Privacy Policy
Draft – have it reviewed by a lawyer before going live.
This privacy policy explains how personal data is processed within the Overclad.ai service. Overclad.ai is a product of KIANEX GmbH. We process personal data in accordance with the Swiss Data Protection Act (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
Responsible for data processing is:
KIANEX GmbH
Sportstrasse 33
2540 Grenchen
Switzerland
Email: info@kianex.ch
2. What data we process
In the course of using Overclad.ai we process in particular the following data:
- Account and contact data: name, business email address, company details, access data and account settings.
- Uploaded content: building photos, plans and material images uploaded by you.
- Generated renders: the visualization images generated by the service.
- Usage and log data: technical access data such as IP address, time, browser type, functions accessed and coin consumption.
- Payment data: the data required to process orders (payment processing itself is handled by our payment service provider, see below).
3. Purposes and legal bases of processing
We process the aforementioned data for the following purposes:
- Provision, operation and delivery of the service including AI-assisted image generation (performance of contract).
- Management of the account, billing and customer support (performance of contract).
- Ensuring security, stability and abuse prevention as well as improvement of the service (legitimate interest).
- Compliance with legal obligations (e.g. retention obligations).
- Further processing insofar as you have given your consent for it (consent).
Depending on the situation, the legal basis is the performance of the contract, our legitimate interest or your consent; under the GDPR accordingly Art. 6(1)(b), (f) or (a) GDPR.
4. Processing of uploaded images by Google (AI image generation)
Important note: To generate the visualizations, the images you upload (building photos, plans, material images) are transmitted to Google and processed there by the AI image model (Google Gemini or Vertex AI on the Google Cloud infrastructure). Without this transmission, the core function of the service is technically not possible.
Processing may also take place outside Switzerland and the EU/EEA, in particular in the USA. For such transfers we implement appropriate safeguards (e.g. standard contractual clauses or recognized adequacy mechanisms) to ensure an adequate level of data protection.
5. Hosting and infrastructure
The service is operated on the infrastructure of Google Firebase / Google Cloud. In this respect Google acts as a processor for us and processes data only in accordance with our instructions and the contractual agreements. Here too, processing may take place outside Switzerland/the EU, secured by appropriate safeguards.
6. Payment processing
Payments are processed via the payment service provider Stripe. The payment data required for this is processed directly by Stripe; we generally do not receive complete credit card data. The privacy provisions of Stripe apply additionally.
7. Cookies and local storage
We use only technically necessary cookies or local storage mechanisms that are required for the operation of the service and session management, provided no separate tracking is used. Should analytics or marketing technologies be used in the future, this will only take place on the basis of a corresponding consent.
8. Retention period
We retain personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations. Account and content data are generally stored for the duration of the contractual relationship and, after its termination, deleted or anonymized insofar as no retention obligations preclude this.
9. Disclosure to third parties
Your data is disclosed to third parties only insofar as this is necessary to provide the service (to the processors named above), insofar as you have consented, or insofar as we are legally or officially obliged to do so. In the case of a sample request, the necessary details are transmitted to the respective chosen manufacturer.
10. Your rights
Within the framework of the applicable laws you have in particular the following rights:
- Right to information about the data we process;
- Right to rectification of incorrect data;
- Right to erasure;
- Right to restriction of processing;
- Right to object to certain processing;
- Right to data portability;
- Right to lodge a complaint with the competent supervisory authority – in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), within the scope of the GDPR with the respective competent data protection authority.
To exercise your rights, a message to info@kianex.ch is sufficient. You can revoke any consent given at any time with effect for the future.
11. Data security
We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, misuse or alteration. However, the transmission of data over the internet cannot, according to the state of the art, be guaranteed to be absolutely secure.
12. Contact for data protection matters
For questions and concerns about data protection you can reach us at: info@kianex.ch.
13. Changes to this privacy policy
We reserve the right to amend this privacy policy at any time in order to adapt it to changed legal requirements or adjustments to the service. The current version published on Overclad.ai applies in each case.