Privacy Policy
Last updated: September 2026
Table of Contents
1. Introduction
Sacco AI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Swiss Federal Act on Data Protection (nLPD) and the EU General Data Protection Regulation (GDPR).
2. Data Controller
Sacco AI Consulting
Salita Cuccarello 4b
6934 Bioggio
Switzerland
Email: info@saccoai.com
Phone: +41 91 252 19 99
For privacy-related inquiries, contact us at: info@saccoai.com
3. What Data We Collect
We collect and process the following categories of personal data:
Contact Data
- Name, email address, phone number
- Company name, job title, industry
Communication Data
- Messages sent via email, contact forms, or our AI assistant
- Call recordings (only with your consent)
- Consultation notes
Technical Data
- IP address, browser type, device information
- Pages visited, time spent on site
- Cookies and similar technologies (see Section 9)
Project Data
- Business requirements and technical specifications
- Documents shared during engagements
- System access credentials (stored securely, deleted after project)
4. How We Use Your Data
We process your data for the following purposes:
| Purpose | Legal Basis (GDPR) | Legal Basis (nLPD) |
|---|---|---|
| Responding to inquiries | Legitimate interest | Legitimate interest |
| Providing consultations | Contract performance | Contract performance |
| Delivering projects | Contract performance | Contract performance |
| Sending project updates | Contract performance | Contract performance |
| Improving our services | Legitimate interest | Legitimate interest |
| Marketing communications | Consent | Consent |
| Legal compliance | Legal obligation | Legal obligation |
| Website analytics | Legitimate interest | Legitimate interest |
We do not sell your personal data to third parties.
5. AI Assistant Data Processing
Our AI assistant (available at +41 91 252 19 99) processes your messages to:
- Understand and respond to your inquiries
- Route complex questions to human consultants
- Improve response quality over time
Conversations may be reviewed to improve service quality. No conversation data is used to train third-party AI models. You can request deletion of your conversation history at any time.
6. Data Sharing
We may share your data with:
Service Providers
- Hosting providers (Infomaniak, Switzerland)
- Email services
- Calendar and scheduling tools
All service providers are contractually bound to protect your data and process it only on our instructions.
Legal Requirements
We may disclose data if required by law or to protect our legal rights.
International Transfers
If data is transferred outside Switzerland or the EEA, we ensure appropriate safeguards through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Your explicit consent
7. Data Retention
We retain your data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Inquiry data (no project) | 2 years |
| Project data | 10 years (legal requirement) |
| Marketing contacts | Until consent withdrawn |
| Website analytics | 12 months (aggregated statistics); session recordings 30 days |
| AI assistant conversations | 90 days (unless deleted earlier) |
After retention periods expire, data is securely deleted or anonymized.
8. Your Rights
Under nLPD and GDPR, you have the right to:
Access
Request a copy of your personal data.
Rectification
Correct inaccurate or incomplete data.
Erasure ("Right to be Forgotten")
Request deletion of your data (subject to legal retention requirements).
Restriction
Limit how we process your data.
Data Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interest.
Withdraw Consent
Withdraw consent at any time (without affecting prior processing).
Automated Decisions
We do not make solely automated decisions with legal effects.
To exercise your rights, contact: info@saccoai.com
We will respond within 30 days.
10. Data Security
We protect your data through:
- Encryption in transit (TLS) and at rest
- Access controls and authentication
- Regular security assessments
- Secure hosting in Switzerland/EU
- Employee confidentiality agreements
- Incident response procedures
In case of a data breach that poses a risk to your rights, we will notify you and the relevant authorities within 72 hours.
11. Children's Privacy
Our services are not directed at individuals under 16. We do not knowingly collect data from children. If you believe we have collected such data, contact us immediately.
12. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy practices. Review their policies before sharing data.
13. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email.
14. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with:
Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
https://www.edoeb.admin.ch
EU:
Your local Data Protection Authority
15. Contact Us
For any privacy-related questions or requests:
Sacco AI Consulting
CHE-441.784.625
Salita Cuccarello 4b
6934 Bioggio
Switzerland
Email: info@saccoai.com
Phone: +41 91 252 19 99