Your data, handled with purpose.

Controller and contact.

Controller and contact.

AIFAB (under formation)

Postal address

Schaffhauserstrasse 58, 8180 Bülach, Switzerland

AIFAB is responsible for processing personal data through this website. The business is under formation and is not yet an incorporated company.

For privacy questions or to exercise your rights, use the Privacy or legal request option in the protected contact form or write to the postal address above. Please describe your request clearly; AIFAB may need to verify your identity before disclosing or changing personal data.

What AIFAB processes and why.

AIFAB processes technical request information to deliver and protect the website; information you choose to provide to answer enquiries or prepare a possible engagement; and, after a statistics choice, limited usage data to understand and improve the website.

Where the EU or UK GDPR applies, the relevant grounds are steps requested before a contract, performance of a contract, legal obligations, AIFAB's legitimate interests in operating and securing the website, and consent for optional statistics. Under Swiss law, processing follows the principles of transparency, proportionality, purpose limitation and security.

AIFAB does not use this website to make solely automated decisions with legal or similarly significant effects. The Workflow Fit Checker and ROI calculator provide illustrative, user-requested results; they do not accept a customer, set contractual terms or make a regulated decision.

Website delivery and security.

The website is hosted by Vercel. When your browser requests a page, Vercel and its infrastructure providers process information such as IP address, date and time, requested URL, browser and device information, referrer and security signals needed to deliver the site and prevent abuse.

AIFAB's application logs for contact and result requests are deliberately limited to the request kind and a bounded outcome status. They do not contain form fields, email addresses, IP addresses, request identifiers or exception text. Provider security and access logs may contain technical connection data under the provider's own retention and security controls.

Local preferences, demos and calculators.

System, Light or Dark appearance is stored in local storage under aifab:theme:v1 until you change it or clear site data. The value contains no contact details or analytics identifier. Fonts are served from the website rather than a remote font service.

The five demonstrations use synthetic data and run in page memory. They do not upload files, connect to customer systems or call an external AI model. The Workflow Fit Checker and ROI calculator also calculate locally and reveal their results without asking for an email address.

If you choose to discuss a result, structured tool answers can be held in this tab for up to 30 minutes under aifab:handoff:v1. A bounded landing path, campaign code and referrer origin may be held for the same period under aifab:attribution:v1. Free-text descriptions, URL queries, fragments and referrer paths are excluded from these browser records.

If your browser prefers German, French, Italian or Romansh, the first visit to an English page is redirected once to the same page in that language. The language of the page you visit is kept for one year in a functional cookie named aifab-locale, so a language chosen in the menu is respected on later visits. The cookie contains only the language code; search engines and requests without a language preference are never redirected.

Enquiries and requested emails.

If you submit the contact form, AIFAB receives your selected enquiry type, name, email address, message, selected language and any topic-specific or optional details you provide. Company or organisation is required only for commercial and collaboration enquiries. The form accepts no attachments. If you request a Fit or ROI summary, the server recalculates the result from validated structured inputs and sends it to the address you enter. Please do not submit passwords, customer records, confidential documents or other sensitive information through these forms.

Resend transmits the enquiry to AIFAB's private recipient mailbox or sends the one-off result you requested. The website does not expose that mailbox, send an automatic visitor acknowledgement, create a marketing subscription, run an automated sales sequence or maintain an application-level enquiry database. A successful confirmation means the email provider accepted the message; it does not confirm inbox receipt or a booked meeting.

Upstash Redis protects the forms from abuse using short-lived keyed hashes derived from the client IP and recipient email, plus an aggregate counter. It does not store the form text in those counters. The counters expire after 15 minutes or one hour. If delivery or shared protection is unavailable, the website fails closed and does not claim success.

Vercel BotID Basic runs an invisible browser integrity check for the protected contact endpoint. During the documented observation stage, its verdict is measured without rejecting a submission. In enforcement mode, a classified bot is rejected before the request body is processed. AIFAB does not enable paid Deep Analysis for this form.

Website analytics and consent.

AIFAB does not currently use PostHog, Google Analytics 4, Vercel Web Analytics or Vercel Speed Insights on this website. These optional statistics services will be activated only after their configuration, costs and legal basis have been approved and any required statistics-consent choice has been implemented.

If activated, PostHog will use its EU Cloud region in Frankfurt with explicit allowlisted events; autocapture, session replay and person profiles will remain off. Google Analytics 4 will be configured for aggregate audience and acquisition reporting with Google Signals, advertising personalisation, remarketing, User-ID and advertising-product links disabled. The planned retention is two months for Google Analytics user and event data and no more than 12 months for PostHog events.

When activated, statistics events will use sanitized page paths and declared identifiers such as a workflow, service or article slug. AIFAB will not send contact details, workflow descriptions, calculator free text, arbitrary URL queries or form contents to analytics. Google Analytics cookies, including _ga and the property-specific _ga cookie, will be set only after any required statistics consent and configured with a maximum lifetime of 13 months. Declining optional statistics will not prevent use of the website, demos, calculators or contact form.

Service providers and international processing.

AIFAB currently uses Vercel for hosting and BotID Basic form protection, Resend for email delivery and Upstash for shared rate protection. PostHog and Google will become recipients only if the optional statistics services described above are activated. Authorised AIFAB personnel and professional advisers may also receive data where necessary and subject to confidentiality obligations.

Providers may process data in Switzerland, the European Economic Area, the United Kingdom, the United States or other countries in which they or their subprocessors operate. Where a destination is not recognised as providing adequate protection, AIFAB relies on appropriate contractual safeguards or another legally permitted transfer mechanism and considers supplementary measures where required.

Following an external link opens a separate service. That destination receives the browser request and applies its own privacy terms. AIFAB does not control the processing performed by an external website.

How long information is kept.

Enquiry correspondence is normally retained for up to 24 months after the last meaningful contact. Records connected with an engagement, legal obligation, dispute or security incident may be retained longer where necessary. One-off result emails follow the retention controls of AIFAB's mailbox and Resend account.

Browser handoff and attribution records expire logically after 30 minutes. Form-protection counters expire after 15 minutes or one hour. If optional analytics is activated, the planned configuration uses two months for Google Analytics user and event data and no more than 12 months for PostHog events. Hosting and security logs follow the provider's applicable operational settings and are kept only as long as needed for delivery, security and incident investigation.

Your choices and rights.

Subject to applicable law, you may ask whether AIFAB processes your personal data and request access, correction, deletion, restriction, portability or objection. You may withdraw consent for future optional processing at any time. Some information may need to be retained to meet legal obligations or establish, exercise or defend legal claims.

Send requests through the Privacy or legal request option in the protected contact form, or by post to the controller address above. AIFAB will respond within the period required by applicable law and will explain any limitation. You may also contact the Swiss Federal Data Protection and Information Commissioner or another competent supervisory authority.

Security and responsible reporting.

AIFAB applies organisational and technical measures appropriate to the website and the information processed, including access control, bounded application logs, encrypted transport, validation, rate protection and fail-closed email handling. No internet service can promise absolute security.

If you believe the website has a security issue, use the Security report option in the protected contact form for an initial, non-sensitive report. Do not include credentials, customer data or exploit code until a secure exchange method has been agreed.

Changes to this notice.

AIFAB updates this notice when the website, providers or processing purposes change. The effective date at the top identifies the current version. Material changes will be presented clearly before they take effect where required.