Privacy Policy

1. Who is responsible

The data fiduciary (controller) responsible for this website and for the processing described here is:

In this policy, "Swisszenz", "we" and "us" mean Swisszenz AI Cloud Labs Private Limited. This policy covers this website, enquiries you send us and job applications. Personal data we process for clients under a project contract is governed by that contract.

We collaborate with Webzenz GmbH, Chaltenbodenstrasse 6e, 8834 Schindellegi, Switzerland (UID CHE-274.451.187). Webzenz GmbH is a separate legal entity. It operates the technical backend for the contact form, the newsletter sign-up and the AI chat on this website. Messages from these features are delivered to our mailbox info@swisszenz.in. The sections below explain what this means for your data.

2. What data we process

Depending on how you use this website or contact us, we process the following categories of personal data:

• Technical data when you visit the website, such as IP address, date and time, page requested, browser and device information.
• Contact and enquiry data, such as name, email address, phone number, company and the content of your message.
• AI chat data: your messages, the answers, a conversation ID and, if you provide them, your name, email address, company and phone number.
• Newsletter data: your email address, the website language, the page you signed up on and the time of your consent.
• Application data, such as your CV, experience, education and skills (see the recruitment section).
• Settings stored in your browser, such as your cookie choice or the reference to an open chat conversation.

We only ask for the data we need for the purpose concerned. We do not ask for sensitive personal data through this website, such as passwords, bank or card details, health information or biometric data.

3. Website hosting and server logs

This website consists of static pages. The files are stored in Amazon S3 and delivered through Amazon CloudFront, both services of Amazon Web Services (AWS). When your browser requests a page, AWS processes technical data such as your IP address, the address requested, the date and time, the referring page and information about your browser and device. This is necessary to deliver the page and to protect the service against misuse. CloudFront answers requests from a location close to you, which may be outside India. AWS may also process technical data under its own responsibility to operate and secure its services.

The static website itself does not run an application that records your visits. The backend for the forms and the AI chat writes technical logs to Amazon CloudWatch in the AWS Frankfurt (Germany) region. These logs record events such as the time, the type of request and error codes. They are designed to exclude message text, contact details and access tokens, and they are set to be deleted after 30 days.

Fonts are delivered from this website itself. We do not load fonts from a third-party font service.

4. Enquiries by email, phone and contact form

You can contact us by email at info@swisszenz.in or by phone on +91 99950 96806, or through the contact form on our contact page. We use the details you give us, such as your name, email address, phone number, company and the content of your enquiry, to answer you and, where relevant, to prepare a proposal or a contract. Emails to info@swisszenz.in are received and stored by our email provider, Infomaniak Network SA, in Switzerland.

When you submit the contact form, your browser sends your name, email address and message, your company and phone number if you provide them, the website language, the page address and your consent to the backend operated by Webzenz GmbH in its AWS account in the Frankfurt (Germany) region. The backend sends these details by email through Amazon Simple Email Service (Amazon SES) to our mailbox info@swisszenz.in at Infomaniak. Your email address is used only as the reply address. The message itself is not stored in the backend database.

To prevent misuse, the backend counts requests per IP address and per email address. It stores these values only as keyed hashes (pseudonymised check values), not in clear text, and the counters expire automatically after at most about one day.

We keep enquiries for as long as we need them to handle your request and any business relationship that follows. Records we must keep by law, for example under the Companies Act, 2013 and Indian tax law, are kept for the period the law requires.

5. AI chat

This website offers an AI chat, the Swisszenz AI Assistant, that answers questions about Swisszenz, our services and open positions. The chat backend is operated by Webzenz GmbH. The chat on this website uses its own knowledge base and its own conversations, separate from the chat on the website of Webzenz GmbH; a conversation started here cannot be continued there. The answers are generated automatically by an AI language model, not by a person. They may contain mistakes and are not a binding offer. Please do not enter sensitive personal data in the chat, such as health or financial information.

When you use the chat, we process your messages, the answers, the time, the website language and a random conversation ID. Your IP address is used to protect the service against misuse. It is converted into a keyed hash (a pseudonymised check value). Only this hash is stored, with the conversation and in request counters that expire after at most about one day.

Conversations are stored in the AWS account of Webzenz GmbH in the Frankfurt (Germany) region (AWS Lambda and Amazon DynamoDB, encrypted at rest). To generate answers, your messages and the recent conversation are sent through OpenRouter (OpenRouter, Inc., USA) to a Google Gemini language model. The routing is configured to use only providers that do not retain the content after answering and do not use it for training. Your contact details are not sent to the AI model.

After a few answers the chat asks for your name and email address. At first this is optional; after a certain number of answers it is required to continue. Later the chat asks you to confirm your email address with a six-digit code, which is sent to you through Amazon SES. The code is valid for 60 seconds and is stored only as a hash. You can close the chat at any time without giving any details.

When you submit your name and email address, they are sent with a summary and the conversation so far by email through Amazon SES to info@swisszenz.in, where they are handled like other enquiries. If you later add your company or phone number, a further email with the updated details is sent. You can withdraw your consent to be contacted at any time by writing to info@swisszenz.in.

Conversations without contact details are deleted automatically after 7 days. Conversations with contact details are kept in the chat database for 90 days and then deleted automatically. Technical backups of the database are kept for no longer than 7 days. Emails sent to info@swisszenz.in follow the retention described for enquiries.

6. Newsletter

In the website footer you can sign up for our newsletter with your email address. Your browser sends your email address, the website language, the page address and your consent to the backend of Webzenz GmbH in the AWS Frankfurt region. The backend stores these details with the time of sign-up in the Swisszenz mailing list (Amazon DynamoDB), which is kept separate from the mailing list of Webzenz GmbH, and sends a notification by email through Amazon SES to info@swisszenz.in.

We use your email address only to send you information about our services and those of Webzenz GmbH, and keep it until you unsubscribe. To unsubscribe, send a short message to info@swisszenz.in. There is currently no automatic unsubscribe link.

7. Job applications (recruitment)

This section applies to applications for jobs with Swisszenz AI Cloud Labs Private Limited (Swisszenz jobs) only. You can apply for a Swisszenz role by email to info@swisszenz.in with your CV. We process the information you send us and the information that arises during the selection process, in particular:

• name, email address and phone number;
• CV, work experience, education and skills;
• links you share, such as a portfolio, GitHub or LinkedIn profile;
• information from interviews and assessments.

Please send only what is needed for the application. Do not send identity numbers (such as Aadhaar or PAN), bank details or health information unless we ask for them for a specific reason.

We use your application data only to assess your application and to communicate with you about it. Applications are reviewed by members of our team. We do not use CVs or other application documents to train AI models. You can ask us at any time to correct your data, or to withdraw your application and delete it.

We normally delete or anonymise the CVs and recruitment records of unsuccessful applicants six months after the recruitment process is completed, unless we are legally required to keep them longer or you have separately agreed that we may keep them for future opportunities. Deletion is carried out by our team in the mailbox and storage we use for recruitment; it is not an automated process. If we hire you, your application documents become part of your employment records.

Jobs with Webzenz GmbH. Applications for jobs with Webzenz GmbH (Switzerland) go directly to Webzenz GmbH at info@webzenz.ch. Webzenz GmbH is the separate controller for these applications under its own privacy notice. Swisszenz does not receive them, and the rules in this section do not apply to them. If an application for a Webzenz GmbH job reaches us by mistake, our practice is to forward it to Webzenz GmbH only with your agreement; otherwise we delete it and ask you to apply directly.

8. Videos, maps and links to other websites

Video on the home page.Loading the home page does not connect to YouTube. Only when you click the play button does a player window open: the player software Plyr is loaded from cdn.plyr.io, the video title is requested from noembed.com and the video is loaded from YouTube through youtube-nocookie.com. From that moment these providers receive your IP address and browser information, and YouTube (Google) may store cookies or similar data in your browser. Google's privacy policy applies. If you do not want this, do not start the video.

Map on the contact page. The contact page shows a map from Google Maps. The map is loaded when you scroll to it. Your browser then connects to Google, which receives your IP address and browser information and may store cookies. Google is responsible for this processing under its own privacy policy.

Links. The website links to other websites, for example to Webzenz GmbH and to social networks. These are plain links: no content or scripts from these websites are loaded until you click a link.

9. Cookies, analytics and browser storage

This website does not use analytics, tracking or advertising cookies. For this reason it does not show a cookie banner. Third-party cookies can only be set by YouTube if you start the video, and by Google Maps on the contact page (see the previous section).

The website stores the following entries in your browser. They stay on your device and you can delete them in your browser settings at any time:

• "webzenz-ai-chat-session" (local storage): the ID and access token of your chat conversation, so that it is still there after you reload the page.
• "webzenz-ai-chat-welcome-shown" (local storage): the time the chat window opened automatically, so that it does not open again. It contains no personal data.
• Entries starting with "webzenz-ai-chat-" (session storage): suggested questions and the page to return to from the full-page chat. They are deleted when you close the browser tab.
• Technical data that the browser keeps for loading pages faster (cache).

The AI chat does not set cookies.

A full list of the cookies and browser storage used on this website, with their purpose and duration, is in our Cookie Policy.

10. Purposes and legal basis

We process personal data for these purposes:

• to deliver and secure the website;
• to answer enquiries and prepare or perform contracts;
• to provide the AI chat and follow up on enquiries made in it;
• to send the newsletter to people who have signed up;
• to assess job applications;
• to comply with legal obligations and to establish or defend legal claims.

India. The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 currently apply to our handling of personal data. The Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 were notified in November 2025 and are being brought into force in phases. The obligations on notice, consent and the rights of individuals (data principals) are scheduled to take effect about 18 months after notification, around May 2027. We are aligning our practices with the DPDP Act ahead of its full commencement. We rely on your consent, for example when you submit a form with the consent box or sign up for the newsletter, and on the use of data you have voluntarily provided for a specific purpose, such as an enquiry or a job application. We also process data where the law requires it.

Switzerland and the EU. If you are in Switzerland, the Swiss Federal Act on Data Protection (nFADP) may apply to our processing of your data. If you are in the EU or EEA, the General Data Protection Regulation (GDPR) may apply. Where the GDPR applies, we rely on your consent (Art. 6(1)(a)), on steps before or for the performance of a contract (Art. 6(1)(b)), on legal obligations (Art. 6(1)(c)) and on our legitimate interest in operating a secure website and answering enquiries (Art. 6(1)(f)).

You can withdraw your consent at any time by writing to info@swisszenz.in. This does not affect processing carried out before the withdrawal.

11. Service providers and other recipients

We share personal data only where this is needed for the purposes above. The recipients are:

• Amazon Web Services (AWS): website hosting (Amazon S3, Amazon CloudFront), and, for the backend, AWS Lambda, Amazon DynamoDB, Amazon SES and Amazon CloudWatch in the Frankfurt (Germany) region.
• Webzenz GmbH (Switzerland): operates the backend for the forms and the AI chat in its AWS account.
• Infomaniak Network SA (Switzerland): hosts our mailbox info@swisszenz.in.
• OpenRouter, Inc. (USA) and Google (Gemini language model): generate the answers of the AI chat.
• Google (YouTube, Google Maps), cdn.plyr.io and noembed.com: only when you start the video or view the map, as described above.
• Authorities, courts and professional advisers, where the law requires it or to protect our rights.

We do not sell personal data and do not share it for advertising.

12. International transfers

Your data is not processed only in India. It is processed in particular in Germany (AWS Frankfurt region), in Switzerland (Webzenz GmbH and our email provider Infomaniak) and, depending on the service, in the USA and other countries where AWS, Google and OpenRouter operate servers. Data is also transferred between India and Switzerland when we work on enquiries together with Webzenz GmbH.

Under the DPDP Act, transfers outside India are permitted unless the Government of India restricts transfers to a particular country. Swiss and EU law do not recognise India or the USA in general as providing an adequate level of data protection. Where Swiss or EU law requires safeguards for a transfer, we use appropriate safeguards such as contractual commitments. AWS and Google state that their data processing terms include standard contractual clauses and that they are certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework.

13. How long we keep data

We keep personal data only as long as we need it for the purpose concerned, and we collect only what we need. In summary:

• Enquiries: as long as needed to handle the enquiry and any resulting business relationship, plus statutory retention periods.
• AI chat: 7 days without contact details, 90 days with contact details, backups up to 7 days.
• Backend logs: 30 days. Misuse counters: about one day.
• Newsletter: until you unsubscribe.
• Job applications for Swisszenz jobs: see the recruitment section (normally six months after the recruitment process is completed for unsuccessful applicants).

After that we delete or anonymise the data, unless the law requires us to keep it longer.

14. Security and incidents

We use reasonable technical and organisational measures to protect personal data. All pages and the form and chat endpoints are served over encrypted connections (HTTPS). Access to mailboxes and to the cloud accounts is limited to the people who need it. Where possible we store check values (hashes) instead of clear text, for example for IP addresses and verification codes, and data in the backend is deleted automatically when its retention period ends.

If we become aware of a security incident affecting personal data, we will assess it, take steps to limit its effects, and notify the affected people and the competent authorities where the law requires it.

15. Your rights

Subject to the applicable law, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update your data;
• ask us to delete your data, where we no longer need it or have no legal obligation to keep it;
• withdraw your consent at any time;
• raise a grievance with us about how we handle your data;
• nominate another person to exercise your rights in the event of your death or incapacity (DPDP Act).

Under the nFADP and the GDPR you also have rights of access, rectification, erasure, restriction, objection and data portability, and you can complain to the Swiss Federal Data Protection and Information Commissioner (www.edoeb.admin.ch) or to a data protection authority in the EU. Once the relevant provisions of the DPDP Act are in force, you may also approach the Data Protection Board of India after exhausting our grievance process.

These rights have legal limits. We may need to refuse or restrict a request, for example where we must keep data by law.

16. How to make a request or complaint

Please send your request by email to info@swisszenz.inwith the subject "Privacy request". Tell us what you are asking for and which of our services it concerns. We may ask for further information to confirm your identity before we act on the request.

Privacy and grievance contact: Faisel Kachappilly Thomas, Managing Director, Swisszenz AI Cloud Labs Private Limited, Infopark rd, Door No.9/3051, Kakkanad, Kochi 682030, Kerala, India, email info@swisszenz.in.

How we handle grievances. To raise a grievance about how we handle your personal data, send an email to info@swisszenz.inwith the subject "Privacy grievance". Please include your name and contact details, a description of your concern, the service or interaction it relates to (for example the website, an enquiry or a job application) and any relevant dates or documents. We acknowledge receipt of your grievance and may ask for further information, including to confirm your identity. We aim to respond within 30 calendar days of receipt, subject to any shorter deadline required by law.

If you are not satisfied with our response: under the DPDP Act, once the relevant provisions are in force, a Data Principal may approach the Data Protection Board of India after exhausting our grievance process. Your other rights to complain to a supervisory authority, described in the section on your rights, remain unaffected.

17. Children

This website is not directed at children. Under the DPDP Act a child is a person under 18. We do not knowingly collect personal data of children. If we learn that we have received such data without the consent of a parent or lawful guardian, we delete it.

18. Changes to this policy

We update this policy when our processing or the law changes. The version published on this page applies.

Last updated: 28 October 2026