Privacy notice

Controller and contact Patrick Hirschi, Mühlefeldstrasse 42, 4702 Oensingen, CH. Contact info@columbaverse.com about personal data. Accounts and content We process names, email addresses, password hashes, team assignments, permissions, language, settings and login times to operate Columbaverse. Access and security logs can contain IP addresses, timestamps, requested resources and browser details. Uploaded pigeon, breeder, ring, pedigree, image, document and race records may include information about other people. Only provide content you are entitled to use. An organisation may itself be responsible for the personal information in its team content; responsibilities should be agreed before business use. AI and results When you request an AI function, the selected questions, pedigree information and, where required, images or PDFs are sent to OpenAI. Home and Pedigree use separate server credentials. External results functions request the configured OLR, Benzing, RIRO or Eden sources using relevant race, ring and breeder references. These functions do not generally send the entire account to a results provider. AI output must be reviewed and does not make decisions with legal effects about you. Billing and service providers When payments are enabled, Stripe processes payment and billing details. We retain customer and subscription references, status, amounts and invoice references, not full card details. The external database is operated at Hostpoint. Application hosting: Infomaniak. Email provider: Hostpoint. Contact us for provider details not yet listed. We do not promise that all processing takes place in Switzerland. Purposes and legal grounds We use data to fulfil the contract, provide requested features, administer accounts, offer support, bill customers and protect the service. Where the GDPR applies, the relevant grounds are contractual necessity, legal obligations and legitimate interests in reliable operation and abuse prevention. Consent is used only for optional processing offered separately. Acknowledging this notice is not blanket consent. Recipients and international processing Authorised team members, necessary operations and support staff and providers involved in the requested feature can receive data. OpenAI and Stripe may process information outside Switzerland and the EEA, including in the United States. The countries, contracting entities and appropriate safeguards must be reviewed before each service is activated. You can request details of the arrangements currently used. Merely using Columbaverse is not treated as consent to international transfers. Retention and rights Account and business data are kept during use. After a contract ends, the planned export and reactivation period is 90 days. We then review deletion or anonymisation, taking account of legal duties and unresolved claims. Accounting records are kept separately for applicable statutory periods. Logs and backups require separate operational retention periods; contact us for details. We do not promise immediate erasure from every backup. Subject to applicable law, you can request access, correction, erasure, restriction or portability and object to certain processing. Consent can be withdrawn prospectively. Legal retention duties may limit erasure. You may complain to the Swiss FDPIC or a competent European authority. We may request proportionate proof of identity. Necessary account data are required to provide the service. See the cookie notice for session and preference storage. This notice is versioned and material changes are communicated in the context of the affected service.