Privacy Policy

1. Controller and contact

The data controller for this website is TAIA GmbH, Seestrasse 353, 8038 Zurich, Switzerland, company number CHE-189.956.337.

For privacy requests, contact: info@taia.ch

2. Necessary cookie

This site currently uses one strictly necessary consent preference cookie named taia_cookie_consent.

This cookie stores your consent preference status and expires after 180 days.

The cookie banner lets you accept, decline or configure optional categories. You can reopen these settings from the footer at any time.

3. Analytics and marketing

No analytics or marketing tags currently load on this website.

If optional analytics is introduced later, it must remain off by default until you opt in, and this policy must be updated with vendor and processing details before activation.

4. Hosting and infrastructure logs

Hosting and content-delivery infrastructure may process technical data needed for secure delivery and operation.

This may include IP address, timestamp, requested URL, user-agent, and security/access logs.

5. External links and third-party contact points

This website includes links to LinkedIn, Google Maps and email clients.

These external services are only contacted when you actively click a link. Their own privacy policies apply.

• LinkedIn
• Google Maps
• Email

6. Forms on this site, and the Digital Advisor

The access request on taia.ch composes a message in your own mail client; the site itself sends and stores nothing from it.

The TAIA Digital Advisor at taia.ch/advisor/ is different: it is a signed-in conversation. When you send a question, its text is transmitted to TAIA's server and stored there, linked to your account, as part of that conversation's record (session, turns and receipt). The passages that answer it are selected from TAIA's own documents on TAIA's servers, which run on Google Cloud in the United States (us-central1); database backups are kept in Switzerland (Zurich). When the answer shows a short summary, it was written from those passages, which are TAIA's public text, by Google Cloud's Vertex AI in the EU (europe-west3, Frankfurt, Germany); Google acts as TAIA's processor for this. What you type is not sent to Vertex AI or to any other model provider.

Purpose: to answer your question and to keep the record the receipt describes. Legal basis: performance of the service you signed in for and TAIA's legitimate interest in an inspectable record. Your questions are not used to train any model and are not shared. Conversation records are kept while your account exists and for the operational cycle described in section 10; you can close the account in the Folio app (section 6a) or ask for deletion at info@taia.ch. Accounts are opened on request only.

6a. The TAIA Folio app for iPhone

The TAIA Folio app is used signed in, with an account in TAIA's own sign-in service (Keycloak), which holds the details you sign in with. Accounts are opened on request only.

What the app stores on TAIA's servers, linked to your account: the questions you ask, the answers prepared for them and their receipts; the committee briefs you prepare, including a decision question you write and a position you choose to keep; any link you publish to a receipt; and your conversations with the Digital Advisor. TAIA's servers run on Google Cloud in the United States (us-central1); database backups are kept in Switzerland (Zurich).

When the app shows a short summary of an answer, or drafts a position for a brief, that text is written from passages of TAIA's own documents (for a brief, the passages behind the claims you selected) by Google Cloud's Vertex AI in the EU (europe-west3, Frankfurt, Germany); Google acts as TAIA's processor for this. Your questions, your decision question and anything else you type are not sent to Vertex AI or to any other model provider. A receipt you publish by link can be opened by anyone who has the link until the link expires or you revoke it; the question is shown with it only if you declared the question public.

On your iPhone the app keeps its sign-in token in the iOS Keychain, removed when you sign out or close the account, and a few display settings. The app contains no analytics, advertising or tracking code, and it does not ask for your location, contacts, camera or microphone.

You can close your account in the app, under “Close this account”. Closing deletes everything listed above at once: your questions with their answers and receipts, your briefs, your published links (they stop opening) and your Advisor conversations, and your sign-in itself, so the account cannot be opened again. TAIA's own documents are not yours and are not touched. A record that the account was closed, holding its identifier and two times and nothing else, is kept for about 70 minutes so that no new request can write under it; it is then deleted together with anything a request already under way wrote in the meantime. Closing cannot be undone. Copies in TAIA's database backups are kept for up to six weeks. You can also ask for deletion at info@taia.ch.

Purpose: to answer your questions, to prepare your briefs and to keep the record a receipt describes. Legal basis: performance of the service you signed in for and TAIA's legitimate interest in an inspectable record. Your data is not used to train any model, is not sold, and is not shared beyond the processors named on this page. It is kept while your account exists and deleted when you close it, with the closing record and backups as described above.

7. Email communication purposes and legal basis

If you send us an email, we process your contact details and message content to respond, evaluate pre-contract requests, and maintain legitimate business correspondence.

Depending on the context, processing is based on consent, steps prior to contract, contract performance, legitimate interests, or legal obligations under applicable law.

8. No sale of personal data

TAIA does not sell personal data.

9. Cross-border disclosures

If personal data is disclosed across borders, it is done only where lawful safeguards exist, including adequacy decisions and/or appropriate contractual clauses, as applicable.

10. Retention

Personal data is retained according to purpose, operational necessity, and applicable statutory retention duties.

Data no longer required is deleted or anonymised within reasonable operational cycles.

11. Your rights

Where applicable under Swiss FADP and GDPR, you may request access, rectification, deletion, restriction, objection, portability, and information about processing.

If processing is based on consent, you may withdraw consent at any time with effect for the future.

12. Complaints

You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Where GDPR applies, you may also contact the competent EEA supervisory authority.

13. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

14. Children

This site is not directed to children, and we do not knowingly collect personal data from children through this website.

15. Policy changes

We may update this Privacy Policy to reflect legal, technical or business changes. The updated version is published on this page.