Privacy Policy

Ver 1.3

Welcome to AITalk.ch. We are committed to protecting your privacy and ensuring the security of your personal information.

We are M-BIZ Global AG, located at Ruessenstrasse 12, 6340 Baar, Switzerland ("M-BIZ" or "we"), and we welcome you to our privacy policy. This policy outlines how we handle your personal information if you're a user of the services or products provided by M-BIZ, or if you're a visitor to our Sites. It applies to aitalk.ch and its associated applications (the "Sites").

When we say 'we', 'us', or 'M-BIZ', it's because that's who we are, and we own and operate the Sites.

If we say 'policy', we're talking about this privacy policy. If we say 'user terms', we're referring to the rules for using each of the Sites. Each product has separate user terms, available separately and requiring separate consent.

1. The type of personal information we collect

We collect certain personal information about visitors and users of our Sites.

When AiTalk.ch services are provided through Google Drive, SharePoint, GitBook, SendGrid, Telegram, Stripe, or other partners, we may receive personal information such as IP addresses, user emails, and cookies from these service providers.

Common types of information collected include: usernames, member names, email addresses, IP addresses, other contact details, survey responses, blogs, photos, payment information, transactional details, tax information, support queries, forum comments, content provided by you for our Sites, web analytics data, and job application data (such as CVs, application forms, cover letters, and interview notes).

We collect personal information directly when you provide it to us.

Personal information is collected when you register on the Sites, buy or provide items or services, subscribe to newsletters, submit feedback, enter contests, fill out surveys, or communicate with us.

2. Why we collect personal information

We use personal information to fulfill contracts or process transactions on the Sites, for legitimate interests including site operation, identity verification, support, security, technical analysis, relationship management, and service improvement, with your consent for marketing and personalized advertising, and for compliance with legal obligations or to respond to legal or governmental requests.

3. When we disclose personal information

Personal information may be disclosed to affiliates of M-BIZ located in Switzerland, subcontractors and service providers assisting us, regulators, government authorities and potential buyers in connection with business transactions, authorities conducting investigations or for legal compliance, and third parties to protect our rights or address risks.

4. How we store and protect personal information

Personal information is stored securely on Microsoft Azure servers located in Switzerland. API keys and authentication information for third-party services connected through Agent Studio are stored encrypted on the same servers. For the Company - Managed plan, vector data (Azure AI Search) is stored in the Azure region selected by the user (across 11 countries, 12 Azure regions) and does not leave that country. However, AI model processing (Azure OpenAI Service) may be performed within the selected region or in other regions via Global Standard deployment, depending on the model. The processing location for each model is displayed on the service interface.

Third-party API keys, authentication tokens, and other sensitive credentials stored by users on AiTalk.ch are protected using industry-standard multi-layer encryption. A master key is securely managed through Microsoft Azure Key Vault, and a secondary Data Encryption Key (DEK) is generated per user to encrypt sensitive data at rest. All data transmissions are encrypted via HTTPS/TLS. Despite these security measures, no method of electronic storage or transmission over the Internet is 100% secure. AiTalk.ch and M-BIZ Global AG shall not be held liable for any unauthorized access, data breach, or disclosure of user data (including but not limited to API keys, email addresses, personal information, and business data) resulting from: (a) sophisticated cyberattacks, zero-day exploits, or advanced persistent threats beyond industry-standard defenses; (b) vulnerabilities in third-party services, cloud infrastructure providers, or AI providers; (c) user negligence, including weak passwords, shared credentials, or failure to enable available security features; or (d) any other circumstances beyond the reasonable control of AiTalk.ch. Users are solely responsible for the security of their own API keys, credentials, and access tokens. In the event of a known data breach, AiTalk.ch will notify affected users and relevant authorities in accordance with applicable data protection laws, including GDPR and Swiss Federal Act on Data Protection (FADP).

5. Access to your personal information

You can access or update some information via your account settings. To request full data access, correction, or deletion, please contact our privacy officer.

6. Cookies and tracking technologies

Our website uses cookies and similar tracking technologies for service operation and user experience enhancement. You can manage cookies through your browser settings.

7. Third-Party Services and Data Integration

Our service integrates with multiple AI Providers including OpenAI, Anthropic (Claude), Google (Gemini), xAI (Grok), Mistral, and DeepSeek. Additionally, various third-party services such as SendGrid, Telegram, and SMTP can be connected through Agent Studio. Each of these services has its own privacy policy. Under the Self plan, connections are made through API keys provided directly by the user, and Vector DB data is stored in the user's own Provider account (OpenAI Vector Store, Gemini File Search, Pinecone). Users can import documents from external sources such as Google Drive, SharePoint, and GitBook and transfer them to the Vector DB, in which case the data is stored with the Vector DB Provider chosen by the user.

Under the Company - Managed plan, AI processing (Azure OpenAI Service) and vector storage (Azure AI Search) are performed only in the region selected by the user through Microsoft Azure, and data does not leave that region. When AiTalk.ch services are provided through Google Drive, SharePoint, GitBook, SendGrid, Telegram, Stripe, or other partners, we may receive personal information such as IP addresses, user emails, and cookies from these service providers.

Your personal data is stored securely with industry-standard security measures (encryption, access controls, monitoring). Service infrastructure is operated on Microsoft Azure servers located in Switzerland, and sensitive information such as API keys for third-party service connections is stored encrypted.

Self Plan — AI Data Processing and Storage: When using the Self plan, your conversations and data are processed by the AI provider you have subscribed to (e.g., OpenAI, Anthropic, Google, xAI, Mistral, DeepSeek) and may be stored on their servers in accordance with their respective terms of service and privacy policies. Generally, AI providers do not use data submitted via API for model training; however, each provider's policies may change at any time without notice from AiTalk.ch. In particular, some providers such as DeepSeek do not publicly disclose detailed information about their data handling, retention, or training practices — users should exercise caution when transmitting sensitive or personal data through such providers. AiTalk.ch and M-BIZ Global AG bear no responsibility for how third-party AI providers process, store, or use your data. Users are advised to review each AI provider's privacy policy and terms of service before use.

Company - Managed Plan — AI Data Processing and Storage: The Managed plan uses Azure OpenAI Service for AI processing. Your vector database (Azure AI Search) is stored in the region you selected during setup, and your data does not leave that region. However, AI model processing locations depend on the model and region: only a limited number of countries such as Switzerland, Sweden, and the United States have AI models deployed locally within their borders. For most other regions, AI processing is performed via Global Standard deployment, meaning your prompts and conversations may be processed in data centers outside your selected region. The deployment location for each model is clearly displayed on the service interface. During multi-turn conversations, prompt caching technology may be used to improve performance, which means conversation data (including personal information contained therein) may be temporarily stored in the region where the AI model is served. AiTalk.ch displays model deployment location information transparently so users can make informed decisions about which models to use based on their data residency requirements.

AITalk.ch's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. International Data Transfers

Your personal data may be transferred to countries outside your home country, including Switzerland. Under the Self plan, data is processed according to the server locations of the AI Provider and Vector DB Provider chosen by the user. Under the Company - Managed plan, data is processed only in the Azure region selected by the user, ensuring data sovereignty. All transfers comply with applicable data protection laws.

9. Your Rights and Choices

You can access or update some information via your account settings. Opt out of marketing communications via the "unsubscribe" link provided. Manage cookies through your browser settings. For full data access, correction, or deletion requests, please contact our privacy officer.

10. Children's Privacy

Our Sites are not intended for children under 16. Users aged 16-18 require parental supervision for registration.

11. Data Retention

Personal information is retained for as long as necessary. You may request erasure and account closure, subject to our legal and legitimate business interests.

Even after account deletion or anonymization, payment and billing records (including transaction history, invoice details, and related financial data) are retained in digital form for a minimum period of ten (10) years, as required by Swiss commercial law (Swiss Code of Obligations, Art. 958f) and applicable tax regulations. This retention is necessary for legal compliance, tax audit purposes, and the protection of legitimate business interests. Such records are stored securely and accessed only for legal, regulatory, or audit purposes.

12. Contact us

Questions about privacy practices can be directed to M-BIZ Global AG ATTN: Data Protection Officer, Ruessenstrasse 12, 6340 Baar, Switzerland, or via email at privacy@aitalk.ch

13. Account Deletion and Re-registration Policy

Once you request account deletion (anonymization), your email will be permanently blocked from re-registration. This policy prevents abuse of our free tier and protects the integrity of our service. A minimal anonymized record (hashed email) is retained solely for this verification purpose, in compliance with GDPR Article 17(3)(e) (establishment, exercise, or defense of legal claims). If you accidentally requested deletion and wish to regain access, please contact privacy@aitalk.ch for exceptional review.

This privacy policy was last updated on 11.Mar.2026. Version 1.3