Privacy Policy
How Comerz.ai handles personal data, under the Swiss Federal Act on Data Protection (FADP) and the GDPR where it applies.
1 Who is responsible
Digital Hive GmbH, Enzianweg 7, CH-8048 Zürich, Switzerland (UID CHE-275.777.970; VAT CHE-275.777.970 MWST), operates Comerz.ai and is the controller for the personal data described here. For anything privacy-related, write to [email protected].
2 What we collect
Account data: your name, email address, and authentication identifiers, managed through Firebase Authentication. Workspace data: the catalogs, products, images, documents, and settings you bring into your workspace, which may contain personal data you control. Billing data: your subscription status and invoices; card details are collected and stored by Stripe only and never reach our servers. Usage and log data: technical logs such as IP addresses, timestamps, and actions, kept for security, debugging, and abuse prevention.
The comerz.ai website uses Cloudflare Web Analytics, which is cookieless. We run no advertising trackers anywhere.
3 Why we process it
To run the service you signed up for, to process the AI requests you trigger, to bill subscriptions, to answer support requests, to keep the service secure, and to meet legal obligations. Where the GDPR applies, the legal bases are performance of contract, our legitimate interest in running and protecting the service, and legal obligation.
4 AI processing
When you use an AI feature, the relevant product data is sent to our AI providers (currently OpenAI, and Anthropic where enabled) to generate the result you asked for. Under our agreements with these providers, data sent through their APIs is not used to train their models. Results come back to your workspace as drafts for your review.
5 Service providers
We use a small set of processors to run Comerz.ai: Google Cloud (application hosting in Switzerland), Google Firebase (authentication), Stripe (payments), OpenAI and Anthropic (AI processing), Resend (application email) and business Gmail (website beta confirmations and internal application copies), and Cloudflare (website delivery, bot protection, and cookieless analytics). Each processes data only to provide its service to us.
6 Where data lives
Application workspace data is hosted on Google Cloud in Switzerland. Early-access requests on this website are stored separately in Cloudflare D1 and copied through business Gmail; these website and email records are not covered by a Switzerland-only storage promise. See the early-access privacy notice for the questionnaire. Some providers process data in the EU or the US; where they do, transfers rely on recognised safeguards such as standard contractual clauses.
7 How long we keep it
Workspace data lives as long as your workspace does. After paid access or a non-converting beta ends, we provide a 30-day catalogue-export window. Production workspace data is deleted within the following 30 days, normally within 60 days of termination; earlier deletion may be requested where legally permissible. Recovery backups expire under the documented backup schedule supplied before paid onboarding. Limited records may be preserved where legally required. Required billing and accounting records are kept separately for 10 years from the relevant financial year-end under Swiss bookkeeping law. Technical logs are kept only as long as security and debugging need them.
8 Your rights
You can ask for access to your personal data, correction, deletion, a copy in a portable format, or object to a specific processing. Write to [email protected] and we will respond within 30 days. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, under the GDPR, to your local supervisory authority. You can export your catalog yourself at any time from the app.
9 Security
Data is encrypted in transit, access is scoped per workspace, and each workspace's data is isolated. More detail lives on the Security page.
10 Changes
We update this policy as the product and the law evolve. The current version always lives at comerz.ai/privacy with its effective date above, and we notify you in the app or by email about material changes.