Privacy Policy
How Comerz.ai handles personal data, under the Swiss Federal Act on Data Protection (FADP) and the GDPR where it applies.
1 Who is responsible
Comerz.ai, operated from Switzerland, is the controller for the personal data described here. For anything privacy-related, write to support@comerz.ai.
2 What we collect
Account data: your name, email address, and authentication identifiers, managed through Firebase Authentication. Workspace data: the catalogs, products, images, documents, and settings you bring into your workspace, which may contain personal data you control. Billing data: your subscription status and invoices; card details are collected and stored by Stripe only and never reach our servers. Usage and log data: technical logs such as IP addresses, timestamps, and actions, kept for security, debugging, and abuse prevention.
The comerz.ai website uses Cloudflare Web Analytics, which is cookieless. We run no advertising trackers anywhere.
3 Why we process it
To run the service you signed up for, to process the AI requests you trigger, to bill subscriptions, to answer support requests, to keep the service secure, and to meet legal obligations. Where the GDPR applies, the legal bases are performance of contract, our legitimate interest in running and protecting the service, and legal obligation.
4 AI processing
When you use an AI feature, the relevant product data is sent to our AI providers (currently OpenAI, and Anthropic where enabled) to generate the result you asked for. Under our agreements with these providers, data sent through their APIs is not used to train their models. Results come back to your workspace as drafts for your review.
5 Service providers
We use a small set of processors to run Comerz.ai: Google Cloud (hosting, Zurich region, Switzerland), Google Firebase (authentication), Stripe (payments), OpenAI and Anthropic (AI processing), Resend (transactional email), and Cloudflare (website delivery, bot protection, and cookieless analytics). Each processes data only to provide its service to us.
6 Where data lives
Your workspace data is hosted on Google Cloud in Zurich, Switzerland. Some providers process data in the EU or the US; where they do, transfers rely on recognised safeguards such as standard contractual clauses.
7 How long we keep it
Workspace data lives as long as your workspace does. When a workspace is deleted, we remove its data from production systems promptly, and backups expire on their own schedule. Billing records are kept for 10 years under Swiss bookkeeping law. Technical logs are kept only as long as security and debugging need them.
8 Your rights
You can ask for access to your personal data, correction, deletion, a copy in a portable format, or object to a specific processing. Write to support@comerz.ai and we will respond within 30 days. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, under the GDPR, to your local supervisory authority. You can export your catalog yourself at any time from the app.
9 Security
Data is encrypted in transit, access is scoped per workspace, and each workspace's data is isolated. More detail lives on the Security page.
10 Changes
We update this policy as the product and the law evolve. The current version always lives at comerz.ai/privacy with its effective date above, and we notify you in the app or by email about material changes.