Privacy Policy

Controller

147codez, owner Geranmayeh · Stettfurterstrasse 4b · CH-9548 Matzingen, Switzerland

Email: info@147codez.com

147codez develops and operates AI automation tools for companies (including Arivo, Offerto, Docura) as well as this website. This policy describes how we process personal data on 147codez.com and in the course of our services.

Visiting our website

When you access the website, technically necessary data is processed (e.g. IP address, browser type, timestamp) - in server logs for security and stability, for a maximum of 7 days.

For audience measurement we use our own, data-minimising statistics (anonymous session ID, without tracking cookies and without sharing with advertising networks). No profiles are created.

In addition we use Google Analytics 4, but only after your explicit consent via the notice on your first visit. If you decline or make no choice, Google Analytics is not loaded and no Google cookies are set.

Contact form & enquiries

When you contact us via the contact form or by email, we process the data you provide (e.g. name, email, phone, message) in order to answer your enquiry. Sending is handled by our email provider (see below). We use this data solely to process your enquiry.

Account, subscription & payments

For a customer account we process details such as email, company name and username. Payments and subscriptions are handled via Stripe. Your card details are processed exclusively by Stripe - 147codez does not store full payment data. Stripe also provides the customer portal for managing and cancelling the subscription.

Data in our tools (processing on behalf)

In our tools (e.g. Arivo, Offerto, Docura) we process personal data on behalf of the respective customer company. The customer company is responsible under data protection law; 147codez acts as a processor pursuant to Art. 9 of the Swiss FADP. The details are governed by the respective data processing agreement (DPA) between 147codez and the customer company.

Cookies & local storage

We do not use advertising cookies. For operation (e.g. staying logged in, settings, your cookie choice) technically necessary local storage in the browser (LocalStorage) is used. This data does not leave your device for advertising purposes. In addition, our upstream security filter Cloudflare may set a technically necessary cookie (__cf_bm) to fend off automated access.

Analytics cookies are only set if you explicitly consent to web analytics. These are the cookies _ga and _ga_* from Google Analytics with a lifetime of up to 24 months. You can revoke your decision at any time by deleting the website data in your browser.

Third parties & processors

We work with the following service providers:

• Vercel - Website hosting (frontend). Server location EU (Frankfurt), delivery via global CDN, SOC 2 certified.
• Cloudflare, Inc. - DNS management as well as an upstream content delivery network and security filter. Every visit to the website passes through Cloudflare, whereby technical data (IP address, browser type, requested address) is processed. To fend off automated access, Cloudflare may set a technically necessary cookie (__cf_bm). Worldwide server network with delivery from the nearest location.
• Hostpoint AG - Domain management for 147codez.com as well as a still existing backup mailbox. Server location Switzerland.
• Railway - Backend hosting and database operation. Server location EU/USA, SOC 2 certified.
• Stripe - Payment processing and subscription management. PCI-DSS certified.
• Resend - Sending emails (contact, confirmations, system mails).
• Google Workspace (Google Ireland Ltd.) - Operation of our mailbox info@147codez.com. When you write to us, your message including sender details is stored with Google. Server location EU/USA.
• Anthropic (Claude AI) - AI features (chat assistant, tools). Data is not used for model training. Server location USA.
• CARTO (CartoDB Inc.) - Map display on the contact page (static map tiles, data from OpenStreetMap). Your IP address is transmitted to CARTO when the map loads. Server location USA, no cookies are set.
• Google Ireland Ltd. / Google LLC - Google Analytics 4 for audience measurement, only with your consent. Server location USA.
• Sentry (Functional Software Inc.) - Error and stability monitoring of the website. In the event of an error it records technical data (e.g. browser type, page visited, IP address, error message). Server location EU (Frankfurt), no cookies are set and no session recordings are made.
• Google Ireland Ltd. (Google Calendar, Google Meet) - Appointment booking via our page /termin. We store name, email, phone, company, topic and time slot in our own management system. The appointment is also added to our Google Calendar; for video calls Google creates a Meet link.
• Jitsi Meet (8x8 Inc.) - Fallback for video calls via meet.jit.si if no Google Meet link can be created. When joining, technical connection data (e.g. IP address) is transferred to 8x8. Servers partly in the USA.

The required data processing agreements (DPA) are in place with these providers; they meet the requirements of the Swiss FADP and, where applicable, the GDPR.

Some of these providers are based abroad, in particular in the USA. We only disclose personal data abroad if one of the following conditions is met:

1. The recipient country provides an adequate level of data protection recognised by the Federal Council (Annex 1 of the Data Protection Ordinance). For the USA this has applied since 15 September 2024, provided the receiving company is certified under the Swiss-U.S. Data Privacy Framework.
2. Appropriate safeguards pursuant to Art. 16 para. 2 of the Swiss FADP are in place, in particular the Standard Contractual Clauses recognised by the FDPIC or binding corporate rules.
3. An exception under Art. 17 of the Swiss FADP applies, such as your explicit consent or the necessity for the performance of a contract.

Data storage & deletion

We store personal data only for as long as necessary for the respective purpose or required by law. Data in the tools is treated according to the respective DPA and deleted within 30 days after the end of the contract. You can request the deletion of your data at any time at info@147codez.com.

Your rights

You have the right of access (Art. 25 FADP), the right to receive and transfer your data (Art. 28 FADP) and the right to have inaccurate personal data corrected (Art. 32 para. 1 FADP). A claim for deletion follows from Art. 32 FADP in conjunction with the data processing principles. Where the GDPR applies, Art. 15-20 GDPR additionally apply. Requests to: info@147codez.com

You also have the right to lodge a complaint with the competent supervisory authority - in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the respective competent data protection authority.

Applicable law

The Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023) applies, as well as, where applicable, the GDPR of the European Union. The place of jurisdiction is Frauenfeld, canton of Thurgau, Switzerland.