DRAFT – not legally reviewed. Placeholders in [brackets].

Privacy Policy

Controller: [BRIAN FULL NAME], [ADDRESS], Switzerland, [EMAIL]. This policy follows the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU GDPR.

Data we process

Contact data (email), order details, repository contents and deployment configuration you grant access to, payment data (handled by our payment provider; we do not see card numbers).

Purpose

Only to fulfil your order, provide support and meet legal obligations.

Retention

Repository code is processed in an isolated sandbox and deleted within 7 days after delivery. Secrets are never logged. Order records are kept as required by Swiss accounting law.

Subprocessors

[Payment provider], Cloudflare, Inc. (website hosting and Pages Functions), [GitHub], [AI model provider – no training on your data], [sandbox host], [email provider]. Some are located outside Switzerland/EU with appropriate safeguards.

Your rights

Access, correction, deletion, objection. Contact [EMAIL].