Clarifly

Privacy policy

The German version of this page is authoritative.

1. Scope of this privacy policy

This privacy policy at clarifly.ch applies to the website, the Clarifly service (an AI chatbot with its own knowledge base) and all other services offered through it. Swiss data protection law (FADP) applies. Where law arising from the European General Data Protection Regulation (GDPR) applies in addition, this is pointed out specifically.

2. Processing of personal data; nature, purpose and use

When visiting the website

When you access our website, information is stored temporarily in so-called log files on our server. This is information that the browser on your device transmits automatically. Namely:

  • IP address of the contacting device
  • Date and time
  • URL of the page accessed
  • Referrer URL
  • Browser and further device information
  • Data required for transmission security, troubleshooting and improvements

We process the data mentioned in order to establish the connection and enable use of the website as well as for system security and stability. The processing takes place at your request and is, pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, necessary for the stated purposes in order to perform the contract and pre-contractual measures, or you have given your consent to the described processing pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

When using the Clarifly chat

When you chat with a chatbot via the Clarifly widget, the following data is collected:

  • IP address: for the technical provision of the service and to prevent misuse
  • User agent: browser and device information for technical compatibility
  • Date and time of use
  • Chat messages: your questions and the bot's answers are assigned to an anonymous session and stored in order to conduct the conversation and to analyse the service
  • Feedback: your optional rating of individual answers (thumbs up or down)

The chat requires no account and no disclosure of your identity; the sessions are anonymous. The chat content is processed in order to provide the service (answering your questions) and to analyse and improve the respective chatbot. This includes the operator of the chatbot being able to view questions that could not be answered, together with the corresponding conversation, in order to add the missing content. We do not use your data to train our AI models. The processing takes place at your request and is, pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, necessary for the stated purposes in order to perform the contract and pre-contractual measures, or you have given your consent to the described processing pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

When you contact us

If you send us enquiries via the contact form, the following data is collected: name, e-mail address, company (optional), telephone number (optional) and the content of your message. Your details are stored by us for the purpose of processing the enquiry and in case of follow-up questions. The processing takes place at your request and is necessary pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, or you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

3. Cookies, tracking and local storage

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is only loaded after you have given your consent in the cookie banner. Without your consent, no analytics cookies are set and no data is transmitted to Google.

With your consent, Google Analytics sets the cookies "_ga" and "_ga_*" with a lifetime of up to two years and records which pages are viewed, for how long and how you arrived at the website. Google Analytics 4 does not store IP addresses. The data may be transmitted to Google servers in the USA; further information can be found in Google's privacy policy.

You can change or withdraw your consent at any time via "Cookie settings" in the footer; the analytics cookies are deleted in the process. Apart from that, the website only sets one technically necessary cookie that stores your cookie decision. In addition, technically necessary settings (your colour scheme choice) are stored in your browser's local storage; this data does not leave your device.

4. Disclosure of data to third parties (incl. data processors)

We use external service providers for hosting and operating our services. Where necessary, a data processing agreement has been concluded with the service providers in order to guarantee the protection of your personal data. Specifically, we use the following service providers:

  • Google (Gemini API): the AI-supported answering of chat questions takes place via Google services. For this purpose the chat messages and the relevant content of the knowledge base are transmitted to Google and used exclusively to provide the service.
  • Sentry: a service for error monitoring; in the event of an error, technical data (e.g. IP address, device information) may be transmitted.

The fonts used on this website are stored locally on our server; when the website is accessed, no connection to third-party servers (e.g. Google Fonts or CDN services) is established. Contact form data is forwarded by e-mail to our business address via our internal infrastructure.

Beyond this, your personal data is only passed on to third parties where this is legally permissible pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR and necessary for the performance of contractual relationships with you. The data passed on may be used by the third party exclusively for the stated purposes. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. a, b and f GDPR.

5. Cross-border disclosure to third countries without an adequate level of data protection

Where data is transferred to a recipient outside Switzerland or the EEA (in particular to Google and Sentry, both based in the USA), an adequate level of data protection for the transfer abroad is ensured by suitable safeguards. Should you have questions about such data protection agreements based on the EU standard contractual clauses, or should you like more information about further safeguards for data transfers to third countries, please feel free to contact us. Below you will find the standard contractual clauses that ensure an adequate level of data protection:

EU standard contractual clauses (PDF)

6. Your rights

You have the right:

  • To request information about the personal data we process about you (Art. 15 GDPR) – in particular about the purposes of the processing, the categories of data and recipients, the intended storage period and the origin of the data. In the event of disproportionate effort, we reserve the right to request proof of identity from you and the advance assumption of the actual costs.
  • To request the immediate rectification of incorrect personal data stored by us, or its completion (Art. 16 GDPR).
  • To request the erasure of the personal data stored by us, insofar as the processing is not necessary to comply with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (Art. 17 GDPR).
  • To request the restriction of the processing of your personal data (Art. 18 GDPR).
  • To receive your personal data in a structured, commonly used and machine-readable format, or to request its transmission to another controller (Art. 20 GDPR).
  • To withdraw consent once given at any time by informing us (Art. 7 para. 3 GDPR).
  • To lodge a complaint with a supervisory authority (Art. 77 GDPR).

7. Right to object

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data where there are grounds arising from your particular situation or where the objection is directed against direct marketing. In the latter case you have a general right to object, which we implement without you having to state a particular situation.

8. Data security

Your data is protected by SSL/TLS encryption and by organisational measures within the company. These include in particular SSL/TLS encryption for data transmission, a secure server infrastructure, regular security updates, access controls and permission management as well as the automatic deletion of temporary files.

9. Retention period

Your data is processed in a trustworthy and responsible manner, as described in this privacy policy and in accordance with applicable data protection law. We store the data only for as long and to the extent necessary for the described purposes or for legal reasons. Namely:

  • Chat messages and feedback: stored only for as long as necessary to operate and analyse the respective chatbot
  • Usage logs: deleted automatically after 30 days
  • Contact enquiries: deleted once processing is complete or at your request

10. Contact details

This privacy policy applies to data processing by:

CyroTech GmbH
Morgenstrasse 129
3018 Bern
Switzerland

Supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland.

11. Currency and amendment of this privacy policy

We may amend or adapt this privacy policy at any time. The current privacy policy can be accessed at clarifly.ch.

Version of this privacy policy: Bern, July 2026