, and we'll process it within 30 days.

Account Deletion is Permanent

Once your account is deleted, you cannot recover your data or restore your account. Download any data you need before requesting deletion.

Right to Data Portability

What This Means

You have the right to receive your personal data in a structured, commonly used format and transfer it to another service.

What Data is Portable

  • Account information
  • Subscription and billing history
  • Usage statistics
  • Any structured data we maintain about you

Format Options

  • JSON (machine-readable)
  • CSV (spreadsheet format)
  • PDF (human-readable report)

How to Exercise This Right

  1. Contact us with a data portability request
  2. Specify your preferred format
  3. We'll provide your data within 30 days
  4. Data will be delivered securely (encrypted download or secure email)

Note: Due to our zero retention policy, we cannot export your prompts or AI interactions as they are not retained.

Right to Restriction of Processing

What This Means

You can request that we limit how we process your personal data.

When This Applies

  • You contest the accuracy of data (while we verify)
  • Processing is unlawful, but you don't want data deleted
  • We no longer need the data, but you need it for legal claims
  • You object to processing (while we verify legitimate grounds)

How This Works

We will:

  • Temporarily halt certain processing activities
  • Maintain the data but not actively process it
  • Only process with your consent or for specific legal purposes

How to Exercise This Right

Contact us explaining:

  • What data you want restricted
  • Why you're requesting restriction
  • How long the restriction should last

Right to Object

What This Means

You can object to certain types of data processing.

What You Can Object To

  • Direct marketing (we don't do this, but you have the right)
  • Processing based on legitimate interests
  • Processing for research or statistical purposes

How to Exercise This Right

Contact us with your objection, and we'll:

  • Stop the processing immediately (for marketing)
  • Assess whether we have compelling legitimate grounds to continue (for other processing)
  • Respond within 30 days

What This Means

Where we process data based on your consent, you can withdraw that consent at any time.

How This Works

  • Withdrawal doesn't affect processing done before withdrawal
  • We'll stop processing based on that consent going forward
  • May affect service availability if consent was necessary for service provision

How to Exercise This Right

Account settings:

  • Review consent settings
  • Toggle off specific consents
  • Save changes

Via support:

  • Contact us specifying which consent to withdraw

Right to Lodge a Complaint

What This Means

If you believe we're not handling your data properly, you can complain to a supervisory authority.

Swiss Data Protection Authority

Federal Data Protection and Information Commissioner (FDPIC)

EU Data Protection Authorities

If you're in the EU, you can contact your local data protection authority. Find yours at: https://edpb.europa.eu/about-edpb/board/members_en

Before Filing a Complaint

We encourage you to contact us first so we can address your concerns directly:

  • Email: [support email]
  • We take data protection seriously and want to resolve issues promptly

Our Commitments

Transparency

We commit to:

  • Clear communication about data practices
  • Plain language privacy policies
  • Honest answers to your questions
  • Regular updates on any changes

Responsiveness

We commit to:

  • Respond to data rights requests within 30 days
  • Process requests free of charge
  • Provide requested data in accessible formats
  • Assist you in exercising your rights

Zero Data Retention

We commit to:

  • Not using your content for training AI models
  • Not sharing your data with third parties for advertising
  • Deleting interaction data after processing
  • Maintaining minimal data necessary for service provision

Exercising Your Rights

General Process

  1. Identify your request type (access, deletion, portability, etc.)
  2. Contact us via email or support form
  3. Verify your identity (we may ask for confirmation to protect your data)
  4. Receive response within 30 days
  5. Follow-up if needed

What We'll Need

To process your request:

  • Your registered email address
  • Description of your request
  • Verification of identity (for security)
  • Any specific details about your request

No Cost to You

We handle data rights requests free of charge unless:

  • Requests are manifestly unfounded or excessive
  • You request multiple copies of the same data

Special Situations

Account Compromise

If you believe your account has been compromised:

  1. Contact us immediately
  2. Request temporary restriction of processing
  3. We'll secure your account
  4. You can then decide on deletion or security measures

If you're involved in legal proceedings:

  • You can request data access for legal purposes
  • We'll cooperate with legitimate legal requests
  • Your rights remain protected throughout

Deceased Users

For requests regarding deceased users:

  • Legal representatives can exercise certain rights
  • Contact us with proof of legal authority
  • We'll handle requests sensitively and in compliance with Swiss law

Questions About Your Rights?

For specific questions about exercising your data rights:

Your Rights Are Protected

These rights are guaranteed by Swiss FADP and EU GDPR regulations. We're committed to respecting and facilitating your privacy rights.

Summary of Your Rights

RightWhat It MeansHow to Exercise
AccessKnow what data we haveRequest data access
RectificationCorrect inaccurate dataUpdate in settings or contact support
DeletionRemove your dataRequest account deletion
PortabilityGet your data in standard formatRequest data export
RestrictionLimit processing temporarilyContact support with restriction request
ObjectStop certain processingContact support with objection
Withdraw ConsentRevoke previous consentToggle in settings or contact support
ComplainFile complaint with authorityContact FDPIC or local DPA

Contact for Data Rights Requests:

  • Email: [support email to be added]
  • Contact form: schatziai.ch/contact
  • Response time: Within 30 days