Privacy Policy

This policy describes the personal data Deflation collects when you use the Service, why we collect it, who we share it with, and your rights under Swiss and European data-protection law.

1. Who is responsible

The data controller is Harry Trippel, Dorfstrasse 11, 6318 Walchwil, Switzerland, operating Deflation. Full imprint: deflation.ai/impressum. Contact: hello@deflation.ai.

2. What we collect

Account information

When you sign in with Clerk, we receive your email address, name (if provided), and Clerk-issued user identifier. We use this to identify you and bind your account to a bot instance.

Bot communications

For your bot to function, the platform processes the content of messages it sends and receives — email bodies, SMS, transcripts of voice calls, and Telegram messages. These records are stored in your account’s message timeline so you can review past activity.

Usage and billing

Per-request logs (timestamp, service, cost in CHF) and Paddle transaction references are stored to maintain your prepaid balance and provide an audit trail.

Technical data

Standard server logs (IP address, user agent, timestamps) for security and abuse prevention.

Cookies

Only essential cookies needed for sign-in sessions. We do not use analytics or advertising trackers.

3. Lawful basis

We process data on the basis of (a) contract performance — to deliver the Service you have purchased, (b) legal obligation — for tax and accounting record-keeping, and (c) legitimate interests — security, fraud prevention, and product improvement.

4. Service providers

We use the following processors to deliver the Service. Each is bound by a data-processing agreement and processes data only on our instructions.

By using the Service, you acknowledge that data may be transferred to and processed in countries outside Switzerland and the EU, including the United States. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

5. Retention

• Account and message data — for as long as your account is active, plus 30 days after closure to allow recovery of accidentally deleted accounts.
• Billing and transaction records — 10 years, as required by Swiss commercial and tax law.
• Anonymised aggregate metrics — kept indefinitely for service-quality monitoring; cannot be linked back to you.

6. Your rights

Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• request deletion of your data, subject to our legal retention obligations;
• export your data in a machine-readable format;
• object to or restrict certain processing;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

To exercise any of these rights, email hello@deflation.ai. We respond within 30 days.

7. Security

All data is encrypted in transit (TLS 1.2 or higher). Database and file storage are encrypted at rest. Access to production systems is restricted to authorised personnel and gated by two-factor authentication.

8. Children

The Service is not directed to anyone under 18. If you believe a minor has registered, please contact us and we will delete the account.

9. Changes to this policy

Material changes will be communicated by email at least 30 days before taking effect. The current version is always available at this URL.

10. Contact

Questions about your data or this policy: hello@deflation.ai.