Privacy Policy
GDPR · REGULATION (EU) 2016/6791.1 Who we are. SwiftAIBrain, Hohenzollernstraße 38, 80801 München, Germany, is the data controller for personal data processed through swiftaibrain.com, onboarding forms, and related automation delivery services. Contact: [email protected].
1.2 Categories of data. We process identification and contact data (name, business email, telephone number, organization), project brief content (workflow descriptions, system names, budget bands, timelines), technical telemetry (IP address, device type, browser, approximate location derived from IP), and payment-related metadata when you use our Stripe payment links.
1.3 Purposes and legal bases. (a) Pre-contractual steps and contract performance (Art. 6(1)(b) GDPR) — responding to briefs, scoping, proposals, delivery; (b) legitimate interests (Art. 6(1)(f) GDPR) — securing the site, preventing abuse, improving automation delivery quality; (c) legal obligations (Art. 6(1)(c) GDPR) — accounting, tax, and statutory retention; (d) consent (Art. 6(1)(a) GDPR) — optional marketing communications and non-essential cookies where required.
1.4 Recipients. Personal data may be shared with processors acting under written agreements: hosting and cloud infrastructure providers in the EU/EEA, payment processors (e.g. Stripe), email and scheduling tools, and professional advisors (legal, accounting). We do not sell personal data.
1.5 International transfers. Where a processor operates outside the EEA, transfers rely on Standard Contractual Clauses and supplementary safeguards assessed under Art. 46 GDPR. Contact us for a summary of transfer safeguards applicable to your engagement.
1.6 Retention. Contact briefs and delivery records are retained for the duration of the engagement plus statutory commercial retention periods (typically up to 10 years for accounting records in Germany). Marketing consent records are retained until withdrawal. Unused intake forms older than 24 months are deleted or anonymized.
1.7 Your rights. Under GDPR you may request access, rectification, erasure, restriction, data portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with a supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach, Germany.
1.8 Security. We implement technical and organizational measures appropriate to risk, including encryption in transit (TLS), access controls, vendor due diligence, and minimized data collection. No method of transmission is 100% secure; report suspected incidents to [email protected].
1.9 AI-specific processing. Client project data used to train or tune models is processed only under contract terms and is not used to train public foundation models unless expressly agreed in writing. Inference logs used for quality monitoring are minimized and access-restricted.