Your data deserves context.
This notice explains how Sophyia handles personal data on this website, in its products, and through approved integrations. Sophyia operates from Crans-Montana, Valais, Switzerland.
Data we may process
Depending on how you interact with Sophyia, we may process:
- Contact data: name, email address, organisation, and the content of an enquiry you choose to send.
- Account and access data: identifiers, authentication records, service entitlements, and support correspondence where a product account is available.
- Service data: prompts, files, configuration, outputs, and feedback supplied to a Sophyia product or authorised integration. Do not submit sensitive information unless the relevant service expressly supports it and an applicable agreement permits it.
- Technical and security data: IP address, browser or device information, timestamps, request identifiers, error records, and security events necessary to operate, secure, and troubleshoot a service.
- Website preferences: limited local browser settings, such as a language preference. We do not serve advertising through this website.
Why we use personal data
We use data to provide and secure requested services; authenticate users; respond to support requests; maintain, debug, and improve our products; comply with legal obligations; and protect Sophyia, users, and third parties against abuse, fraud, or security incidents. Where applicable, processing is based on performance of a contract, consent, legal obligations, or legitimate interests balanced against your rights.
Service providers and transfers
We may use carefully selected providers for hosting, infrastructure, communications, authentication, form handling, security, and model or search capabilities. They process data only as necessary to provide their service to Sophyia, subject to contractual, technical, or organisational safeguards where applicable. We do not sell personal data and do not use it to serve advertisements.
Some providers may process data outside Switzerland or the European Economic Area. Where a transfer is required, Sophyia seeks appropriate safeguards under applicable law. Product-specific documentation may identify additional providers or locations.
Security and AI-assisted services
We use reasonable technical and organisational measures designed to protect data. No online service can guarantee absolute security. Sophyia products may use artificial intelligence and external model providers to generate or analyse content. Outputs may be incomplete, inaccurate, or unsuitable for a particular purpose; they are not a substitute for professional judgment. We do not intentionally use customer content to train public models unless the applicable service terms expressly say so.
Retention
We keep data for no longer than necessary for the purpose for which it was collected, service continuity, security, dispute handling, and legal obligations. Our current general schedule is:
- contact enquiries and ordinary support correspondence: up to 24 months after the matter is closed;
- security and operational logs: normally up to 12 months, unless a longer period is needed to investigate an incident or meet a legal duty;
- account and service data: for the active relationship and then for a reasonable deletion or export period, subject to the applicable product agreement and legal record-keeping duties;
- contractual, invoice, and tax records: for the period required by applicable law.
Your choices and rights
Subject to applicable law, you may ask for access to, correction of, deletion of, restriction of, or export of personal data, and may object to certain processing. You may withdraw consent where processing relies on consent. To exercise a right, email hello@sophyia.io. We may need to verify your identity before acting on a request.
You may also have a right to lodge a complaint with the competent authority, including the Swiss Federal Data Protection and Information Commissioner or the relevant authority in your place of residence.
Updates
We may update this notice when our services, legal requirements, or processing practices change. The current version will be published on this page with its revision date.