This statement covers ALVIREQ: the website alvireq.ch and the ALVIREQ instances under alvireq.app that we run for our customers. For the website halvic.ch, halvic.ch's privacy statement applies.
Who we are
Halvic Labs GmbH, Nünenenweg 45, 3123 Belp, Switzerland, hello@halvic.ch. Send questions about data protection to this address.
Two roles
- Processor: What is stored and processed in an instance (conversations, files, memories, connected accounts, bank statements) belongs to our customer. The customer is responsible for it, and we process it only under the data processing agreement. If you use ALVIREQ at your employer, their privacy notice applies to this data; your instance's sign-in page links it when one is set.
- Controller: We are responsible ourselves for the data of our customers as contract partners (contacts, invoices, support) and for this website.
This website
alvireq.ch consists of static pages. It sets no cookies, uses no analytics or advertising services and loads nothing from other servers. The web server logs technically necessary details (IP address, time, page requested, browser) to keep the site running and fend off attacks, and deletes them after a short time.
Data in an instance
Every customer gets their own instance with its own database, run in Switzerland (see subprocessors). In it we process:
- Accounts: username, display name, email address, role, password (as a hash only), sign-in times, preferences.
- Content: messages, replies, uploaded files, memories, knowledge collections, scheduled tasks, imported bank statements and anything else people enter or retrieve in the instance.
- Connected accounts: credentials for services a person connects themselves, stored encrypted.
- Logs: an audit log of tool calls, approvals, sign-ins and administrative changes, and technical logs for operation.
- Usage: the number and cost of model calls per person, for billing and limits.
AI models
To produce answers, an instance sends a conversation's content (the message, its history, relevant files and memories) to the AI model of its plan:
- Standard: open models from Infomaniak AI Services, processed in Switzerland.
- Claude: models from Anthropic, processed in the USA or worldwide. Data then leaves Switzerland. Under its terms, Anthropic doesn't train on data from its API and keeps it only for a limited time, for example to detect abuse.
- Own key: our customer's own model account, under their contract with the provider.
- Dedicated GPU: a model server of their own in Switzerland.
Helper tasks such as titling conversations or recognising memories use the same provider as the conversation. ALVIREQ doesn't train models on your data.
Disclosure abroad
For instances with a Claude plan, we disclose personal data to Anthropic in the USA. We rely on appropriate safeguards, namely standard contractual clauses or, where applicable, the Swiss-U.S. Data Privacy Framework. Card payments are handled by Stripe, also in the USA. All other data stays in Switzerland.
Contract partners and invoices
For contracts, invoices and support we process the names and contact details of contact persons, company details, booked plans, usage and payments. We keep accounting records for ten years, as the law requires.
Retention and deletion
Content in an instance stays stored until the person or the administrators delete it or the contract ends. After the contract ends, our customers can export their data for 30 days; then we delete the instance. Backups are overwritten in their regular cycle.
Security
How we separate and protect instances is described in our security overview.
Your rights
You can ask for access to your data, its correction or deletion, restriction of processing and a copy in a common format, and you can object to processing. For data in an instance, contact the organisation that gave you access first; we help them. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC), and in the EU to your country's supervisory authority.
Changes
We update this statement when ALVIREQ or the law changes. The version published here applies. The German version of this page is binding.