Privacy Policy

Last updated: July 9, 2026

Protecting your personal data is important to us. This privacy policy transparently explains which data we collect when you use Acurio, for what purposes we process it, to whom we disclose it and what rights you have. Processing is carried out in accordance with the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data controller

For data protection inquiries, access requests or to exercise your rights, please contact the email address above.

2. General information on processing

We process personal data solely for the purposes described below and only to the extent necessary to provide our service, fulfil contractual obligations or comply with legal requirements. All staff are bound by confidentiality and data protection obligations.

3. What data we process

3.1 Account data

When you register and sign in, we collect your email address and a unique user ID. Authentication is performed via a magic link sent to you by email. Session information is stored as a technical cookie in your browser.

3.2 Content data

To use the service you upload academic documents (DOCX) and source files (PDF, BibTeX, text). This content is held in our server’s memory only for the duration of the analysis and is discarded once the session ends. Document contents are not permanently stored.

3.3 Analytics and log data

For operation, quality assurance and error handling we log technical information about citation analyses (for example timestamps, duration, number of citations processed, error codes). These logs are retained for up to 30 days and are then automatically deleted.

3.4 Payment data

To manage paid subscriptions we store a Stripe customer ID and your subscription status. Actual payment information (card details, bank accounts) is processed directly by Stripe, not by us.

3.5 Communication

If you contact us by email, we process the information provided in order to handle your request.

4. Purposes and legal bases

We process the above data for the following purposes:

• Provision and operation of the Acurio service (contract performance)
• Authentication and account security (contract performance, legitimate interest)
• AI-based analysis of citations against source documents (contract performance)
• Processing subscriptions and payments (contract performance, legal obligation)
• Error analysis, security and abuse prevention (legitimate interest)
• Communication with you, e.g. for support (contract performance, legitimate interest)
• Compliance with statutory retention and cooperation obligations

5. Recipients and processors

To provide our service we use carefully selected service providers that support us as processors. They may only process data on our behalf and in accordance with our instructions.

Provider	Purpose	Location
AI model providers (e.g. DeepSeek)	AI-based analysis of citations and source text	Germany or Switzerland (depending on the model)
Stripe Payments Europe	Payment processing, subscription management	EU / worldwide
MailerSend	Sending transactional email (magic link)	EU
Coolify (self-hosted)	Application and database hosting (PostgreSQL)	Germany and/or Switzerland

Hosting and server locations: We self-host our application servers and PostgreSQL database (via Coolify) in Germany and/or Switzerland. The specific location may vary by environment and the AI model in use. Processing remains GDPR-compliant in all cases and is aligned with the revised Swiss Federal Act on Data Protection (revFADP).

Disclosure to further third parties takes place only where this is necessary for contract performance or required by law.

6. Cross-border transfers

Content and analysis data from citation checks are processed in Germany or Switzerland, depending on the model used. Individual supporting service providers (e.g. Stripe for payment processing) may also process data outside Switzerland and the EEA. Swiss and EU data protection law (GDPR) require an adequate level of protection for such transfers. We ensure this in particular by entering into Standard Contractual Clauses (EU SCC) and by additional technical and organisational measures. Content is transferred solely for processing purposes and is not used for model training.

7. Retention periods

• Uploaded documents: only during the session in memory; no persistent storage.
• Analytics and log data: up to 30 days, then automatically deleted.
• Account data: until your account is deleted; then deleted without undue delay, unless statutory retention obligations apply.
• Billing and contract data: ten years under the Swiss Code of Obligations (Art. 958f CO).

8. Cookies and similar technologies

We use only strictly necessary cookies required to operate the service (in particular session cookies to maintain your login). We do not use tracking, advertising or analytics cookies. No profiling for marketing purposes takes place.

9. AI-based processing

For citation verification, text excerpts from your document and sources are sent to a language model (currently including DeepSeek). Inference runs in Germany or Switzerland, depending on the model. The transmission is encrypted. Results are generated by AI and may be incorrect or incomplete; they are intended as decision support and do not constitute a final scientific or legal assessment.

10. Data security

We take appropriate technical and organisational measures to ensure the confidentiality, integrity, availability and resilience of our systems. Data transfers are encrypted (TLS). Access to personal data is restricted to authorised personnel.

11. Your rights

Subject to applicable law, you have in particular the following rights:

• Access to the data we process about you
• Rectification of inaccurate or incomplete data
• Erasure of your data, where no retention obligations apply
• Restriction of processing
• Data portability in a commonly used format
• Objection to processing based on legitimate interests
• Withdrawal of consent with effect for the future

To exercise these rights please contact us at info@tecminds.ch. We may request appropriate proof to verify your identity.

12. Right to lodge a complaint

In Switzerland you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC). Within the EU you have the right to lodge a complaint with the competent data protection authority of your country of residence.

13. Changes to this privacy policy

We reserve the right to adapt this privacy policy to reflect current legal and technical developments. The version published at the time of use applies. We will communicate material changes in good time by email or within the service.

Privacy Policy

Last updated: July 9, 2026

Protecting your personal data is important to us. This privacy policy transparently explains which data we collect when you use Acurio, for what purposes we process it, to whom we disclose it and what rights you have. Processing is carried out in accordance with the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data controller

For data protection inquiries, access requests or to exercise your rights, please contact the email address above.

2. General information on processing

We process personal data solely for the purposes described below and only to the extent necessary to provide our service, fulfil contractual obligations, on the basis of your explicit consent or to comply with legal requirements. All staff are bound by confidentiality and data protection obligations.

3. What data we process

3.1 Account data

When you register and sign in, we collect your email address and a unique user ID. Authentication is performed via a magic link sent to you by email. Session information is stored as a technical cookie in your browser.

3.2 Content data

To use the service you upload academic documents (DOCX) and source files (PDF, BibTeX, text). This content is held in our server’s memory only for the duration of the analysis and is discarded once the session ends. Document contents are not permanently stored.

3.3 Analytics and log data

For operation, quality assurance and error handling we log technical information about citation analyses (for example timestamps, duration, number of citations processed, error codes). These logs are retained for up to 30 days and are then automatically deleted.

3.4 Payment data

To manage paid subscriptions we store a Stripe customer ID and your subscription status. Actual payment information (card details, bank accounts) is processed directly by Stripe, not by us.

3.5 Communication

If you contact us by email, we process the information provided in order to handle your request.

4. Purposes and legal bases

We process the above data for the following purposes:

• Provision and operation of the Acurio service (contract performance)
• Authentication and account security (contract performance, legitimate interest)
• AI-based analysis of citations against source documents (contract performance)
• Processing subscriptions and payments (contract performance, legal obligation)
• Error analysis, security and abuse prevention (legitimate interest)
• Communication with you, e.g. for support (contract performance, legitimate interest)
• Where you have actively opted in: use of anonymised excerpts to improve our citation checker (consent — see § 7)
• Compliance with statutory retention and cooperation obligations

5. Recipients and processors

To provide our service we use carefully selected service providers that support us as processors. They may only process data on our behalf and in accordance with our instructions.

Provider	Purpose	Location
AI model providers (e.g. DeepSeek)	AI-based analysis of citations and source text	Germany or Switzerland (depending on the model)
Stripe Payments Europe	Payment processing, subscription management	EU / worldwide
MailerSend	Sending transactional email (magic link)	EU
Coolify (self-hosted)	Application and database hosting (PostgreSQL)	Germany and/or Switzerland

Hosting and server locations: We self-host our application servers and PostgreSQL database (via Coolify) in Germany and/or Switzerland. The specific location may vary by environment and the AI model in use. Processing remains GDPR-compliant in all cases and is aligned with the revised Swiss Federal Act on Data Protection (revFADP).

Disclosure to further third parties takes place only where this is necessary for contract performance or required by law.

6. Cross-border transfers

Content and analysis data from citation checks are processed in Germany or Switzerland, depending on the model used. Individual supporting service providers (e.g. Stripe for payment processing) may also process data outside Switzerland and the EEA. Swiss and EU data protection law (GDPR) require an adequate level of protection for such transfers. We ensure this in particular by entering into Standard Contractual Clauses (EU SCC) and by additional technical and organisational measures. Content is transferred solely for processing purposes. Your content is used to train models only within the narrow scope of § 7 and only after your explicit opt-in.

7. Use of data for model improvement (opt-in)

With your explicit consent, we may use anonymised excerpts of your citation analyses to further develop our AI models and evaluation rubrics. This processing is voluntary and not required to use the service.

What is included:

• Anonymised excerpts contain the checked citation text, the matched source excerpt and the verdict the system assigned (e.g. “supported”, “partial”, “unsupported”).
• Directly identifying information (name, email address, user ID, document title) is removed before any such use.
• The resulting records feed into internal fine-tuning and evaluation datasets that we use to improve the citation checker.

How you consent:

You opt in actively in the account area under “Data use”. The default is off — without an active opt-in, your data is not used for this purpose.

How you withdraw:

You can withdraw your consent at any time with effect for the future from the same account area. Anonymised excerpts already incorporated into a dataset cannot be recalled for technical reasons; future analyses are no longer used from the moment of withdrawal.

Recipients:

These anonymised datasets are processed exclusively by us and our existing AI processors (e.g. DeepSeek). No transfer to third parties outside this chain takes place.

8. Retention periods

• Uploaded documents: only during the session in memory; no persistent storage.
• Analytics and log data: up to 30 days, then automatically deleted.
• Anonymised training excerpts (§ 7): until the relevant training dataset is deleted; necessity reviewed at least annually.
• Account data: until your account is deleted; then deleted without undue delay, unless statutory retention obligations apply.
• Billing and contract data: ten years under the Swiss Code of Obligations (Art. 958f CO).

9. Cookies and similar technologies

We use only strictly necessary cookies required to operate the service (in particular session cookies to maintain your login). We do not use tracking, advertising or analytics cookies. No profiling for marketing purposes takes place.

10. AI-based processing

For citation verification, text excerpts from your document and sources are sent to a language model (currently including DeepSeek). Inference runs in Germany or Switzerland, depending on the model. The transmission is encrypted. Results are generated by AI and may be incorrect or incomplete; they are intended as decision support and do not constitute a final scientific or legal assessment.

11. Data security

We take appropriate technical and organisational measures to ensure the confidentiality, integrity, availability and resilience of our systems. Data transfers are encrypted (TLS). Access to personal data is restricted to authorised personnel.

12. Your rights

Subject to applicable law, you have in particular the following rights:

• Access to the data we process about you
• Rectification of inaccurate or incomplete data
• Erasure of your data, where no retention obligations apply
• Restriction of processing
• Data portability in a commonly used format
• Objection to processing based on legitimate interests
• Withdrawal of consent with effect for the future (see in particular § 7)

To exercise these rights please contact us at info@tecminds.ch. We may request appropriate proof to verify your identity.

13. Right to lodge a complaint

In Switzerland you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC). Within the EU you have the right to lodge a complaint with the competent data protection authority of your country of residence.

14. Changes to this privacy policy

We reserve the right to adapt this privacy policy to reflect current legal and technical developments. The version published at the time of use applies. We will communicate material changes in good time by email or within the service.