Privacy Policy

1. Who We Are

OJ Digital Solutions ('AI-Move', 'we', 'us', 'our') is a company registered in Switzerland. We operate the AI-Move platform — a web and mobile marketplace that connects customers seeking move services with verified Swiss move companies, using AI-powered analysis to generate instant pricing.

Data Controller: OJ Digital Solutions GmbH Schachenhof 1 6014 Luzern Switzerland
Privacy contact: support@aimove.ch

2. Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, phone number, role (customer or company), and password hash.
• Move request data: Pickup and delivery addresses, item descriptions, preferred dates and times, and any notes you provide.
• Media uploads: Photos and videos of items you submit for AI analysis. See Section 5 for full details.
• Payment data: Payment is processed by our third-party provider (Stripe). We store only a payment reference — no card numbers are stored on our servers.
• Device & usage data: IP address, browser type, device type, pages visited, and app interaction data used for security and service improvement. If you arrive through one of our ads, we also store the ad click identifier and campaign parameters.
• Own usage statistics: Pages visited, time of the visit, device type, browser, language, a pseudonymised (hashed) IP address and the approximate country and region. With analytics consent, a device cookie links your visits over time; without it, only the visits within your current session are linked.

3. Why We Collect It

We process your data for the following purposes:

• To provide the AI-Move service — matching customers with move companies and generating AI price estimates.
• To process and manage move bookings and payments.
• To verify move company accounts and maintain platform quality.
• To send service-related notifications (booking confirmations, status updates).
• To improve AI accuracy and platform performance using anonymised, aggregated usage data.
• To comply with Swiss and applicable EU legal obligations.
• To measure website and platform usage and improve AI-Move using analytics tools, such as Google Analytics.
• To measure visits and actions anonymously, without cookies or personal identifiers, if you reject analytics cookies — for statistics and to improve the effectiveness of our advertising (our legitimate interest).
• With your consent, to load the advertising pixels of Meta, TikTok and OpenAI and to set marketing cookies that recognise your browser, so these platforms can measure and improve their ads.
• Always-on function (ad click identifier): if you arrived through an ad, to store the ad click identifier and to report the key actions (registration, opening of the order form, the data entered in its first step, reaching its last step and sending an order) together with it, without cookies and without any other personal identifier, only to the one platform whose ad you clicked, whatever your cookie choice. We need this to know which ads lead to registrations and orders and to settle and improve our advertising (our legitimate interest). You can object at any time (Section 10). If your browser sends the Global Privacy Control or Do Not Track signal, we neither store nor report the ad click identifier.

We do not make automated decisions that have legal effects for you without human review.

4. Legal Bases

We process personal data in line with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, we rely on these legal bases:

• Contract: your account, move requests, matching with move companies, payments and service messages (Art. 6(1)(b) GDPR).
• Legal obligation: accounting, tax and other retention duties (Art. 6(1)(c) GDPR).
• Legitimate interest: security and fraud prevention, improving the platform, our own usage statistics, anonymous cookie-free measurement and the ad click identifier function, which stores the click identifier and reports key actions to the advertising platform whose ad you clicked (Art. 6(1)(f) GDPR). You can object at any time (Section 10).
• Consent: analytics and marketing cookies, advertising pixels and the device cookie of our own usage statistics (Art. 6(1)(a) GDPR). You can withdraw your consent at any time under "Cookie settings".

Under Swiss law, our processing follows the principles of the FADP; where a justification is needed, it is your consent, the performance of a contract, a legal obligation or our overriding private interest.

5. Media You Upload (Photos & Videos)

• Uploaded photos and videos are processed by our AI systems to identify items, estimate volume and weight, and generate move pricing.
• To enable AI analysis, your media is transmitted to and analysed by a third-party AI API service based in the United States. This transfer is carried out under appropriate safeguards in accordance with applicable data protection law.
• Media files are stored securely in encrypted Swiss-based or the European Economic Area storage.
• Matched move companies receive access to your media files only to assess the job and plan logistics.

6. Data Sharing

We share your data only as necessary to operate the platform:

• Move companies: Receive your move request details, addresses, and uploaded media to enable service delivery.
• Stripe (payment processing): Processes card payments. Stripe is PCI-DSS compliant. The payment data is subject to Stripe's privacy policy.
• Google Analytics and Google Ads: We use Google Analytics to measure and analyse how visitors use our website and platform. Google may process this data on servers outside Switzerland and the EEA, including in the United States, under Google's standard contractual safeguards, and acts as a data processor for this purpose. When you arrive through a Google ad, we report your registration, the opening of our order form, the data you enter in its first step, reaching its last step, and your order to Google together with the Google ad click identifier from the link you arrived with, so Google can tell which ad led to it: in your browser through the Google Ads conversion tag and Google Analytics (nothing is sent from our server to Google Ads). We never send your name, email address or phone number to Google. Without your consent to marketing cookies this happens without cookies (Google Consent Mode, consent marked as denied): no Google Ads cookie is set or read, and the click identifier travels in the page address and as a parameter of the event. This is part of the always-on ad click function, applies only to visits that started with a Google ad, and does not happen if your browser sends the Global Privacy Control or Do Not Track signal. If you reject analytics cookies, Google Analytics still receives anonymous, cookie-free signals about page visits, clicks and key actions such as registrations and move requests; they contain no account ID, guest ID or order reference. Like every web request, they technically include your IP address and browser details, which Google processes for statistics and for modelling the results of our ads.
• Meta Platforms (Facebook, Instagram): Only if you arrived through a Meta ad, we report to Meta the key actions you take on our website (a registration, the opening of the order form, the data entered in its first step, reaching its last step and sending an order) together with the ad click identifier, your browser type and the time of the event, so Meta can tell that the ad led to them and improve our ads. We do not report page visits, clicks or other browsing activity to Meta. If you accept marketing cookies, this also happens through the Meta Pixel, which sets cookies. If you reject marketing cookies, the Meta Pixel is not loaded and no cookies are set, but these key actions are still reported to Meta anonymously by our server, without cookies. We never share your name, email address, phone number, account or guest identifier, or the price of your order with Meta (for sending an order, a fixed default value is reported). Meta Platforms Ireland Limited and Meta Platforms, Inc. may process this data in the United States.
• TikTok (TikTok Technology Limited and affiliated companies): Only if you arrived through a TikTok ad, we report to TikTok the key actions you take on our website (a registration, the opening of the order form, the data entered in its first step, reaching its last step and sending an order) together with the ad click identifier and the time of the event, so TikTok can tell that the ad led to them and improve our ads. If you accept marketing cookies, this also happens through the TikTok Pixel, which sets cookies, and your browser type is included. If you reject marketing cookies, the TikTok Pixel is not loaded and no cookies are set, but these key actions are still reported to TikTok anonymously by our server, with only the ad click identifier, the event and its time. We do not report page visits, clicks or other browsing activity. We never share your name, email address, phone number, account or guest identifier, or the price of your order with TikTok (for sending an order, a fixed default value is reported). TikTok may process this data outside Switzerland and the EEA.
• OpenAI Ads (OpenAI and affiliated companies): Only if you arrived through an OpenAI ad, we report to OpenAI the key actions you take on our website (a registration, the opening of the order form, the data entered in its first step, reaching its last step and sending an order) together with the ad click identifier and the time of the event, so OpenAI can tell that the ad led to them and improve our ads. If you accept marketing cookies, this also happens through the OpenAI Pixel, which sets cookies, and your browser type is included. If you reject marketing cookies, the OpenAI Pixel is not loaded and no cookies are set, but these key actions are still reported to OpenAI anonymously by our server, with only the ad click identifier, the event and its time, and marked so that they are not used for personalisation. We do not report page visits, clicks or other browsing activity. We never share your name, email address, phone number, account or guest identifier, or the price of your order with OpenAI (for sending an order, a fixed default value is reported). OpenAI may process this data in the United States.
• Cloud infrastructure providers: We use Swiss-based or GDPR-compliant cloud providers for hosting and storage.

We do not sell or rent your personal data, and we never share your name, email address or phone number with advertising platforms.

7. Transfers Abroad

We store your data in Switzerland or the European Economic Area (EEA). Some recipients named in Section 6 process data in other countries:

• EEA (for example Ireland): Google Ireland Limited, Meta Platforms Ireland Limited and TikTok Technology Limited. The Swiss Federal Council recognises these countries as providing adequate data protection.
• United States: Google LLC, Meta Platforms, Inc., OpenAI, Stripe and the AI service that analyses your media. Where the recipient is certified under the Swiss-U.S. Data Privacy Framework, the transfer is based on the Federal Council's adequacy decision; otherwise we use standard contractual clauses recognised by the FDPIC (Art. 16 FADP).
• Other countries: TikTok and OpenAI may also process data through affiliated companies in other countries. In that case we rely on standard contractual clauses or, where they apply, the exceptions of Art. 17 FADP.

Standard contractual clauses cannot rule out every risk, in particular access by foreign authorities. You can ask us for a copy of the safeguards (Section 13).

8. Data Storage & Security

All data is stored on servers located in Switzerland or within the European Economic Area. We apply technical and organisational security measures including data encryption at rest and in transit, access controls, and regular security reviews. In the event of a data breach, we will notify affected users and the relevant supervisory authority within the legally required timeframes.

9. How Long We Keep Data

We keep personal data only as long as needed for the purposes in Section 3 or as required by law:

• Account and move requests: for as long as your account exists, and afterwards only as long as needed for legal claims or legal duties.
• Booking, invoice and payment records: 10 years, as required by the Swiss Code of Obligations.
• Ad click identifier: in your session (up to 2 weeks) and in a cookie for 90 days.
• Cookies: from the end of your session up to 2 years, as listed in our Cookie Policy.
• Data held by advertising and analytics providers: under the retention rules of Google, Meta, TikTok and OpenAI.

10. Your Rights

Under the FADP and GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ('right to be forgotten'), subject to legal retention requirements.
• Restrict or object to certain processing.
• Withdraw consent at any time where processing is based on consent.
• Receive the data you provided to us in a common electronic format (data portability).
• Object to processing based on our legitimate interest, including our own usage statistics and the ad click identifier function. Contact us (Section 13), or let your browser send the Global Privacy Control or Do Not Track signal, which we respect automatically.

To exercise any of these rights, email support@aimove.ch. We will respond within 30 days.

11. Cookies

We use essential cookies to operate the platform — for session management, security and language preferences. With your consent we also use analytics cookies (Google Analytics) to understand how the platform is used, and marketing cookies and advertising pixels (Google, Meta, TikTok, OpenAI). If you reject analytics cookies, we still measure visits and actions anonymously, without cookies and without any personal identifier. If you reject marketing cookies, no advertising pixel is loaded and no marketing cookies are set; the always-on ad click identifier, which lets us credit a registration or an order to the ad you clicked, stays active (see Section 6). You can change your choice at any time via "Cookie settings". See our Cookie Policy for full details.

12. Changes to This Policy

We may update this policy when our services or the law change. The version published on this page applies; its date and version number are shown above. We will inform registered users by email of material changes.

13. Contact Us

For privacy questions or to exercise your rights, contact: support@aimove.ch

You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC). If you live in the EU or EEA, you can also complain to the data protection authority of your country.