This translation is for information only. The German version prevails. German version

Legal

Privacy Policy

This Privacy Policy explains which personal data EasyWeb AI processes when you visit easyweb-ai.ch, create an account or use EasyWeb AI. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller and roles

N. Haas Consulting, Noah Haas, Unterrotenweg 9b, 4208 Nunningen, Schweiz. Email: info@easyweb-ai.ch.

We process personal data under our own responsibility where it concerns user accounts, subscriptions, payments, support requests and the security of our service. For personal data on our customers' websites – in particular contact form messages and website content – we act on behalf of the respective customer; the website operator is the controller there (section 10).

2. Which data we process

• Visiting easyweb-ai.ch: technically necessary information such as IP address, time, page accessed and browser. It is recorded in the server's access logs, which we use for operation, troubleshooting and security and delete automatically after 14 days.
• On the public pages of easyweb-ai.ch (home page, help, legal texts, sign-up) we use Google Tag Manager, Google Analytics and Google Ads only if you agree in the cookie notice. Google then sets cookies and receives information about your visit (e.g. pages viewed, device and browser, approximate location, where the visit came from and whether you created an account or subscribed), so that we can analyse visits and measure the success of our advertising. Without your consent we load nothing from Google. You can change your choice at any time via “Cookie settings” at the bottom of the page.
• In the customer area we use no third-party analytics tools, no advertising trackers and no cookies; your sign-in is kept in your browser’s storage.
• Free trial: So that each company uses the free trial only once, for the email address and IP address used at sign-up we store only a non-reversible code (HMAC) – not the address itself – and delete it after 400 days. We delete unfinished trial websites, together with the account, within the periods set out in the Terms and Conditions; we send an email reminder beforehand.
• So that we can improve EasyWeb AI, we count visits to the home page and sign-up without cookies and without storing the IP address (only a code that changes daily) and record which sign-up steps were reached (e.g. account created, subscription paid, first published) – without name or email address. This information does not allow any conclusions to be drawn about you.
• On the home page and the sign-up page we also record, without cookies, where a visit comes from (referring website, campaign tag or a click on an ad), how long the page was visible, how far it was scrolled, which links or buttons were clicked and which fields of the sign-up form were filled in – never their content. For this, the page creates a random code for each page view that exists only during that page view. If you create an account, we store with the sign-up steps only where the visit came from (e.g. “Google search”), not your behaviour on the page.
• Account and login: name, company, email address, password (stored only encrypted as a hash), two-factor login data, time of consent to the Terms and Conditions and Privacy Policy.
• Emails from EasyWeb AI: a log of the emails sent (recipient, subject, time, delivery status) so that we can resolve delivery problems; it is deleted automatically after 90 days.
• Website and jobs: the content of your website, company profile, your messages to the AI Editor, uploaded files, versions and usage information (time, duration, cost, outcome of a job).
• Subscription and payment: chosen plan, billing details and payment status. Payment is processed via Stripe; we do not receive card data.
• Email mailboxes via EasyWeb AI: the mailbox address and the contact address for access. The emails themselves are held by Infomaniak; we do not read them and access them only at your request for support.
• Domain registration via EasyWeb AI: details of the domain holder (company, contact person, address, telephone, email). We pass them on to the registrar and the registry for registration and keep them until the domain has been transferred or given up after the end of the contract.
• Contacting us: the content of emails and support requests.

3. Purposes and legal bases

We process this data to provide EasyWeb AI, manage your account and subscription, carry out jobs, issue invoices, ensure security (e.g. protection against misuse) and answer your enquiries.

Where the GDPR applies, we rely on performance of a contract (Art. 6(1)(b)), legal obligations (point (c)) and our legitimate interest in a secure, functioning service (point (f)).

We use Google Analytics and Google Ads only with your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time with effect for the future.

4. AI processing

Jobs in the AI Editor are processed by Anthropic's AI models (Claude), which we use via Microsoft Azure (Foundry). Anthropic processes the requests and responses as our processor; Microsoft provides the platform and bills us. Only the content needed for the job is sent to the AI: your message, affected website files, attached files and the company profile.

Under its contract, Anthropic may not use content from our tasks to train AI models. Anthropic deletes requests and responses within 30 days. Content that the safety systems flag as a possible violation of the usage policies may be retained for up to 2 years and, in exceptional cases, reviewed by Anthropic staff.

AI processing may take place in data centres outside Switzerland and the EU, e.g. in the USA. You should therefore not enter any particularly sensitive personal data in the AI Editor that does not belong on the website. We ourselves do not use customer content to train AI models.

The AI creates suggestions; nothing is published until an authorised person has approved it. EasyWeb AI does not make any solely automated individual decisions with legal effect concerning data subjects.

5. Recipients and processors

• Infomaniak Network SA (Geneva, Switzerland): Servers, hosting of the websites, database, backups, email delivery, and domains and email mailboxes ordered via EasyWeb AI. Place of processing: Switzerland.
• Anthropic Ireland, Limited (KI-Modelle Claude, betrieben über Microsoft Azure / Foundry) (Dublin, Ireland): AI processing of the tasks in the AI Editor. Place of processing: Data centres worldwide are possible, including outside Switzerland and the EU (e.g. USA).
• Stripe Payments Europe Ltd. (Dublin, Ireland): payment processing. Stripe processes payment data as an independent controller; data may also reach the USA in the process.
• Google Ireland Ltd. (Dublin, Ireland) and Google LLC (USA): Google Tag Manager, Google Analytics and Google Ads on the public pages – only with your consent. Data may be transferred to the USA; Google is certified there under the Data Privacy Framework.
• Pexels GmbH (Berlin, Germany): search for stock photos for websites without their own images. Only search terms are transmitted, no personal data.
• Domain extension registries – SWITCH (Zurich, Switzerland) for .ch, VeriSign, Inc. (USA) for .com: when a domain is registered via EasyWeb AI, they receive the holder details via the registrar as independent controllers; depending on the registry, some details may appear in its public directory (RDAP/WHOIS).

6. Disclosure abroad

Where personal data reaches countries without adequate data protection (e.g. the USA), we rely on recognised safeguards, in particular the European Commission's Standard Contractual Clauses with the adaptations required for Switzerland.

For transfers abroad, the European Commission’s Standard Contractual Clauses apply, including the Swiss addendum (Anthropic’s data protection agreement).

7. Retention and deletion

• We keep the account, website and data for the duration of the contract. 30 days after the end of the contract they are deleted automatically; they disappear from the backups after a further 60 days at the latest.
• We delete started sign-ups without a set-up website after 30 days.
• We keep the texts of AI jobs (your messages to the AI Editor) for no more than 365 days; the statistics on them (time, cost, model) are kept for cost control, afterwards without the job text and, after the end of the contract, also without names.
• Form messages from customer websites remain stored until the customer deletes them, at the latest until their data is deleted after the end of the contract.
• We keep visitor counts (without IP address, only as a daily code) and the sign-up steps for 400 days; logs of support access until the end of the contract.
• Server access logs 14 days, email log 90 days, backups up to 60 days. Anthropic's own retention periods also apply (section 4).
• We keep invoicing and accounting data for as long as the law requires (generally 10 years).

8. Data security

We protect data with appropriate technical and organisational measures, including encrypted transmission (HTTPS), two-factor login (expressly recommended for administrators), roles and permissions, protection against password guessing, hosting in Switzerland and daily backups.

9. Your rights

You have the right to access your personal data, and to rectification, erasure, restriction of processing, and release or portability of your data and – where the GDPR applies – to object. Send a request to the email address given above.

You can also lodge a complaint with the supervisory authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).

10. Our customers' websites

The respective customer is responsible for the websites that our customers run with EasyWeb AI. Where we process personal data in doing so (e.g. messages from a contact form or visitor counts without cookies), we do so on behalf of the customer under the Data Processing Agreement.

11. Changes

We update this Privacy Policy when our offering or the legal situation changes. The version published here from time to time applies.

Version dated 30 October 2026 · Version 2026-11-06.1