Privacy Policy

1. Data controller and DPO contact

Exatoshi AG, Riva Paradiso 30, 6900 Paradiso, Switzerland (CHE-266.634.159), is the data controller for the Service. AutoSearch is a product of Exatoshi AG. Data protection requests can be sent to the DPO contact: privacy@autosearch.ch.

2. Data collected

• Account data: email, username, display_name, authentication and verification status.
• Usage data: prompts, uploaded-file metadata, run configuration, run results, audit events, and product settings needed to operate the workspace.
• Payments: Stripe customer reference, subscription tier, billing status, payment events, and billing information handled through Stripe.

3. Legal basis

Processing needed to create accounts, run research, manage payments, secure sessions, and provide support is based on contract execution under Article 6(1)(b) GDPR and Article 31 nLPD. Billing retention and security logging may also be required by legal obligations or legitimate operational interests.

4. Retention

• Uploaded files are automatically purged after 24 hours unless a separate customer agreement applies.
• Runs and associated results are retained for 90 days by default.
• Billing records are retained for 7 years where required by Swiss tax law.

5. Recipients and processors

AutoSearch uses limited processors for service delivery: Stripe Ireland for payments; MiniMax China for AI processing; Google for OAuth login; and aiagens-rag MCP for retrieval memory under the same data controller. Processors receive only the data needed for their task.

6. International transfers

Some AI processing may involve MiniMax in China. Where personal data is transferred internationally, AutoSearch relies on appropriate safeguards, including standard contractual clauses and transfer controls required by GDPR and nLPD.

7. User rights

Subject to applicable limits, users may request access, rectification, erasure, portability, restriction, objection, or information about processing. Requests should be sent to privacy@autosearch.ch.

8. Cookies

AutoSearch uses only essential technical cookies for secure session handling and product operation. It does not use analytics cookies or tracking cookies.

9. Children

The Service is not intended for children under 16. Users under 16 must not create an account or submit personal data.

10. Updates

AutoSearch may update this policy. Material changes are notified in-product or by email where appropriate, and the updated policy applies from the stated effective date.