Privacy Policy

This policy explains how Amai! processes personal data when you use our website or contact us. The revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the GDPR apply.

1. Controller

Amai!, Wylerstrasse 75, 3000 Bern, Switzerland. Email: hello@amai.ch

2. What data we process

Form data. Through the contact form and the subscription start, we collect first name, last name, email, company (optional), phone (optional), your message or plan choice, language preference and your consent.

Payment data. Payments are handled by Stripe (in preparation). You enter your payment details directly with Stripe. Amai! does not store full payment data, only the payment or subscription status.

Data collected automatically. Server and security logs (IP address, browser, timestamps, pages requested) via our hosting and CDN provider, for delivery, stability and abuse prevention. A honeypot field filters spam.

Cookies and analytics. A cookie stores your consent. Google Analytics 4 uses Google Consent Mode: without your consent no analytics cookies are set and only anonymous, aggregated signals are processed without cookies. Only after your consent through the cookie banner are analytics cookies set and full measurement data collected. With the same consent we enable Google Ads for conversion measurement. Without your consent no advertising cookies are set.

3. Purposes and legal bases

• Answer enquiries and pre-contract steps: contract or pre-contract measure (GDPR Art. 6(1)(b)).
• Provide, manage and bill the subscription: contract (Art. 6(1)(b)).
• Security, spam prevention and stable operation: legitimate interest (Art. 6(1)(f)).
• Analytics with Google Analytics 4: consent (Art. 6(1)(a)).
• Conversion measurement with Google Ads: consent (Art. 6(1)(a)).
• Bookkeeping and statutory retention: legal obligation (Art. 6(1)(c)).

4. Processors and third parties

We work with carefully selected providers. Where possible we choose a European region and have a data processing agreement in place.

• Supabase: database for form and subscription data (European region).
• Resend: sending of notification and transactional emails (European region).
• Cloudflare: hosting, CDN and security (European region).
• Google Analytics 4: website analytics, only with consent.
• Google Ads: conversion measurement and advertising, only with consent.
• Stripe: payment and subscription handling (in preparation).

We do not sell personal data.

5. International transfers

Google Analytics and Google Ads may transfer data to Google, including to the USA. Such transfers are covered by appropriate safeguards (Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework).

6. Retention

• Enquiries: generally up to 24 months after the last contact, unless a contract follows.
• Subscription and accounting records: the statutory period (in Switzerland 10 years for accounting documents).
• Server and security logs: around 90 days.
• Analytics data: per the Google Analytics 4 setting (around 14 months).

7. Your rights

You have the right to access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time. To exercise these, contact hello@amai.ch. You may also lodge a complaint with a supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

8. Cookies

We use necessary items (storing your consent, security) that need no consent, as well as analytics cookies (Google Analytics 4) and advertising cookies (Google Ads) that are set only with your consent. Through the banner you can accept all or keep only the necessary ones, and change your choice at any time.

9. Security

We protect personal data with TLS or HTTPS, a provider with protection against overload attacks (Cloudflare), access controls and European hosting regions.

10. Changes

We may adapt this policy. The current version is always available on this page with the date of the last update.