Lobby AG Privacy Policy

Effective Date: 6 May 2025

Lobby AG ("Lobby", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit lobbyai.io (the "Website"), use our software‑as‑a‑service (SaaS) platform, or interact with any related content, products, or services (collectively, the "Services").

1. Who We Are

Company: Lobby AG
Address: Stauffacherstrasse 179, 8004 Zurich, Switzerland
Email: info@lobbyai.io
Phone: +41 76 397 1337

Under the Swiss Federal Act on Data Protection ("FADP") and the EU General Data Protection Regulation ("GDPR"), Lobby is generally the controller of personal data processed in connection with the Services unless stated otherwise.

2. Personal Data We Collect

  • Account & Contact Data: Name, email address, company name, billing details
  • Usage Data: Log files, IP address, browser type/version, pages visited, time spent, interactions
  • Content Data: Files, messages, or other information you upload or generate
  • Support Data: Chat transcripts, emails, feedback forms
  • Cookies & Similar Technologies: Session ID, language preference, analytics identifiers (see Section 7)

We do not intentionally collect sensitive personal data unless you choose to provide it.

3. How and Why We Use Personal Data (Legal Bases)

  • Provide, operate, and maintain the Services – Performance of a contract
  • Improve and develop new features – Legitimate interest
  • Communicate with you – Contract / Legitimate interest
  • Billing and invoicing – Legal obligation / Contract
  • Detect and prevent fraud – Legitimate interest / Legal obligation
  • Marketing (optional) – Consent

*For users outside the EEA/UK/CH, local laws may apply; we rely on equivalent legal bases under such laws.

4. Sharing and Disclosure

We do not sell your personal data. We share it only as described:

  • Amazon Web Services (AWS): Sub-processor for cloud infrastructure hosting (primarily in Switzerland)
  • OpenAI, L.L.C.: AI-powered reservation automation or related functionality (US-based servers; data not used for model training)
  • Professional advisors: Independent controllers for compliance, legal or tax advice
  • Authorities or courts: Independent controllers where required by law or to protect our rights

All vendors are bound by contracts that impose data-protection obligations no less protective than this Policy and applicable law.

5. International Transfers

Our primary servers are located in Switzerland, but some personal data may be transferred to countries outside Switzerland, the EEA, or the UK (e.g., the United States). We rely on:

  • Adequacy decisions
  • Standard Contractual Clauses

You can request a copy of the relevant transfer mechanism at any time.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy or as required by law. Closing your account triggers deletion or anonymization within 30 days unless legal obligations require longer retention.

7. Cookies and Similar Technologies

We use cookies and comparable technologies to maintain session state and security, remember preferences (e.g., language), and perform analytics. Essential cookies are required and cannot be disabled via the banner. You can control others via browser settings.

8. Security Measures

  • Encryption in transit (TLS 1.2+) and at rest
  • Role-based access controls and MFA for internal systems
  • Regular security audits and penetration testing
  • Continuous monitoring and logging

9. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (effects are prospective)
  • Lodge a complaint with your local supervisory authority

In Switzerland, this is the FDPIC. To exercise rights, email info@lobbyai.io.

10. Children’s Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will take appropriate steps to delete such data.

11. Changes to This Policy

We may update this Privacy Policy. Changes will be posted here, and material changes will be notified via email or the Service. The "Effective Date" above indicates the last revision.

12. Contact Us

Lobby AG
Stauffacherstrasse 179, 8004 Zurich, Switzerland
Email: info@lobbyai.io