Privacy notice

Controller and contact

The data controller is Mundus Code CH di Gianpiero Cirillo. For any privacy question or request, write to hello@theailab.ch.

The company

The company's address, phone and legal form are in the legal notice.

Legal notice

In short

• The consultant in the store and in the AI Audit is an artificial intelligence: we always tell you before we start.
• We do not record audio: your voice becomes text while you speak and is not saved.
• We do not sell data and we do not use it to train models.
• The data is on a server in the United Kingdom; some providers are in the United States, with the safeguards the law requires.
• You can see, correct, export or have your data deleted at any time.

The website

When you visit theailab.ch, the server receives the technical data of each request (IP address, browser, page, time) and writes it to the technical logs. To measure the website without third-party tools we count page views with a random identifier tied to the browser session (not to your name) and remember where the visit came from (the parameters of the campaign that brought you here).

If you fill in a form (contact, booking, application as an affiliate) we save what you write, for example name, email, phone, company and message, and when you gave your consent. Cookies are explained on their own page.

Cookies

AI Audit from your phone

The answers you give the AI consultant (sector, volumes, tools, activities, problems, goals) and the written conversation are saved to prepare your report; if you leave your email, we link it to the report. When the AI consultant is active, the answers are processed by the language model listed among the providers; otherwise the guided path runs only on our server.

In-store AI consultation

The consultation starts only after your consent on the screen. What you say is transcribed to text to prepare your business analysis and a proposal. Audio is not recorded. The transcript and the analysis are kept by Mundus Code CH di Gianpiero Cirillo for 12 months and then anonymised, unless you ask for earlier deletion at hello@theailab.ch. The consultant in the room can read the transcript during the session. If you prefer, you can type instead of talking.

Customers, proposals, invoices and appointments

When you ask us for an offer or become a customer, our management system (CRM) keeps your record: contact details, company, deals, notes on conversations, proposals and their acceptance. When you accept a proposal we record who accepts it (name, email and, if you give them, role or company), the date and time, the full IP address and the browser the acceptance comes from: they are the proof of the contract and stay with the proposal. Invoices contain billing data and payments. The calendar holds the appointments you book, with the confirmation and reminder emails.

Client area

The client area shows your proposals, invoices, appointments, automations and documents. To sign in you need your email and a password (kept only as an encrypted hash) or a one-time link; we log the sign-ins. The documents you upload stay in a private space, visible to you and the store.

Client area

Website chat

The chat saves the messages of the conversation. It uses no cookies: it remembers the conversation in your browser's local storage. Your IP address is not kept, only a non-reversible fingerprint used to curb abuse. You leave your contact details only if you want to, with your consent. On a customer's website the controller is that customer: we process the data on their behalf.

News and invitations

We send you news and invitations only if you chose to receive them: consent is optional and never pre-ticked. Every email has a link to change your preferences or unsubscribe.

Why we process the data

In Switzerland we process data under the FADP. For people in the European Union the legal bases are the contract and pre-contractual steps, consent, our legitimate interest in running and protecting the service, and legal obligations (Art. 6 GDPR).

• to answer your requests and arrange appointments;
• to prepare the report, the analysis and the proposal;
• to deliver what you bought (automations, software, support), invoice it and collect payment;
• to protect the service from abuse and keep it secure;
• to measure which pages and campaigns work;
• to meet legal obligations, such as bookkeeping;
• to send you news, only with your consent.

Who we entrust the data to, and in which country

Only these providers work for us, each for the stated purpose and under a contract that forbids any use of their own. The list follows the services switched on right now: those we do not use are not shown. We do not sell data to anyone.

The United Kingdom and the states of the European Union offer adequate protection from a Swiss point of view. Data goes to the United States only with the safeguards stated for each provider.

• IONOS (Fasthosts Internet Ltd), United Kingdom: the server hosting the website, the platform, the database, the files and the backups. Safeguard: country with adequate protection (Annex 1 of the Swiss Data Protection Ordinance).
• Zoho Mail, European Union: the store's mailbox (hello@theailab.ch): the emails you write to us arrive there. Safeguard: country with adequate protection (Annex 1 of the Swiss Data Protection Ordinance).
• Anthropic, United States: the language model behind the AI consultant, the analyses and the automatic replies. It does not use the data to train its models. Safeguard: standard contractual clauses or Swiss-U.S. Data Privacy Framework.
• Google (Chrome browser), United States: the browser's speech recognition when you talk to the consultant: your voice goes to Google and comes back as text. Safeguard: standard contractual clauses or Swiss-U.S. Data Privacy Framework.
• Mailgun, United States and European Union: sending emails (confirmations, proposals, invoices, reminders). Safeguard: standard contractual clauses or Swiss-U.S. Data Privacy Framework.

How long we keep it

Everything else we keep as long as it serves the purpose for which we collected it, then we delete it or make it anonymous.

• In-store consultations and AI Audits (transcripts and analyses): 12 months, then anonymised.
• Contact requests, bookings and leads: 24 months from the last contact.
• Website measurement events: 24 months.
• Invoices and accounting: 10 years, as the law requires (Art. 958f of the Swiss Code of Obligations).
• Access logs: 180 days.

Your rights

You can ask which data we hold about you (access), have it corrected, have it deleted, receive it in a machine-readable format (export) and withdraw a consent at any time. Write to hello@theailab.ch: we reply within 30 days. If you are a customer, in the client area you can correct your data, download it and request deletion yourself. Invoices cannot be deleted before the legal retention period ends.

You can also contact the Federal Data Protection and Information Commissioner (FDPIC) or, in the European Union, the supervisory authority of your country.

Client area

Artificial intelligence

The consultant in the store and in the AI Audit, the chat assistant and the assistant on our channels are an artificial intelligence, and we say so before we start. Scores, savings and timings are indicative estimates, calculated with stated rules. No decision about you is taken by an automated system alone: prices, proposals and business decisions are made by people.

No audio recording

We do not record your voice, neither in the store nor on the phone: speech recognition (see the providers) turns it into text while you speak and we keep only the text.

Security

Two-factor sign-in to the management system for staff, encrypted secrets, encrypted connections, data separated by store, verified backups and a log of operations. Everyone sees only what they need.

Minors

Our services are designed for businesses and professionals. We do not knowingly collect data of children under 16: if you think this has happened, write to us and we will delete it.

Changes

This is the version of 8 October 2026. If we change the notice we publish the new version here with its date; we inform customers of important changes by email.