Privacy policy

Snappy GmbH
Gotthardstrasse 55
8800 Thalwil
Switzerland

For questions about data protection, contact us at info@omnisnap.ch.

This policy follows the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

We process only the data we need for the purpose in question, and only for as long as we need it.

• Server logs: When you open omnisnap.ch, our hosting infrastructure (Google Cloud, Zurich region) processes technically necessary details such as IP address, time, page requested and browser type. We use them only for operations, security and troubleshooting.
• No cookies, no tracking: We use neither analytics nor advertising cookies and no tracking services.
• Local storage: Your browser remembers your language choice and, when you sign in, your session. This stays on your device.
• Fonts: We load the website's fonts from Google Fonts. Your browser transmits your IP address to Google when doing so.

When you e-mail us, get in touch through a prototype report or request a module, we process your name, e-mail address, phone number if given and your message in order to answer your request. Requests from prototype reports are forwarded by e-mail to the responsible contact person and recorded in our customer management system.

If you apply for Omnisnap Startups, we also process the details about your startup, your idea and the support you need, in order to review the application. If your startup is not selected, we delete the application on request at any time.

For prototype reports we research companies from publicly available sources: their website, the commercial register (Zefix), Google Maps listings, public figures on online visibility and public professional profiles. This can include the names and roles of people who publicly represent a company.

We use this information only to show the company a fitting prototype. Reports can only be reached through a personal link. You can object at any time; we then delete the report and the information immediately.

For customers we process:

• Account: name, e-mail address, mobile number, company, role and language setting. Sign-in uses one-time codes by SMS or e-mail.
• Tickets: your requests as text, documents or voice notes. Voice notes are converted to text; we do not store the audio.
• Offers and contracts: the details given when accepting an offer or SLA, such as name, e-mail address, role and invoice address.
• Notifications: e-mails and, if you wish, SMS about questions and completed tickets.
• News: contact persons of our customers occasionally receive news about Omnisnap by e-mail. You can unsubscribe at any time with one click.

The data in the applications we run for you is processed by us as a processor solely on your instructions; the SLA sets out the details.

We use AI to understand requests, recognise documents, summarise and translate texts and support development. For this we use Google Vertex AI (Gemini) and Anthropic (Claude) under their enterprise terms.

Your data is not used to train AI models. Only the content needed for the task in question is transmitted. A person reviews every change to customer software before it goes live.

We work with carefully selected service providers who process data only on our behalf and for the purpose stated:

• Google Cloud (Google LLC / Google Ireland Ltd.): hosting, storage and AI; hosting and storage in the Zurich region
• MongoDB Atlas (MongoDB Inc.): database, hosted in Zurich
• GitHub (GitHub Inc.): source code management and builds
• Anthropic (Anthropic PBC): AI-assisted ticket analysis and development
• Twilio SendGrid (Twilio Inc.): sending e-mails and SMS
• Slack (Slack Technologies): internal notifications to our team about new tickets
• Infomaniak (Infomaniak Network SA, Switzerland): DNS
• For prototype reports: Perplexity, Firecrawl and DataForSEO (public web and search data)

We disclose data to authorities only where the law requires us to.

Some of these providers are based in the USA or the EU and may process data there. We disclose data only to countries with adequate data protection or agree the safeguards the revFADP requires, in particular the European Commission's standard contractual clauses or certification under the Swiss-U.S. Data Privacy Framework.

We keep personal data for as long as the purpose requires, and beyond that where statutory retention duties apply, in particular 10 years for business records. Server logs are deleted automatically after a short time. After the contract ends and the handover is complete, we delete the data of your applications and confirm the deletion.

We protect your data with technical and organisational measures: encryption at rest and in transit, hosting on certified infrastructure in Zurich, access only for named people with multi-factor sign-in, and regular backups. The details for customers are in the SLA.

You have the right to:

• access the data we process about you,
• correction of inaccurate data,
• deletion or restriction of processing,
• receive your data in a common electronic format,
• object to processing, for example for prototype reports or news.

Write to us at info@omnisnap.ch; we answer within 30 days. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC) and, if you live in the EU, to your competent supervisory authority.

We update this privacy policy when our processing changes. The version published on omnisnap.ch applies.