aiApply.ch ("aiApply", "we") provides career preparation software for professionals in Switzerland and the EU. This policy explains how we process personal data when you use https://aiapply.ch.
1. Controller
The data controller is the operator of aiApply.ch. Contact: privacy@aiapply.ch.
2. What we collect
- Pre-launch waitlist: if you join before public launch, we collect your name, email, optional job-search context, and marketing attribution (e.g. UTM parameters). We use this only to contact you about aiApply launch and early access. Retained until you unsubscribe or ask us to delete your waitlist entry (privacy@aiapply.ch).
- Account data: email, display name, authentication identifiers (Firebase Auth).
- Career documents you upload: CVs, Swiss Work Certificates, certificates, and job descriptions you provide.
- Profile and settings: job-search preferences, Swiss work-permit category, CEFR language levels (optional).
- Generated outputs: tailored CVs, cover letters, fit analyses, and export files you create in the product.
- Billing metadata: Stripe customer id, subscription status, token wallet balance (no full card numbers).
- Technical logs: security, abuse prevention, and pipeline run diagnostics.
3. Where data is stored and processed
Storage: personal data at rest is held in Google Cloud regions in Switzerland (Zürich, europe-west6) — Firestore and Cloud Storage.
AI processing: generation and analysis steps send prompt content (which may include your approved career facts) to Vertex AI in the EU (europe-west4) because Gemini models are not yet available in Zürich. Outputs are written back to Switzerland. We do not use your documents to train public models.
4. Purposes and legal bases
- Provide the service you signed up for (contract).
- Security, fraud prevention, and billing (legitimate interest / contract).
- Compliance with law where required (legal obligation).
5. Retention
We retain your vault and generated documents while your account is active. You may delete your account in Settings; we delete the tenant subtree under your user id. Backups may persist for a limited period per Google Cloud retention policies.
6. Your rights
Under Swiss nFADP and, where applicable, GDPR, you may request access, correction, deletion, restriction, or portability of your data. Contact privacy@aiapply.ch.
7. Sub-processors
Google Cloud (hosting, database, AI), Stripe (payments), Firebase/Google Identity (authentication), and Google Identity Platform (SMS one-time codes for phone verification and billing step-up — EU data residency; phone numbers and message bodies processed in Ireland). A current sub-processor list is available on request.
This document is provided for transparency. Have your legal counsel review before relying on it for regulatory filings.