SwissImmigrationPro

Privacy Policy

Last updated: March 2026

1. Data Controller

SwissImmigrationPro ("we", "us", "our") is responsible for the processing of your personal data in accordance with the Swiss Federal Act on Data Protection (nDSG/nLPD) and, where applicable, the EU General Data Protection Regulation (GDPR).

Contact: privacy@swissimmigrationpro.com

2. Data We Collect

Account Data

When you register, we collect your email address, username, preferred language, and password (stored as a salted hash, never in plaintext).

Immigration Profile Data

To provide personalised guidance, we may collect: nationality, current permit type, canton of residence, employment status, family situation, and language proficiency level.

Usage Data

We collect anonymised usage data including pages visited, features used, and AI assistant interactions. We do not use Google Analytics. We use privacy-focused analytics (PostHog, self-hosted in Switzerland).

Uploaded Documents

If you upload documents for AI review, these are stored encrypted at rest in Swiss datacentres. Documents are never shared with third parties.

3. Legal Basis for Processing

  • Contract performance: Processing necessary to provide our services (nDSG Art. 6(1)(b)).
  • Legitimate interest: Service improvement, security monitoring, fraud prevention.
  • Consent: Marketing communications and optional analytics (you may withdraw consent at any time).

4. Data Hosting and Transfers

All personal data is stored in datacentres located in Switzerland. We do not transfer personal data outside of Switzerland or the EU/EEA except where necessary for essential service providers (e.g., Stripe for payment processing, Anthropic for AI features), in which case appropriate safeguards (Standard Contractual Clauses) are in place.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe: Payment processing (PCI DSS compliant).
  • Anthropic: AI assistant queries (no personal data is stored by Anthropic).
  • Postmark: Transactional email delivery.

6. Your Rights

Under nDSG and GDPR, you have the right to:

  • Access: Request a copy of all personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Deletion: Request permanent deletion of your account and all associated data.
  • Data portability: Export your data in a machine-readable format (JSON).
  • Objection: Object to processing based on legitimate interest.
  • Withdrawal of consent: Withdraw consent for optional processing at any time.

You can exercise these rights from your account Settings page or by emailing privacy@swissimmigrationpro.com. We will respond within 30 days.

7. Data Retention

  • Account data: retained while your account is active, deleted upon account deletion.
  • AI conversation history: retained for 12 months, then automatically deleted.
  • Uploaded documents: retained for 6 months after last access, then automatically deleted.
  • Usage analytics: aggregated and anonymised after 90 days.

8. Security Measures

We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, regular security audits, and strict access controls. Passwords are hashed using PBKDF2 with SHA-256 (260,000 iterations).

9. Cookies

We use strictly necessary cookies for session management and authentication. Optional analytics cookies require your explicit consent. See our Cookie Policy for details.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact and Supervisory Authority

For privacy-related enquiries: privacy@swissimmigrationpro.com

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch