1. Controller
The controller for data processing on agentready.ch is Loaded AG, Klostergutstrasse 4, CH-8252 Schlatt, Switzerland (Zurich office: Talacker 41, 8001 Zürich). Contact for all privacy matters: hello@loaded.ch.
This policy follows the revised Swiss Federal Act on Data Protection (revDSG/FADP). Where the GDPR applies, the corresponding rights apply analogously.
2. Data we process
Information you provide: chat inputs, website domains, names, email addresses, phone numbers, company details, messages in contact, waitlist and booking forms, and account/payment details when activating a listing.
Automatically collected: technical logs (IP address, user agent, timestamps), chat histories for traceability, and anonymous usage events (e.g. "check started", "waitlist submitted") with a random, locally stored identifier — no tracking cookies of our own.
Visitor statistics: we use Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia), also for the anonymous funnel events our server sends. Plausible sets no cookies and stores no personal data: the IP address is not stored; together with the browser's user agent it only forms an anonymous identifier that changes every day (the salt for it is deleted every 24 hours). It records the page visited, the referrer, browser, operating system, device type and country, region and city (derived from the IP address, which is then discarded); only aggregated statistics result. The data is hosted in the EU (Germany) and is neither sold nor shared for advertising. The legal basis is our legitimate interest in privacy-friendly visitor statistics (revDSG/FADP; Art. 6(1)(f) GDPR where applicable). Details: Plausible's data policy.
Embedded videos: some pages show our explainer videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com). Until you click a video, the page loads nothing from YouTube: it shows only a preview image from our own server, and no cookies are set. Only when you start the video does the player load from YouTube. YouTube then receives your IP address, the address of the page and technical data about your device and browser, may store cookies or similar data on your device, and may process data outside Switzerland and the EEA, for example in the USA. The basis is your click to play the video (revDSG/FADP; Art. 6(1)(a) GDPR where applicable). If you would rather not use YouTube, do not start the video. From the start, Google's privacy policy applies.
Publicly available company data: for website checks and profile drafts we process only publicly accessible content of the submitted website (titles, descriptions, services, imprint data).
3. Purposes
Providing the service: website analyses, profile drafts, company profiles, directory operation, contact and booking requests, verification, customer account and dashboard, billing.
Security and improvement: abuse and spam prevention (rate limits, logs), funnel measurement via anonymous events, error analysis.
Communication: confirmation and transactional emails (login link, payment confirmation, waitlist confirmation) and — for curated profiles — a one-time invitation with a reminder. No newsletter without sign-up; we never sell data.
4. Processors
We use the following services: Vercel (hosting/delivery), Plausible (visitor statistics without cookies, data in the EU), YouTube (embedded explainer videos, only after a click), Supabase (database and authentication), Stripe (payments — card data is processed directly by Stripe), Resend (email delivery), Cal.com (scheduling), Daytona (isolated sandbox for website analyses), and AI providers (Anthropic, OpenAI, Google) for chat responses and structuring public website content.
When Google advertising campaigns are active, the Google tag (Google Ads conversion measurement) is loaded and Google may set cookies. Our own usage measurement works without cookies.
Some providers process data outside Switzerland/the EU (notably the USA). Data processing agreements under applicable law are in place.
5. AI and agent features
Chat inputs and publicly accessible website content may be transmitted to the configured AI providers to generate answers, profile drafts and structured data. Please do not enter sensitive personal data in the chat.
Private recipient addresses, internal notes and unapproved contact rules are never published in public profiles or machine-readable agent files. Contact requests from AI agents are only delivered through explicitly approved functions and according to the stored rules.
Requests through AI agents: when an AI agent sends a request to a company through agentready.ch, for example for a quote, a callback or an appointment, we only accept it if the agent confirms the consent of the person making the request. We store the request with the concern, name and email address and the optional details (phone, company, area, urgency, budget) in our database (Supabase) and forward it by email (Resend) to the recipient address the company has set. The purpose is to deliver the request, keep it traceable and prevent abuse; requests held back by our spam filter are checked by hand before delivery. The company is responsible for any further processing in its own inbox.
The concern is free text. If someone includes health information there, for example in a request to a medical practice, that is sensitive personal data (Art. 5 let. c FADP). Only write what is needed to get in touch, for example the concern and a preferred time; medical details are best clarified directly with the company. We keep requests as long as required for these purposes (see section 7).
6. Automatically created profile drafts
For curated invitations we create profile drafts from publicly available company information. These drafts are labeled unverified, time-limited, and are withdrawn if the company does not respond. Any company can request correction or removal of its draft or profile at any time via hello@loaded.ch.
7. Retention and deletion
We retain data as long as required for the respective purpose: account and profile data for the duration of the contract, accounting-relevant data according to statutory retention periods (generally 10 years), chat histories and logs for traceability and security. Expired unverified profile drafts are archived and periodically cleaned up.
Deletion and access requests are handled via hello@loaded.ch.
8. Your rights
You have the right to access the personal data we process about you, to rectification, deletion, data portability, and to object to processing where provided by law.
Contact hello@loaded.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).