Last updated: 24 July 2026
This translation is provided for convenience. The French version prevails.
This policy explains what data SBLA (Swiss Business Location Analyzer, hereafter "SBLA", "we") processes when you use the service available at business.my-swiss.ch, for what purposes, and what your rights are, in accordance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the GDPR.
| Category | Data |
|---|---|
| Account | Email address, password (stored hashed, never in clear text), name (optional). If you sign in via Google or LinkedIn: the provider's identifier, together with the email address and name it passes to us. |
| Analysis data | Address of the commercial unit analysed, type of activity (NOGA code), radius. This is business data relating to premises, not to your home. |
| Technical | IP address, browser type and server logs (security, diagnostics). |
| Business customers (agencies / API) | Organisation, API keys (hashed), usage logs and billing data processed by our payment provider. |
We use no advertising cookies and no third-party tracking. Only technical cookies necessary for operation:
| Name | Role | Duration |
|---|---|---|
sbla_session | Keep you signed in (httpOnly) | 7 days |
sbla_free | Track use of the free analysis (httpOnly) | 1 year |
sbla_oauth_state | Security of Google/LinkedIn sign-in (anti-CSRF) | transient |
sbla_lang (local storage) | Remember your language | persistent |
To produce the narrative report, the aggregated indicators of the analysis (scoring figures, area context — without your identity) are sent to an AI provider. We use the following providers:
| Provider | Role |
|---|---|
| Anthropic (Claude) and/or Google (Gemini) | Generation of the narrative report on demand |
| OVH | Hosting of the application and the database |
| Stripe | Payment for the business offerings |
| Google / LinkedIn | "Social login" sign-in (if you use it) |
To produce the analysis, SBLA queries Swiss public sources: Federal Statistical Office (FSO), commercial register (ZEFIX), swisstopo / GeoAdmin, Federal Tax Administration (FTA), SBB, opendata.swiss, OpenStreetMap and openrouteservice. The geocoding of the address you enter is sent to these mapping services in order to locate the point analysed.
Some processors (Anthropic, Google, LinkedIn, Stripe) may process data outside Switzerland/the EU. These transfers are covered by appropriate safeguards (adequacy decisions or standard contractual clauses), in accordance with art. 16 revFADP.
Encrypted connections (TLS), hashed passwords (bcrypt), hashed API keys (SHA-256), CSRF protection, access control and input validation. As no method is 100% secure, we cannot guarantee absolute security.
Under the revFADP (and the GDPR where applicable), you have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent. To exercise them, write to info@vibecodestudio.ch. You may also delete your account at any time.
SBLA is a service intended for business use and is not aimed at people under 16. We do not knowingly collect data concerning them.
In the event of a breach presenting a high risk to your rights, we will inform the Federal Data Protection and Information Commissioner (FDPIC) as soon as possible and, where applicable, the persons concerned.
Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — edoeb.admin.ch.
We may amend this policy. Any updated version is published on this page with its date.