Privacy policy
Last updated: November 14, 2026
This privacy policy explains, in line with the Swiss Federal Act on Data Protection (FADP, Art. 19–21), how anpack GmbH (“anpack”, “we”) processes personal data.
1. Controller
anpack GmbH, –, –, Switzerland. Data protection contact: support@anpack.ch.
2. Data we process
- Account: name, email, phone number, language, sign-in data (password hash, passkeys, two-factor settings), linked Google or Apple accounts.
- Requests: description, answers in the assistant, photos, videos, voice messages and their transcript, postcode and place, and on request address and phone number.
- Companies: company data from the UID register, profile, permits and insurance certificates, bank details.
- Communication: messages, quotes, appointments, invoices, reviews, support requests.
- Usage and security: IP address, device data, logs, abuse signals (truncated or hashed).
- Payments: payment status and receipts; card data is processed by Stripe only.
3. Purposes
We process personal data to run the platform (matching requests with suitable companies, quotes, appointments, messages, invoices), verify companies, prevent abuse, provide support, meet legal obligations (e.g. accounting) and – only with your consent – for marketing messages.
4. Sharing with companies
Companies first see your request without contact details. Only when you request a quote does the company see your first name, the initial of your last name, postcode and place. Your phone number only if you allow it; your email address never. Street and house number only once you accept an appointment or a quote, or choose “share address now”.
5. Processors and countries
| Service | Purpose | Country |
|---|---|---|
| Amazon Web Services (SES, S3) | Email delivery, file storage | EU (Frankfurt, Zurich) |
| Stripe | Payments | USA/EU (Data Privacy Framework) |
| Anthropic | AI analysis of texts and photos, drafts | USA |
| OpenAI | Voice message transcription, AI analysis | USA |
| OpenRouter | Fallback routing for AI requests | USA |
| BulkGate | SMS delivery | EU |
| Google, Apple | Sign-in, push notifications (FCM) | USA/EU |
| Own servers | Database (MySQL), search (Elasticsearch), cache (Redis) | Switzerland/EU |
For transfers to countries without adequate data protection we rely on the Swiss-U.S. Data Privacy Framework or standard contractual clauses. AI providers may not use your data to train their models.
6. Automated decisions
We use automated processes to select suitable companies (matching), for price ranges and for content moderation. You can request a human review at any time: via “Request human review” in your account or by email to support@anpack.ch.
7. Retention
- Request drafts: 30 days
- Voice recordings: 180 days after closure (the transcript is kept)
- Request photos: 3 years after closure
- Messages: 3 years after the last activity
- Invoices and accounting records: 10 years (Swiss CO 958f)
- SMS logs: 12 months; notifications: 6 months
- Server logs: IP addresses truncated after 7 days, deleted after 14 days
Deleted data may remain in encrypted monthly backups for up to 12 months. Public job pages are removed from search engines after 24 months; you can switch public display off at any time.
8. Cookies
We always set necessary cookies. Analytics and marketing only with your consent, which you can change at any time. Details in the cookie notice.
9. Your rights
You have the right to access (including a data export under Art. 25 FADP directly in your account), rectification, erasure (account deletion with a 30-day grace period), objection and withdrawal of consent. Write to support@anpack.ch. You may also complain to the Federal Data Protection and Information Commissioner (FDPIC).
10. Security
We protect data with encryption (TLS, encrypted backups), access restrictions, two-factor sign-in for staff and logging. We report data security breaches under Art. 24 FADP.