Privacy Policy

Last updated 5 November 2026

This Privacy Policy explains how Ampersand Labs by Davide Morotti, Flüelastrasse 10, 8048 Zürich, Switzerland — UID CHE-497.974.362 ("we", "us") processes personal data in connection with Hoila (the "Service"), in line with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

We are responsible for the data of our customers and their team members (accounts, billing, use of the Service). For personal data on your websites and in your apps — for example messages that visitors send through a form — you are responsible, and we process that data on your behalf as a processor.

2. What we process

• Account data: name, e-mail, password (stored only as a hash), two-step sign-in secret (encrypted), teams and permissions.
• Website and app content: the files, texts, images and settings of the sites you connect, the conversations with the assistant, and the drafts and versions it creates.
• Connection credentials: hosting logins and API keys you give us. They are stored encrypted and are never shown to the AI.
• Form messages and app members of your hosted apps, on your behalf.
• Billing data: plan, usage, invoices; card details are handled by our payment provider, not by us.
• Technical data: IP address, browser, times of access, error logs — for security and operation.
• Messages to us through the contact form or by e-mail.
• Change requests by e-mail or WhatsApp: your mobile number (if you link it), the messages, photos and voice messages you send.
• Sender verification: extra e-mail addresses and mobile numbers you add for change requests, and the one-time codes we send by e-mail or text message to confirm them.
• Ownership confirmation: when you copy a website, the e-mail address of that website you choose, to which we send a confirmation link.
• Abuse reports: what the reporter writes, the website concerned, the reporter's e-mail address if they give one (optional), and a hash of their IP address to limit misuse — not the IP address itself.

3. Why

• To provide the Service you signed up for (contract).
• To keep it secure and prevent abuse (legitimate interest).
• To bill you and keep accounting records (contract and legal obligation).
• To answer your messages and tell you about important changes (contract and legitimate interest).

We do not use your data for advertising, we do not sell it, and we do not use your content to train AI models.

4. The AI assistant

When you ask for a change, the request and the parts of your site the assistant needs to read are sent to Anthropic (USA), which provides the AI model, under commercial terms that do not allow Anthropic to use them to train its models. Hosting passwords and API keys are never part of what is sent. If you use Hoila from your own Claude or ChatGPT, that AI provider's own privacy terms apply to your conversations there.

5. Service providers

We work with carefully selected providers who process data on our behalf:

• Hetzner Online GmbH, Germany (Falkenstein), for servers and storage of the Service and hosted apps;
• Anthropic, for the AI assistant;
• Brevo (Sendinblue SAS, France), for e-mails such as invitations, password resets, confirmation codes and form notifications;
• Twilio (USA), for text messages with confirmation codes, if you add a mobile number;
• Stripe, for payments and invoices;
• Google reCAPTCHA on our public contact form, to keep out spam — Google may set its own cookies there;
• if you ask for changes by e-mail or WhatsApp: our inbound e-mail provider and Meta (WhatsApp Business), which deliver your messages to us;
• if you send a voice message: OpenAI (USA), which turns the recording into text; the recording is not kept there for training;
• if Hoila creates an image for your website: OpenAI (USA) receives the image description Hoila wrote (no personal data of yours), and returns the image;
• when you use these features: DNSimple (domain registration), Supabase, DigitalOcean or Exoscale (databases), Laravel Forge (server management, USA, no access to your content in normal operation), and services you connect yourself, such as Google Search Console, Google Analytics, PageSpeed Insights or WPScan.

The full list, with locations, is in our Data Processing Agreement.

6. Where data is stored

The Service and hosted apps currently run on servers of Hetzner in Germany (EU), which has an adequate level of data protection under Swiss law. We plan to move hosting to Switzerland; we will update this policy when that happens.

Other providers are in the EU or the USA. Where a country does not have an adequate level of data protection, we rely on the EU Standard Contractual Clauses or comparable safeguards, or on the Swiss-US Data Privacy Framework where the provider is certified.

7. How long

We keep your data as long as you use the Service. After your account ends, we delete website content and app data within 30 days, unless you asked for an export. Billing records are kept for 10 years, as Swiss law requires. Security logs are kept for a limited time.

8. Cookies

We only use cookies that are needed: to keep you signed in, to protect forms against misuse, and — for apps you protect with a password — to remember that you entered it. Our visitor statistics work without cookies. On our public contact form, Google reCAPTCHA may set cookies to tell people from bots. We do not use advertising or tracking cookies.

9. Security and support access

Encrypted connections, encrypted credentials, hashed passwords, optional two-step sign-in, permissions per person, drafts before publishing and version history.

Hoila support may sign in to your account to help you; this is logged.

10. Your rights

You can ask what data we have about you, have it corrected or deleted, object to its use, and receive it in a common format. Write to legal@ampersand.ch. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your local supervisory authority.

11. Your websites' visitors

For personal data on your websites and apps you are the controller and we are your processor, under the Data Processing Agreement. What may be published and hosted is set out in the Acceptable Use Policy.

12. Changes

We may update this policy. We will tell you about important changes by e-mail or in the app.

13. Contact