Privacy Policy

Data controller

Authorised representative: Harry Witzthum, Owner

Email: hello@rautaki.ch

Your input and results

We do not store your input or the results of the apps: we have neither a database nor file storage for them, and content does not appear in our logs, error reports or visitor statistics.

To be processed, however, your input is sent to the AI provider Anthropic, which retains it for a limited period under its own rules (see the following sections).

AI provider Anthropic

The apps produce their results with AI models from Anthropic. To do so, your input is sent in encrypted form to Anthropic’s application programming interface (API). The contracting party for customers in Switzerland is Anthropic Ireland, Limited.

Anthropic stores the data in the USA; your input is therefore transferred to the USA. The computation by the AI model itself may also take place in other countries. The transfer is based on standard contractual clauses in the contract with Anthropic.

Retention at Anthropic

Anthropic generally deletes inputs and outputs within 30 days of receipt or generation. Exceptions:

• Usage policy violations: if a request is flagged as a possible violation, Anthropic retains inputs and outputs for up to two years and the classification scores of its safety checks for up to seven years.
• Agreed retention: if a different retention period has been agreed with Anthropic, that period applies.
• Zero Data Retention: under such an agreement, which Anthropic concludes on request, inputs and outputs are not retained at all.
• Legal obligations: where the law requires longer retention or it is necessary to address violations.

No training on your input

Anthropic does not use your input or the results to train its AI models. This is set out in Anthropic’s commercial terms of service.

Uploaded PDFs in the Document Chat

In the Document Chat you can ask a question about a PDF of your own. The PDF and your question are sent to Anthropic for this purpose. The same retention and the same exclusion from training apply as for all input (see above).

On our side, the PDF is processed only in the working memory of the respective request. It is neither stored nor logged, and neither is its file name.

Your browser creates the link “Open PDF on page …” from its own copy of the PDF. The PDF opens in the browser without being transmitted again.

So that follow-up questions about the same documents are answered faster and at lower cost, Anthropic keeps a technical intermediate form of the documents in working memory for a few minutes and then deletes it. This does not extend the retention period.

The app’s sample documents are publicly available documents; the app states the publisher and date of each.

Usage limit and daily budget (Upstash)

To prevent misuse of the apps and keep costs limited, we use the storage service Upstash in an EU region, with a data centre in Frankfurt am Main (Germany). Only the following is kept there:

• a hashed, i.e. irreversibly converted, form of your IP address with a counter of your requests; the entry deletes itself automatically no later than one hour after your last counted request;
• a daily counter of the costs of all apps, with no link to individual persons.

Upstash does not store any content of your input or results.

Upstash is a company based in the USA (Upstash, Inc.). Access from the USA, for example for maintenance and support, is therefore possible. Upstash is certified under the EU-U.S. Data Privacy Framework; the European Commission’s standard contractual clauses apply as a fallback. The transfer to Upstash is encrypted; the stored entries themselves are not additionally encrypted in our plan.

Bot protection (Cloudflare Turnstile)

Before an app is used for the first time in a browser session, Cloudflare Turnstile checks whether a human is operating the page. To do this, Turnstile evaluates technical characteristics of your connection and browser, such as IP address and browser identifier, and according to Cloudflare uses them only to detect bots and to improve this detection. Cloudflare does not receive your input.

In doing so, Cloudflare may set a technically necessary cookie on its own address challenges.cloudflare.com that serves only to detect bots.

Hosting and visitor statistics (Vercel)

The website is operated by Vercel Inc. (USA); the transfer is based on standard contractual clauses. When the site is accessed, Vercel processes technically necessary data such as IP address, time, requested address and browser identifier in order to deliver the page and protect it against attacks. The logs of our server functions can be viewed for one day and contain no content of your input.

For visitor statistics we use Vercel Web Analytics — without cookies and without any content of your input. Visits are distinguished by a hash derived from the request, which is discarded after 24 hours; the data points are not linked to your person or IP address. Recorded are the time, page visited, referring page, country and region, operating system, browser and device type, as well as individual events such as a click on the booking link. We remove additions to the address (query parameters) before sending.

Booking and email

Booking an appointment (via Cal.com) and contacting us by email at hello@rautaki.ch take place via rautaki.ch. The privacy policy of rautaki.ch applies: www.rautaki.ch/en/privacy

Cookies

apps.rautaki.ch sets only two technically necessary cookies. They contain no information about you, only a timestamp with a signature.

In addition, Cloudflare may set its own cookie for bot protection (see “Bot protection”).

Your rights

In particular, you have the right to

• request information on whether and which personal data about you is processed;
• receive your data in a common electronic format or have it transferred;
• have incorrect or incomplete data corrected;
• request the deletion or restriction of processing;
• object to the processing.

To do so, write to hello@rautaki.ch. You can also contact the Federal Data Protection and Information Commissioner (FDPIC, in German EDÖB); persons in the EU can contact the data protection authority of their country.

Last updated

14 September 2026