Privacy
Privacy notice. Plain language.
We collect the minimum we need to answer you, support customers, and keep this site running. No third-party trackers, no marketing pipeline, no data sale.
Last updated · 2026-05-02
Who we are
FruitfulAI AG is the data controller for this website and any data you share with us through it.
- Legal name
- FruitfulAI AG
- Address
- Schlieren · Zürich · Switzerland
- Reg. ID
- CHE-281.217.113 MWST
- info@fruitful.ch
What we collect
When you fill the contact form on /contact: your name, work email, company, role (optional), phone (optional), the topic you picked, and the message you write — plus your GDPR consent record and (if you ticked the box) your consent to be contacted again. We need these to come back to you and to record that consent.
When you email us directly: the contents of your email — sender address, subject, body, attachments.
Server logs: our hosting provider records IP addresses and request metadata for short-term operational reasons (security, debugging). We don't log this anywhere ourselves and we don't use it to track you.
Cookies and similar technologies:
- Consent state — one local-storage entry (
ff-cookie-consent) recording whether you accepted or rejected the cookie banner. Strictly necessary; no opt-out. - Google reCAPTCHA — loaded on
/contactonly, to block spam submissions. Sets cookies on thegoogle.comdomain and assigns a risk score to your interaction. Used solely for spam protection — not for advertising or analytics. Subject to Google'sprivacy policy and terms. - Google Analytics 4 — loaded site-wideonly after you accept the cookie banner. Sets analytics cookies and records aggregated usage (pageviews, referrers, anonymized IP). Used to understand which content is useful, never to identify you personally. You can opt out by clicking "Reject analytics" on the banner — analytics will not load. If
NEXT_PUBLIC_GA_IDis not configured on the deploy, no analytics is loaded at all. - No advertising cookies, no remarketing, no fingerprinting, no third-party trackers beyond the two above.
Why we collect it
- To answer you. Form messages and emails go into our customer-relationship system (Odoo) so we can respond and follow up.
- To deliver and support our products. If you become a customer, we keep records of contracts, invoices, and support exchanges as required for the business relationship.
- To keep this site running. Operational logs help us debug and stay secure.
We do not profile you, build advertising audiences, or sell your data.
Legal bases (GDPR)
- Consent (Art. 6(1)(a)) — for storing your contact form submission, for the optional "contact me again" preference, and for loading Google Analytics. You can withdraw consent at any time (see section 08).
- Pre-contractual measures and contract (Art. 6(1)(b)) — when you contact us about a possible engagement, or when you're a customer.
- Legitimate interests (Art. 6(1)(f)) — to operate the website, prevent abuse (Google reCAPTCHA on the contact form), and keep records of business correspondence.
- Legal obligations (Art. 6(1)(c)) — to keep accounting and tax records as required by Swiss law.
Who sees your data
Inside Fruitful AI, only people who need to (sales, engineering, support). Outside, the providers we use to run the site and the company:
- Vercel — hosts this website. Receives incoming HTTP requests and the contents of forms you submit (which we then forward to our CRM).
- Resend — sends the lead email and your auto-confirmation. Hosted in the EU (eu-west-1, Ireland).
- Odoo — our customer-relationship system. Stores leads, customer records, and the messages you send through the form or by email.
- Email provider — handles inbound and outbound mail to
@fruitful.chaddresses. - Google — receives reCAPTCHA interactions (spam protection on the contact form, always-on) and, if you accept the cookie banner, Google Analytics 4 traffic. Google may transfer this data to the United States; standard contractual clauses apply.
We don't transfer your data to anyone else for marketing purposes. If we ever add a new sub-processor, we'll update this page first.
Where your data is stored
Most processing happens in Switzerland and the European Economic Area. Email delivery (Resend) is hosted in Ireland (eu-west-1). Our hosting provider (Vercel) and Google's services are US companies and may process traffic on infrastructure outside the EEA; standard contractual clauses are in place for those transfers.
How long we keep it
- Form messages and emails: as long as the relationship is active, plus a reasonable cooldown for follow-up.
- Customer records: for the duration of the contract plus statutory retention.
- Server logs: short-term (typically 30 days), as kept by our hosting provider.
- Accounting documents: 10 years (Swiss Code of Obligations, art. 958f).
You can ask us to delete your data earlier — see your rights below.
Your rights
Under Swiss revFADP and the EU GDPR (whichever applies to you), you can ask us to:
- Confirm what data we hold about you, and give you a copy.
- Correct anything wrong.
- Delete it (if there's no legal reason for us to keep it).
- Restrict or object to specific processing.
- Receive your data in a portable format.
To exercise any of these, email info@fruitful.ch. We answer within 30 days.
You also have the right to complain to a supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your local data-protection authority.
Changes to this notice
If we change how we handle your data, we'll update this page and bump the date at the top. For substantial changes, we'll do our best to let you know directly.
Get in touch
For privacy questions or to exercise your rights, write to info@fruitful.ch.
You can read this notice in plain English here. If you'd prefer it in another language, ask and we'll send a translation.