Privacy Policy

Your data remains your data. planix is built so that customer data is processed in a protected, controlled and traceable way – in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR. The details are set out in sections 1 to 15.

• Stored in Switzerland. planix runs in Microsoft data centres in Switzerland (Zurich region). Databases, documents and logs are kept in Switzerland.
• Personal data stays with planix. Names, e-mail addresses and other known personal data are replaced by placeholders before every AI request. The AI provider never sees them. The finished document shows the real details again.
• Only approved AI providers. Your data only goes to providers with adequate data protection – in Switzerland, in the EU or certified under the Swiss-U.S. Data Privacy Framework. Sensitive data stays in Switzerland. planix enforces these rules automatically on every single call. The current providers are listed in section 7.
• No training with your data. Your content is not used to train AI models. This is set out in our Terms of Service and agreed with the AI providers by contract.
• Fully traceable. For every AI call, planix records which provider was used, in which country and under which rule. Information under Art. 25 FADP is therefore available at any time. Changes to settings are logged with person and time.
• Access only if you want it. planix staff see your project content only if you expressly request it, for example for a review by experts. Every project is sealed: data never flows into other projects or to other customers.
• Secure from the start. All connections are encrypted, access keys are stored encrypted and never appear in any log. Administration is protected by two-factor authentication.
• Only as long as necessary. Technical logs are deleted automatically after 30 days. On request, planix deletes your data, including at the AI services.
• AI clearly labelled. In line with the EU AI Act (Art. 50): a notice in the workspace shows that answers come from an AI. Generated documents (Word, Excel, PowerPoint, PDF, web) are labelled as AI-generated in machine-readable form.
• Clear rules per country. planix knows the data protection law of every country you work in and applies the matching rules automatically. Swiss law applies to projects in Switzerland.
• Your consent documented. Consents to data protection and terms of use are recorded with version and time – verifiable for you and for us.
• Backed up and recoverable. All data is backed up automatically. Recovery is tested so that your work is preserved even in an emergency.

This privacy policy explains how planix (“we”) processes the personal data of users (“you”) in connection with the use of our SaaS platform and our services. It applies to all websites, applications and services operated by planix.

The party responsible for the operation of planix and for the processing of data is:

Bineo Systems GmbH
Stauberbergstrasse 15
8610 Uster

If you have any questions regarding data protection, you may contact us at any time at the address stated above.

“Personal data” means all information relating to an identified or identifiable person. “Processing” covers any handling of personal data, irrespective of the means and procedures applied (e.g. obtaining, storing, using, disclosing, erasing).

We collect and process in particular:

• Registration and contact data (name, e-mail, password)
• Payment information (e.g. billing address, payment service provider)
• Usage data of our platform (log data, IP address, device information)
• Support and communication content
• Marketing preferences (newsletter, events, etc.)

We use personal data for:

• Provision, operation and improvement of our SaaS platform
• Performance of the contract and invoicing
• Customer service and support
• Dispatch of information and marketing (provided that you have consented)
• Security and prevention of misuse
• Analysis of usage in order to optimise our services
• Processing of customer data by automated means, including artificial intelligence (AI), to provide the functions of our platform. Your data is not used to train AI models (see section 5a).

Your data is not used to train AI models. This applies to your entries (“inputs”) and the generated outputs (“outputs”) – neither for planix’s own models nor for the models of our providers.

Personal data stays with planix. Before every request to a language model we replace known personal data – names, e-mail addresses, phone numbers, addresses – with placeholders (pseudonymisation). The provider of the language model never sees these details; we reinsert the real details into the finished result.

We connect language models via the providers’ business interfaces (API). We only use offerings for which the providers contractually undertake not to use transmitted content for training. Beyond these contractual agreements, we have no influence on the processing by these providers; we are liable for their compliance only to the extent mandatorily required by law.

We evaluate usage data exclusively in anonymised or aggregated form in order to ensure the security, performance and quality of the platform and to compile statistics. No reference to a person remains.

Processing is carried out in accordance with the provisions of the Swiss Federal Act on Data Protection (FADP) and – where applicable – the General Data Protection Regulation of the EU (GDPR). planix applies the rules of the country in which your project is located.

We record consents – for example to cookies, to this privacy policy and to the terms of use – with version and time. This makes it verifiable for you and for us what you consented to and when.

We engage selected service providers as processors. They process personal data solely on our behalf and on the basis of a data processing agreement. For providers outside Switzerland and the EU/EEA, we base transfers on an adequacy decision, the Swiss-U.S. or EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses (see section 13).

Hosting and infrastructure

• Microsoft Azure – computing, databases, storage, logging (Switzerland; website delivery: Netherlands)
• Microsoft Azure Communication Services – sending system and notification emails (EU/EEA)
• Azure Notification Hubs – push notifications (Switzerland)
• Azure AI Speech – speech processing (Switzerland)

Payment and other services

• Stripe – payment processing (EU/USA)
• HubSpot – transfer of lead data to the CRM, only if the integration is enabled (EU/USA)
• Calendly – appointment scheduling, only if the integration is enabled (USA)
• Google (Directions API) – geodata queries (USA/EU)

AI language models

To generate texts and analyses, we transmit the content belonging to the respective request – pseudonymised, see section 5a – to providers of language models. Only providers with adequate data protection are approved: with a data processing agreement, without training on your data and located in Switzerland, in the EU/EEA or certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework. Sensitive data only goes to providers in Switzerland. planix enforces these rules automatically on every call. The currently approved providers:

We use cookies and comparable technologies in order to make our website more user-friendly, to analyse its use and to optimise advertising. You may adjust your preferences at any time in the cookie settings.

We store personal data only for as long as is necessary for the respective purposes or as long as statutory retention obligations exist. Thereafter the data is erased or anonymised.

Technical logs (server and application logs) are deleted automatically after 30 days. If you delete your account or request erasure, we remove your data from all storage locations – including files temporarily stored with the providers of the language models.

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction (e.g. encryption, access controls, backups).

All connections are encrypted. Access keys are stored encrypted and never appear in any log. planix administration is protected by two-factor authentication. All data is backed up automatically; recovery is tested.

You have the right to obtain information about the personal data we hold about you, to have it rectified or erased, to restrict or object to the processing and – where applicable – to receive your data in a portable format. If you withdraw a consent, this does not affect processing already carried out.

The information (Art. 25 FADP) also covers which AI providers were used for your projects, in which country and under which rule: planix logs this for every call. On request you receive your data as an export. We respond within 30 days.

planix does not carry out any profiling within the meaning of automated individual decisions that produce legal effects, unless we expressly inform you and obtain your consent.

Answers and content in the planix workspace are generated by an AI system. A notice in the workspace makes this clear before the first interaction (EU AI Act, Art. 50). Documents generated by planix – Word, Excel, PowerPoint, PDF and web view – are labelled as AI-generated in machine-readable form.

Some of the service providers listed in section 7 process data in the USA or in other countries outside Switzerland and the EU/EEA. We base such transfers on an adequacy decision (for certified providers the Swiss-U.S. or EU-U.S. Data Privacy Framework) or on suitable safeguards, in particular the European Commission’s standard contractual clauses. The platform’s core processing (databases, files, application services) takes place in Switzerland. We do not transfer sensitive personal data abroad; it is processed only by providers in Switzerland.

We may amend this privacy policy at any time. The version in force at any given time is published on our website.

For questions or concerns regarding data protection, please contact:

Bineo Systems GmbH
Stauberbergstrasse 15
8610 Uster

You have the right to lodge a complaint with the competent supervisory authority (in Switzerland: the Federal Data Protection and Information Commissioner, FDPIC).