Privacy Policy

1. Who is responsible

The controller of your personal data is Martin Ayer, Riehenring 65, 4058 Basel, Switzerland. For any privacy question or request, write to claimbot.app@gmail.com.

2. Summary

• We only collect what is needed to analyse your dispute, create your letter and run your account.
• We do not sell your personal data and do not use it for advertising.
• We do not use your documents to train AI models, and our AI provider does not either.
• The document or description you submit is sent to our AI provider to analyse your case and write your letter, and it often contains personal details. The short details you type in the form (your name and address, email, references, dates, account numbers) are not sent to the AI: they are inserted into the PDF on our own servers.
• You can delete your account and all your claims at any time in My account.

3. What data we process

Sensitive information. Please do not upload more than is needed. Documents can contain information about third parties (for example fellow travellers) or sensitive data (for example health details in a medical-related claim). Only share such information if it is necessary for your claim and you are allowed to share it.

4. Why we use it (and legal bases)

Under the GDPR and UK GDPR we must name a legal basis. Under Swiss law we process data in line with the principles of the Federal Act on Data Protection (nFADP).

We do not use automated decision-making that has legal or similarly significant effects on you.

5. How the AI handles your data

• To read your upload, analyse your case and write your letter, the content of your document or description is sent to our AI provider, Anthropic, which processes it on our behalf. It may contain your name, references and other personal details.
• For the details you type in the form, the AI only receives the names of short details (for example “booking reference”), not their values: your name, addresses, email, references, dates and account numbers are inserted into the PDF on our own servers. Answers written in sentences (for example “what you want to obtain”) are sent to the AI so it can translate them into the language of your letter.
• When you ask for changes in your own words (“What would you like to change?”), your request and the current text of your letter are sent to the AI, including any wording you edited yourself. Details from the form stay replaced by their names. Edits you make yourself without asking the AI are never sent to it.
• Under its commercial terms, Anthropic does not use data received through its API to train its models, and keeps it only for a limited time for safety and abuse monitoring.

6. Service providers

We use carefully selected providers (“processors”) bound by data processing agreements. They may only use your data to provide their services to us.

We may also disclose data where required by law or a court order, or to protect our rights. If the business is transferred, data may pass to the new operator, who will be bound by this policy.

7. International transfers

Some providers are located in or may access data from the United States and other countries where they operate. The USA is considered to provide adequate protection for companies certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework. Where a provider is not certified, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum and the adaptations required for Switzerland). You can ask us for a copy of these safeguards.

8. How long we keep data

• Claims, uploads and letters: as long as your account exists, so you can download and edit your letters.
• Claims that were never paid are deleted automatically after 90 days of inactivity for guests, and after 12 months for registered users. Guest sessions with no claims left are deleted after 90 days of inactivity.
• Deleting your account removes your claims, uploads and letters immediately. Copies in backups are overwritten within about 30 days. For paid claims we keep a minimal record (amount, date, payment reference and the consents you gave before paying, without your documents or letter) for the accounting period below.
• Payment and accounting records: kept for 10 years, as required by Swiss law (art. 958f Code of Obligations).
• Technical logs: usually up to 30 days. Usage statistics: up to 24 months.

9. Your rights

Depending on where you live, you have the right to:

• access your data and receive a copy;
• correct inaccurate data;
• have your data deleted;
• restrict or object to processing based on legitimate interests;
• receive your data in a portable format;
• withdraw any consent at any time, without affecting earlier processing.

Many of these you can do yourself in My account. Otherwise, write to claimbot.app@gmail.com. We answer within 30 days. We may need to verify your identity first. This is free of charge, except for manifestly unfounded or excessive requests.

You may also complain to a data protection authority, for example:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
• EU/EEA: the supervisory authority of your country of residence or work
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk

10. Notice for U.S. residents (incl. California)

In the last 12 months we have collected the categories of personal information described in section 3: identifiers (email, name, IP address), customer records (postal address, order details), commercial information (purchases), internet activity (technical logs), and the content of documents you submit. We collect them from you directly and from your use of the Service, for the purposes in section 4, and share them only with the service providers in section 6.

• We do not sell or share personal information for cross-context behavioural advertising, and have not done so in the past 12 months.
• We do not use sensitive personal information to infer characteristics about you.
• You have the right to know, access, correct and delete your personal information, and to not be discriminated against for exercising these rights. You may use an authorised agent. Requests: claimbot.app@gmail.com.
• Residents of other states with privacy laws (for example Colorado, Connecticut, Virginia, Texas) have similar rights and may appeal a refusal by replying to our answer.

11. Cookies

We only use strictly necessary cookies and browser storage: to keep you signed in (guest or account) and to protect forms against bots. We use no advertising or tracking cookies, and we count visits with a tool that uses no cookies, so no cookie banner is needed. If we ever add optional cookies, we will ask for your consent first.

12. Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Access is restricted by user-level security rules, files are stored in private storage, and secret keys never reach your browser. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities where required by law.

13. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has used the Service, contact us and we will delete the data.

14. Changes

We may update this policy. The date at the top shows the latest version. If changes are significant, we will inform account holders by email or in the Service.