Privacy policy

Last updated: June 2026

Protecting your personal data is important to us. This privacy policy explains which personal data we process when you use our website (playces.ai) and our web application (app.playces.ai), for what purposes and on what legal basis. It applies in addition to the Swiss Data Protection Act (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Controller

The controller responsible for data processing is:

  • playces.ai AG
  • Zimmelstrasse 15, 6314 Unterägeri, Switzerland
  • Email: hello@playces.ai

For any data protection matters, you can contact us at any time at the address above.

Scope

This policy applies to our landing page (playces.ai) and to our registration-based web application (app.playces.ai). We process personal data in good faith, proportionately and for specified purposes.

Your rights

Under applicable data protection law, you have the following rights:

  • Access to the data we process about you
  • Rectification of inaccurate data
  • Erasure of your data
  • Restriction of processing
  • Data portability
  • Objection to certain processing
  • Withdrawal of consent with effect for the future

You also have the right to lodge a complaint with the competent supervisory authority (in Switzerland: the Federal Data Protection and Information Commissioner, FDPIC; in the EU: the respective competent data protection authority).

Hosting and server logs

Our website and application are hosted by Vercel Inc. When you access them, technically necessary data (e.g. IP address, date and time of access, page requested, browser type, operating system) is processed in server logs. This processing is necessary to provide a secure and stable service (Art. 6(1)(f) GDPR – legitimate interest).

Cookies and consent

We use technically necessary storage mechanisms and – only with your consent – analytics services. We store your cookie choice locally in your browser. Until you click “Accept”, no analytics or marketing services are loaded. You can withdraw your consent at any time with effect for the future by deleting the choice stored locally in your browser.

Google Analytics

With your consent, we use Google Analytics 4, a service provided by Google Ireland Limited. We use it to analyse the use of our website in pseudonymous form in order to improve it. The IP address is truncated before evaluation (IP anonymisation). The legal basis is your consent (Art. 6(1)(a) GDPR). Without consent, Google Analytics is not loaded.

Embedded videos (Bunny.net)

We embed videos via the streaming service Bunny.net (BunnyWay d.o.o., Slovenia) on our website. When the video is loaded or played, Bunny.net processes technically necessary data (including your IP address) in order to deliver the video. According to the provider, processing takes place within the EU and no tracking cookies are set for delivery. For details, please refer to Bunny.net's privacy policy.

Contact and appointment booking

If you contact us or book a demo appointment via our website, we process the data you provide (e.g. name, email address, preferred time) in order to handle your request. We use an external appointment booking service for scheduling. The legal basis is Art. 6(1)(b) and (f) GDPR.

When you join our waitlist, we process the data you provide (name, company, email address, country) in order to inform you about the availability of playces. This data is stored in a database (Turso, libSQL) that we operate in a data-centre region within the EU. To protect against spam and automated abuse, we also use Cloudflare Turnstile; this processes a technical token without setting any tracking cookies. A transfer to third countries cannot be excluded and is safeguarded by appropriate guarantees (EU standard contractual clauses). The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

Newsletter and marketing

If you subscribe to a newsletter, we process your email address to send you information about our products and offers. Sending takes place with your consent via an external email marketing provider. You can unsubscribe at any time via the unsubscribe link or by contacting us. The legal basis is your consent (Art. 6(1)(a) GDPR).

Registration and use of the application

Using our application at app.playces.ai requires registration with your email address. As part of your use, we process the content you enter, in particular travel data, destinations, complete trips and the related services. This processing is carried out to provide our contractual services (Art. 6(1)(b) GDPR). We use Vercel and Supabase for authentication and data storage.

AI-based processing

To provide our features, the application uses artificial intelligence services, namely Google Vertex AI (Google Cloud). The data you enter – including personal data – may be transmitted to Vertex AI and processed automatically to generate results.

  • Processing takes place in data centres within the EU.
  • Your data is not used to train Google's AI models.
  • A data processing agreement is in place with the provider.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in a high-performing application (Art. 6(1)(f) GDPR).

Processors and recipients

We only share personal data with carefully selected service providers who support us in delivering our services and who are contractually obliged to comply with data protection. These include in particular:

  • Vercel Inc. – hosting of the website and application
  • Supabase – authentication and database
  • Google (Google Cloud / Vertex AI and Google Analytics) – AI processing and web analytics
  • Bunny.net (BunnyWay d.o.o.) – provision and delivery of embedded videos

Transfer of data abroad

We generally process data in Switzerland and the EU/EEA. Where data is transferred to countries outside this area (e.g. the USA), we ensure an adequate level of protection – for example through standard contractual clauses or an adequacy decision.

Retention period

We only retain personal data for as long as necessary for the respective purposes or as required by statutory retention obligations. The data is then deleted or anonymised.

Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Transmission is encrypted (TLS).

Changes to this privacy policy

We may amend this privacy policy at any time to reflect changes in the legal situation or adjustments to our services. The version published on this page at the relevant time applies.