Privacy notice — AFLUYO

1. Data controller

AFLUYO is a service by Francesco Bernardinelli, sole proprietor, Ruelle du Midi, 1950 Sion (VS), Switzerland.

Contacts: hello@afluyo.com (general enquiries) · support@afluyo.com (support).

2. Which data we collect

• Sign-up: email address (for magic-link access).
• Business: business name, category, city/zone (with geographic coordinates obtained by geocoding the city), preferred language.
• Catalog: menu or price-list items (name, description, price, cost) entered by you or extracted from photos you upload.
• Images: photos you upload (business profile, post photos, menu/price-list photos).
• Generated content: posts and review replies created with the Service.
• Subscription: subscription status and period. Payment data (card, billing) is handled by Creem (see §4) and does not transit through us nor is it stored by us.
• Essential technical data: authentication and language cookies.

3. Why we process them (purposes and legal bases)

• Providing the Service (account, post/reply generation, margin analysis): performance of contract.
• Sending sign-in links and service communications: performance of contract.
• Security and abuse prevention: legitimate interest.
• Legal obligations (accounting/tax, where applicable): legal obligation.

4. Payments — Merchant of Record

Payments and subscription billing are handled by Creem (creem.io), acting as *Merchant of Record*: Creem sells the subscription to the end user and manages invoices and taxes (VAT/GST). Card and billing data is processed directly by Creem under its privacy policy; AFLUYO neither receives nor stores card data.

5. Vendors that process data

We rely on trusted vendors (processors or independent controllers, depending on the case):

• Supabase — database, authentication, image storage.
• Vercel — application hosting.
• Anthropic (Claude) — AI generation of texts and analysis of the images you upload for posts; text and images are sent to Anthropic for processing.
• Resend — sending of transactional emails (sign-in links).
• Creem — payments and billing (see §4).
• Open-Meteo — weather data per zone (no personal data is sent, only zone coordinates).
• OpenStreetMap / Nominatim — geocoding of the city entered during setup.

6. Communication and international transfers

Some vendors (e.g. Anthropic, and potentially Vercel/Creem) may process data outside Switzerland and the EU/EEA. In such cases, transfers are made to countries providing an adequate level of protection or on the basis of recognised safeguards (e.g. Standard Contractual Clauses recognised by the FDPIC), pursuant to the nFADP.

7. How long we keep data

We retain data as long as your account is active. On account deletion, data is erased within a reasonable timeframe, subject to statutory retention obligations (e.g. accounting records). You can request erasure at any time (see §9).

8. Cookies

We only use necessary technical cookies: one for the login session and one to remember your language. We use no profiling or ad-tracking cookies, so no consent banner is required.

9. Your rights

Under the nFADP (and, for EU users, under the GDPR), you have the right to access your data, rectify it, erase it, object to processing and obtain its delivery or portability. To exercise these rights, write to support@afluyo.com.

You also have the right to contact the competent supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); for EU users, the supervisory authority of their country.

10. Changes

We may update this notice; changes will be published on this page along with the update date.

11. Contacts

Francesco Bernardinelli — Ruelle du Midi, 1950 Sion (VS), Switzerland — hello@afluyo.com · support@afluyo.com