Privacy Policy

1. Introduction

AIsance ("the Service") is operated by Dizaine Sàrl, based in Veyrier (GE) ("we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service. We are committed to handling your data responsibly and in compliance with the Swiss Federal Act on Data Protection (FADP) and, for people located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR).

2. Data We Collect

We collect the following categories of personal data:

• Account information: Your email address and, if you set one, your password (stored hashed, never in plain text).
• Assessment responses: The full transcript of your conversation during the AI fluency assessment, including your questions, answers, and the AI facilitator's messages.
• Assessment results: Scores, grader analysis, and personalized roadmaps generated from your assessment.
• Payment information: Stripe processes your payment details directly; we pass it your email address and an internal account identifier (and team identifier for a team purchase). We only keep a session and payment reference, the amount and the currency. We never see or store your card number.
• Usage data: Basic analytics (page views, device type, browser) collected via Vercel Analytics to improve the Service, unless you decline usage analytics in the privacy banner.
• Team data: If you create or join a team, its name, its members and their roles, and the email addresses of invited people.
• Contact messages: The name, email address, company, team size and message you enter in our contact forms, forwarded by email to hello@dizaine.ch.

3. How We Use Your Data

We use your personal data to:

• Provide and operate the assessment service
• Process your conversation through AI (Anthropic Claude) to generate scores and recommendations
• Process payments and manage your credit balance
• Store your assessment history so you can review past results
• Communicate with you about your account, including transactional emails
• Improve the Service through aggregated, anonymized usage analytics

4. Third-Party Processors

We share data with the following third-party services, each acting as a data processor on our behalf:

• Supabase (database and authentication) — stores your account, assessment data, and conversation drafts. Data is hosted in cloud infrastructure with encryption at rest and in transit.
• Anthropic (AI processing) — your assessment conversation is sent to the Anthropic API to facilitate the assessment and generate scores. Anthropic does not use your data to train its models under our agreement.
• Stripe (payment processing) — handles credit card transactions securely. Stripe is PCI DSS Level 1 certified.
• Vercel (hosting and analytics) — hosts the application and collects anonymized usage analytics.
• Resend (email delivery) — sends transactional emails (sign-in links, address confirmation, team invitations) and contact-form messages.

5. Data Storage and Security

Your data is stored in Supabase-managed PostgreSQL databases with Row Level Security (RLS) enabled: each user can only access their own data. Exception: an assessment taken within a team can be viewed by that team's owners and admins (results and transcript), while you remain a member of the team. All connections use TLS encryption. Passwords are hashed using industry-standard algorithms. We keep your data, including your assessment history, until your account is deleted or you ask us to delete it.

6. Cookies and Local Storage

The Service uses essential cookies for authentication (session tokens managed by Supabase Auth) and, where needed, a session cookie remembering your language (NEXT_LOCALE). Your theme preference (light/dark) and your choice on the privacy banner are kept in your browser's local storage (localStorage) and never sent to our servers. We do not use advertising or tracking cookies. Vercel Analytics measures usage without cookies; it is on by default and stops as soon as you decline it in the privacy banner (it is then no longer loaded on your visits). To change your choice, clear this site's data in your browser: the banner will show again.

7. Your Rights

Under the FADP and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete personal data
• Delete your personal data ("right to be forgotten")
• Export your data in a portable format
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at hello@dizaine.ch. We will respond within 30 days.

8. Data Transfers

Your data may be transferred to and processed in countries outside Switzerland and the European Economic Area (EEA), including the United States, where our third-party processors operate. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses where applicable.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the email address associated with your account or by a prominent notice on the Service. The "Last updated" date at the top of this page reflects the most recent revision.