Privacy Policy
This Privacy Policy explains how Boppart Digital, operating as AIXXII - The AI Marketplace, collects, uses, and protects your personal data. Version 2.1, effective October 22, 2025, applies globally to all users with particular attention to Swiss and European Economic Area regulations.
Table of contents
1. Introduction & Scope
1.1
This Privacy Policy governs how Boppart Digital ("AIXXII", "we")handles personal data across our entire platform ecosystem. When you access or use AIXXII - The AI Marketplace, including all related websites, applications, services, and integrations, this policy applies to your interactions and data processing activities.
1.2
Our commitment extends globally to all users, with enhanced protections for individuals located in Switzerland and the European Economic Area (EEA). We operate under the Swiss Federal Act on Data Protection (FADP) and the European Union's General Data Protection Regulation (GDPR), ensuring comprehensive data protection standards.
1.3 Controller Information
Boppart Digital – AIXXII The AI Marketplace
Bahnstrasse 23, 8603 Schwerzenbach, Switzerland
UID CHE-275.197.057
legal@aixxii.com
Bahnstrasse 23, 8603 Schwerzenbach, Switzerland
UID CHE-275.197.057
legal@aixxii.com
1.4 Legal Framework
Swiss FADP, EU GDPR, Global compliance
1.5 Category Classification
Zurich, Switzerland with EEA recognition
2. Categories of Personal Data We Collect
AIXXII collects and processes several categories of personal data to provide our services effectively while maintaining your privacy. Understanding what information we collect helps you make informed decisions about using yourplatform.
2.1
Account & Profile Data
Your name, email address, preferred language, subscription plan details, and securely hashed password for authentication and service personalization.
2.2
Billing Information
Payment tokens from Stripe and CoinPayments, transaction timestamps, and payment amounts. We do not store complete credit card numbers on our systems.
2.3
Usage Data
Learning progress tracking, search queries, AI prompts and generated outputs. This data is minimized and pseudonymized wherever technically feasible.
2.4
Technical Information
IP addresses, device and browser types, operating system details, cookies, session identifiers, and system logs for platform operation and security.
2.5
Communication Records
Support requests, partner communications, and affiliate messages to provide assistance and maintain business relationships.
3. Purposes of Processing Your Data
We process your personal data transparently and lawfully for specific, legitimate purposes that enable us to deliver exceptional service while respecting your privacy rights.
3.1
Platform Operations
Providing and operating the AIXXII marketplace platform and all related services, ensuring seamless functionality and user experience.
3.2
Subscription Management
Administering user subscriptions, processing payments securely, and managing billing cycles through trusted payment processors.
3.3
Quality & Analytics
Analyzing usage patterns to improve service quality,enhance security measures, and optimize platform performance for all users.
3.4
Fraud Prevention
Detecting fraudulent activity, preventing platform misuse, and ensuring compliance with legal and regulatory requirements.
3.5
Legal Obligations
Fulfilling statutory duties including tax reporting,accounting requirements, and regulatory compliance across jurisdictions.
3.6
User Communication
Communicating with users and partners regarding service updates, support matters, and business-related correspondence.
4. Legal Bases for Data Processing
Under the General Data Protection Regulation (GDPR), all data processing activities must have a valid legal basis. AIXXII processes your personal data according to one or more of the following lawful grounds established under Article 6 ofthe GDPR.
4.1 Contract Performance
Art. 6(1)(b) GDPR
Processing necessary for account creation, subscription management, payment processing, and service delivery under our user agreement.
4.2 Consent
Art. 6(1)(a) GDPR
Voluntary consent obtained for marketing communications, optional cookies, and other non-essential processing activities you approve.
4.3 Legitimate Interests
Art. 6(1)(f) GDPR
Processing based on AIXXII's legitimate business interests in security monitoring, analytics, fraud prevention, and service improvement.
4.4 Legal Obligation
Art. 6(1)(c) GDPR
Processing required to comply with record-keeping duties, tax regulations, financial reporting, and other regulatory obligations.
Each processing activity is carefully assessed to ensure it aligns with one of these legal bases, protecting both yourrights and our ability to provide quality services.
5. Cookies & Tracking Technologies
AIXXII uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.We respect your choices and provide transparent control over cookie preferences.
When you first visit our platform, you'll encountera cookie banner offering clear options to Accept,Reject, or Manage your cookie preferences. You can modify these settings at any time through your account preferences.
5.1
Essential Cookies
Required for platform functionality, authentication, and security. These cannot be disabled.
5.2
Functional Cookies
Enable enhanced features like language preferences and personalized settings.
5.3
Analytics Cookies
Help us understand usage patterns and improve service quality through aggregated data.
5.4
Marketing Cookies
Used for targeted advertising and measuring campaign effectiveness with your consent.
For comprehensive information about specific cookies,retention periods, and third-party integrations, please reviewour detailed Cookie Policy available on our legal documentation page.
6. Processors & Sub-Processors
AIXXII partners with trusted, GDPR-compliant service providers for hosting, payment, database, AI, and automation operations. All processors operate under strict Data Processing Agreements (DPAs) that ensure your data receives the same high level ofprotection, regardless of where processing occurs. We maintain full oversight and responsibility for all data processing activities.
6.1 Stripe Payments Europe Ltd.
Location: European Union
Purpose:Secure payment processing for subscriptions and transactions
6.2 Coin Payments Inc.
Location:Canada/EU
Purpose:Crypto currency payment gateway services
6.3 Webflow Inc.
Location:Canada/EU
Purpose:Website framework and content management
6.4 Airtable Inc.
Location:United States (SCCs)
Purpose:Database infrastructure and data organization
6.5 Open AI LLC
Location:United States (SCCs)
Purpose:AI API services with strict data minimization
6.6 Infomaniak Network SA
Location:Switzerland
Purpose:Swiss-based hosting infrastructure and data storage
6.7 n8n GmbH
Location:Germany/EU
Purpose:Workflow automation and integration orchestration
6.8 Celonis SE 3 Make
Location:European Union
Purpose:Integration automation and data synchronization
6.9 Wized LLC / Softr Inc.
Location:EU/US (SCCs)
Purpose:Frontend development and user authentication
6.10 Xano Inc.
Location:US/EU – SCC
Purpose:Backend API, authentication & data orchestration services.
Important: All processors operate strictly under AIXXII's instructions and contractual obligations. We neversell personal data to third parties. Standard Contractual Clauses (SCCs) ensure legal data transfers outsideSwitzerland and the EEA.
7. International Data Transfers & Security
Data transfers rely on Standard Contractual Clauses (SCCs) and additional safeguards approved by the European Commission and the Swiss Federal Council.
7.1 Cross-Border Data Transfers
When AIXXII transfers personal data outside Switzerland or the European Economic Area, we implement robust safeguards to maintain protection standards equivalent to those required under Swiss FADP and EU GDPR regulations.
7.1.1
Adequacy Decisions
Used for targeted advertising and measuring campaign effectiveness with your consent.
7.1.2
Standard Contractual Clauses
Legally binding agreements (SCCs) with additional technical and organizational safeguards where adequacy decisions do not exist.
7.1.3
Additional Safeguards
Supplementary measures including encryption, access controls, and regular audits to enhance protection during international transfers.
7.2 Security Measures
AIXXII implements state-of-the-art technical and organizational security measures as required under Article 32 GDPR and Article 8 FADP to protect your personal data against unauthorized access, loss, or misuse.
7.2.1
Encryption in Transit
TLS/SSL encryption for all data transmission across networks
7.2.2
Encryption at Rest
Advanced encryption for stored data on all servers and databases
7.2.3
Access Controls
Role-based permissions and multi-factor authentication
7.2.4
Geo-Redundant Backups
Regular automated backups stored in multiple secure locations
7.2.5
Audit Logs
Comprehensive logging and monitoring of system access
7.2.6
Regular Testing
Ongoing security assessments and penetration testing
8.Data Retention & AI Processing
AIXXII retains personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws and regulations. We apply a principle of data minimization and regularly review retention needs.
Active user accounts maintain data for the duration of the business relationship. Inactive accounts showing no login activity may be subject to deletion after 24 months of continuous inactivity. We provide advance notice before any such deletion occurs, giving you an opportunity to reactivate your account if desired.
Certain data must be retained longer to meet legal obligations, such as tax records (typically 10 years in Switzerland) and financial transaction documentation. Once the retention period expires, data is securely deleted or anonymized beyond recognition.
8.1 AI Data Processing
When you interact with AI features on the AIXXII platform, your prompts and AI-generated outputs may be temporarily processed to ensure quality control, improve performance, and enhance the AI models under strict data minimization principles.
Important Notice: Users should not enter special categories of personal data (sensitive information such as health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data) into AI prompts.
8.1.1
Processing Safeguards
·Temporary processing only
·Data minimization applied
·Pseudonymization where possible
·Secure API connections
·Limited access controls
9. Your Data Protection Rights
Under Articles 15321 of the GDPR and Articles 25 and following of the Swiss FADP, you possess comprehensive rights regarding your personal data. AIXXII is committed to facilitating the exercise of these rights promptly and transparently.
Right of Access
Request confirmation of what personal data we process about you and obtain a copy of that information.
Right to Rectification
Request correction of inaccurate personal data orcompletion of incomplete information in your profile.
Right to Erasure
Request deletion of your personal data when it's no longer necessary or when you withdraw consent.
Right to Restriction
Request limitation of processing in specific circumstances while disputes are resolved.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes at any time.
Data Portability
Receive your personal datain a structured, commonly used format and transmit it to another controller.
9.1 How to Exercise YourRights
Contact us at legal@aixxii.com to submit any data protection request. We may verify your identity before processing requests to protect your privacy.
9.2 Withdraw Consent
You can withdraw previously given consent at any time. Withdrawal has future effect and doesn't affect the lawfulness of past processing.
9.3 Lodge a Complaint
File complaints with the Swiss Federal Data Protection and Information Commissioner (FDPIC)or your local EU supervisory authority.
10. Children's Privacy
AIXXII is not intended for use by children under 16 years of age without verifiable parental consent. If we identify that we have inadvertently collected data from a minor, we will delete that information promptly upon discovery. If AIXXII later introduces educational content for minors, additional parental consent procedures will apply.
11. Policy Updates
We may revise this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. The current version is always available at www.aixxii.com/legal/privacy-policy. Continued use of the platform after an update constitutes your acceptance of the revised policy.
12. Contact Information
For any privacy, data protection matters, or questions about this policy:
Address
Boppart Digital - AIXXII The AI Marketplace, Bahnstrasse 23, 8603 Schwerzenbach, Switzerland
Email
Last Updated: October 2025 | Version 1.0
Follow Us
English