Privacy Policy
Last updated: 7 April 2026
1. Data Controller
PAY FIEDE CLAUSEN AG
Baarerstrasse 43
CH-6300 Zug, Switzerland
CHE-264.545.852
Contact: payfiede@pfc.ag
2. Data We Collect
- Account data: email address, collected at registration via Supabase Auth
- Search queries: addresses, cadastral references and search parameters you enter
- Uploaded documents: files you submit for parsing (e.g. Nota Simple PDFs)
- Payment data: processed by Stripe. We do not store card details on our servers
- Usage analytics: page views and feature usage for service improvement
3. Third-Party Personal Data in Documents
Documents you upload (such as Nota Simple PDFs) may contain personal data of property owners, including names and NIFs (tax identification numbers). This data is processed solely for the purpose of property intelligence analysis. It is stored securely and is not shared with third parties beyond the processors listed in Section 6.
4. Legal Basis for Processing
- Contract performance (Art. 6(1)(b) GDPR): processing necessary to deliver the services you have purchased or requested
- Legitimate interest (Art. 6(1)(f) GDPR): service improvement, security monitoring and fraud prevention
Under the Swiss new Federal Act on Data Protection (nFADP), processing is based on the same principles of proportionality and purpose limitation.
5. Data Retention
- Account data: retained while your account remains active, deleted within 30 days of account deletion
- Uploaded documents: retained for 2 years after upload, then automatically deleted
- Search logs: retained for 1 year, then automatically deleted
- Payment records: retained as required by Swiss commercial law (10 years)
6. Data Processors and Sub-Processors
| Processor | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication | EU (eu-west-3) |
| Anthropic | AI document processing | US (SCCs apply) |
| Stripe | Payment processing | EU/US |
| Vercel | Hosting, edge network | US (SCCs apply) |
7. International Data Transfers
Where data is transferred to processors outside the EU/EEA (Anthropic, Vercel), appropriate safeguards are in place through Standard Contractual Clauses (SCCs) as approved by the European Commission. Transfers to the US are also covered under the Swiss-US Data Privacy Framework where applicable.
8. Your Rights
Under GDPR and the nFADP, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (right to be forgotten)
- Port your data to another service
- Object to processing based on legitimate interest
- Restrict processing in certain circumstances
To exercise any of these rights, contact payfiede@pfc.ag. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority (FDPIC in Switzerland or your local EU data protection authority).
9. Cookies
GEORAY uses session cookies only, required for authentication (Supabase Auth). We do not use tracking cookies, advertising cookies or third-party analytics cookies. Session cookies are exempt from consent requirements under the ePrivacy Directive as they are strictly necessary for the service to function.
10. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.
11. Contact
PAY FIEDE CLAUSEN AG
Baarerstrasse 43
CH-6300 Zug, Switzerland
payfiede@pfc.ag