Privacy Policy

1. Data Controller

Yoan Gilliand, individual entrepreneur domiciled in Switzerland, is the data controller for TypstMe in accordance with the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR). Contact: support@typstme.ch

2. Scope

This policy applies to the TypstMe service accessible via https://typstme.ch and covers the processing of personal data of users in Switzerland and the European Economic Area.

3. Personal Data Collected

We collect and process the following categories of data:

• •Identification data: email address (provided during account creation via Supabase Auth). Legal basis: contract performance.
• •CV content: all information entered in the editor (name, experience, skills, etc.). Storage: securely stored on our servers (Supabase) to enable synchronization across devices and cached locally. Legal basis: contract performance.
• •Payment data: billing and payment information processed exclusively by Stripe Switzerland GmbH (PCI-DSS certified). We never store your banking details. Legal basis: contract performance.
• •Technical data: IP address, browser type, operating system, connection timestamps. Purpose: security, fraud prevention, service improvement. Legal basis: legitimate interest (Art. 6 FADP).
• •Usage data: editor interactions, features used, anonymized analytics. Legal basis: legitimate interest.
• •Profile image: if you add a photo to your CV, it is stored on our Supabase servers (hosted in Europe). Legal basis: contract performance.

4. Processing Purposes

Your data is processed for the following purposes:

• •Service provision: CV creation, modification, and export. Content is stored on our servers and cached locally. (Art. 6(1)(b) GDPR / Art. 6 FADP - contract performance)
• •Authentication management: account creation and maintenance
• •Payment processing: Pro Pack purchase via Stripe (one-time CHF 14.99)
• •Image storage: preservation of your profile photos on our servers to enable display in your CVs
• •Service improvement: anonymized statistical analysis (Vercel Analytics), bug fixes, optimizations (Art. 6(1)(f) GDPR - legitimate interest)
• •Customer support: assistance requests
• •Security: fraud prevention, abuse protection
• •Legal obligations: compliance with Swiss and European requirements

We do not carry out any profiling or automated decision-making within the meaning of Art. 22 GDPR.

5. Data Location and Retention

Location: Your data is distributed as follows:

• •Supabase database (AWS Europe - eu-west-1): user accounts, CV content, and profile images. Supabase only accesses hosted data to the extent strictly necessary for service maintenance.
• •Server-side storage: Your CV content is synchronized and stored on our secure servers. Your browser only retains data during your active session.
• •Payments: Stripe Switzerland GmbH (Switzerland, PCI-DSS Level 1 certified). Stripe may transfer certain data to the United States as part of its operations, in accordance with Standard Contractual Clauses (SCC).

Retention periods:

• •Active account: as long as your account exists
• •Inactive account: automatic deletion after 3 years of inactivity (with email notice). This period is justified by typical user behavior of returning to modify their CV several months or years later.
• •CV content: retained as long as your account is active to ensure availability across your devices.
• •Payment data: retained by Stripe per Swiss accounting obligations
• •Technical logs: 90 days maximum

Security measures: TLS encryption in transit, AES-256 encryption at rest for images, daily backups, secure authentication.

6. Data Recipients

We never sell or rent your personal data. Your data may only be shared with:

• •Stripe Switzerland GmbH (Zurich): secure payment processing (FADP/GDPR compliant data processing agreement)
• •Supabase Inc. (USA) with EU hosting: authentication and database (Standard Contractual Clauses - SCC)
• •Competent authorities: only upon court order or Swiss legal obligation
• •No transmission for advertising or marketing purposes

International transfers: all data is hosted in the EU. For US providers (Supabase), appropriate safeguards (SCC) are in place per Art. 16 FADP.

7. Your Rights (FADP / GDPR)

Under Swiss FADP and GDPR, you have the following rights:

• •Right of access (Art. 25 FADP / Art. 15 GDPR): obtain a copy of all your personal data
• •Right to rectification (Art. 32 FADP / Art. 16 GDPR): correct inaccurate data
• •Right to erasure (Art. 32 FADP / Art. 17 GDPR): request deletion of your data (except legal obligations)
• •Right to data portability (Art. 28 FADP / Art. 20 GDPR): receive your data in a structured format (JSON, PDF)
• •Right to object (Art. 30 FADP / Art. 21 GDPR): object to processing for legitimate reasons
• •Right to restriction (Art. 32 FADP / Art. 18 GDPR): request processing limitation
• •Right to lodge a complaint: file with the Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority

To exercise your rights: contact support@typstme.ch. We respond within 30 days.

8. Cookies and Similar Technologies

TypstMe only uses essential technical cookies:

• •Authentication cookies: Supabase session management (duration: session)
• •No persistent local storage: Data is not saved locally after the tab is closed.
• •Analytics: Vercel Analytics (privacy-friendly, cookie-free) is used to improve the service.

Legal basis: these cookies are strictly necessary for service operation (Art. 6(1)(b) GDPR - no consent required).

9. Policy Modifications

We reserve the right to modify this privacy policy. For substantial changes, we will notify you by email (registered address) 30 days before implementation. The current version is always available at https://typstme.ch/privacy-policy.

10. Applicable Law and Jurisdiction

This policy is governed by Swiss law. In case of dispute, the parties will endeavor to find an amicable solution. Failing that, the jurisdiction of the courts of the data controller's domicile canton applies, subject to mandatory consumer protection provisions.

11. Contact

For any questions regarding the protection of your personal data or to exercise your rights, contact us at: support@typstme.ch