Privacy Policy
1. Controller for notagain.ai
Jürg Hegglin
Dangelstrasse 4
8038 Zürich
Switzerland
Operator Website: www.juerghegglin.ch
Privacy Email: privacy@notagain.ai
2. Scope, Data Minimization & Cookies
This policy covers the public website, email contact, online booking, paid booking with payment and accounting, booking management, and optional feedback. The service is designed to collect only the information needed for those purposes. There is no tracking, no analytics, no advertising script, and no non-essential cookie, which is why this site shows no cookie banner.
Two things are stored by your own browser on your own device so that the site can work. Your chosen colour theme is remembered until you clear your browser data. While you are filling in a booking, an unsent draft of what you have entered — including your name, email address, optional phone number, topic notes and, for a paid booking, your invoice address — is held for the current browser tab only. That draft is removed as soon as the booking is submitted or the tab is closed, and it reaches us only as the booking you actually send.
3. Legal Bases for Processing
Booking, payment, invoicing, session delivery, and booking management are processed to perform the contract you enter into and to meet the accounting and record-keeping duties Swiss law places on the operator. Server logs, abuse prevention, and security records are processed for the legitimate interest of keeping the service available and secure. Calendar and booking data storage, optional feedback, and publication of feedback as a testimonial are processed on the basis of your separate, explicit consent, which you may withdraw at any time (see section 12). Where the GDPR applies to you, these correspond to Article 6(1)(b), 6(1)(c), 6(1)(f), and 6(1)(a) respectively.
4. Website Hosting & Server Logs
Infomaniak in Switzerland hosts the website and booking service. When you access the site, the server may record your IP address, date and time, requested URL, response status, and browser or operating-system information. These logs are used only to deliver and protect the service, diagnose failures, and investigate abuse. Log files are rotated automatically and deleted no later than 30 days after they are written, unless a specific security incident, dispute, or legal obligation requires a documented longer retention.
5. Email Contact
When you email us, your address, message, attachments, and related delivery data are processed to answer your inquiry and manage the resulting business relationship. Infomaniak provides the notagain.ai email service; your own email provider also processes the message. Correspondence is retained while it is needed for the inquiry, relationship, or applicable record-keeping and legal obligations.
6. Calendar Appointment & Booking Data Storage
When you use the online booking service, we process your name, email address, optional phone number, timezone, selected service and appointment, topic notes, policy acceptance, and technical booking and lifecycle records. For a paid booking, the declared private/business customer type, the confirmed Swiss eligibility, and the invoice address are also recorded. Short-lived hold, rate-limit, and security records are also used to prevent double-booking and abuse; rate limiting does not retain the raw network identifier.
Purpose & providers: Booking records are stored in a dedicated database on the Infomaniak-hosted service. The required appointment details are sent to Google Calendar to check availability and create a private calendar event and Google Meet link. Infomaniak email delivers the confirmation and calendar invitation. We do not sell booking data or disclose it to advertisers or analytics providers.
Retention: Expired holds are purged, and privacy-safe aggregated security events are retained for 90 days. Direct booking, contact, feedback, calendar, meeting-link, and provider-delivery data are minimized or deleted 365 days after the appointment ends, unless a dispute, request, or legal obligation requires a documented exception. Encrypted operational backup generations expire after 30 days. Accepted contract evidence, payment and recovery records, invoices, receipts, credit notes, and related accounting records are kept separately for 10 years from the end of the relevant financial year, without extending unrelated booking-data retention.
7. Session Content, Confidentiality & AI Tools
Information used to prepare or deliver a session can include topic notes, the content discussed, prompts, documents, examples, screen-shared material, personal disclosures, and other non-public business information. notagain.ai treats that information as confidential and uses it only to prepare and deliver the agreed service, manage the coaching mandate, or meet legal duties. It is not used for advertising, testimonials, or AI-model training.
A session is not recorded or transcribed without the explicit agreement of everyone involved. By default, notagain.ai does not retain a copy of material merely shown by screen sharing. A copy is retained only if you provide it for preparation or follow-up, both sides agree to a session record, or a documented dispute or legal duty requires it; the applicable purpose-based period then applies. Coaching confidentiality is contractual and is not the statutory professional secrecy or evidentiary privilege that may apply to a lawyer, doctor, or another legally privileged professional.
notagain.ai does not send session content or client material to a third-party AI provider on your behalf unless the provider, purpose, relevant international processing, and retention have been disclosed and the use has been agreed. If you choose to use your own account or tool, that provider's terms and privacy policy apply. Use anonymised or synthetic examples by default and do not enter personal, confidential, protected, employer, or client data unless you are authorised and the service and account setup are approved for that data. notagain.ai remains responsible for information it enters or handles itself.
8. Optional Feedback & Publication Permission
After a delivered session, notagain.ai may send one invitation to leave feedback to the email address used for the booking. If you use the private feedback link, we process the submitted rating, text, booking reference, and your publication choice for moderation and follow-up. Feedback is not published as a testimonial without the separate permission presented with the submission, and that permission can be withdrawn at any time. Withholding publication permission does not prevent private feedback.
9. Payments & Accounting
Paid bookings are processed through Stripe for hosted card and TWINT checkout and for refunds, and through AccountLee for QR-invoice prepayment and the resulting fiscal documents. Paid bookings are offered to clients in Switzerland only. Depending on the method you select, these providers receive identity and contact details, invoice address, the booked service, the CHF amount and its tax presentation, booking and hold references, and bounded payment, refund, or document identifiers. Card and TWINT credentials are entered on Stripe's hosted checkout; notagain.ai neither receives nor stores them.
Payment, invoice, receipt, credit-note, and related accounting records are retained for 10 years from the end of the relevant financial year, as Swiss commercial law requires. They are kept separately from booking data and do not extend its retention.
10. Recipients & Processing Abroad
Operational recipients are Infomaniak for hosting and email, Google for Calendar and Meet, Dropbox for an encrypted operational backup copy, Stripe for hosted checkout and refunds, and AccountLee for invoices and accounting records. A second encrypted backup is kept on a locally controlled destination. Infomaniak hosts the website, the booking database, and the email service in Switzerland.
Google, Dropbox, and Stripe operate international infrastructure and may therefore process data outside Switzerland, including in the European Union and the United States. Those transfers rely on the data-processing terms agreed with each provider, which incorporate the European Commission's Standard Contractual Clauses together with the Swiss addendum where no adequacy decision covers the destination. We do not sell personal data and do not disclose it to advertisers or analytics providers.
11. Security
Measures include transport encryption, restricted service and database access, server-side validation, replay and rate-limit controls, minimized operational logs, and encryption of booking backups before they leave the service host. No online service can guarantee absolute security.
12. Your Rights
Under the Swiss Federal Act on Data Protection and, where applicable, the GDPR, you may have rights to information, access, correction, deletion, restriction, objection, and data portability. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future; withdrawal does not affect the lawfulness of processing carried out before it. These rights can be limited by legal retention duties — in particular the 10-year accounting retention described in section 9 — or by overriding legitimate interests. Direct privacy requests to privacy@notagain.ai. You may also contact the Swiss Federal Data Protection and Information Commissioner and, where the GDPR applies to you, the supervisory authority of your habitual residence, place of work, or place of the alleged infringement in the EU or EEA.
13. Policy Changes
This policy is updated when the processing or the providers change. The version published here applies at the time you use the service. Each published version carries the identifier shown below, and the booking flow records which version you accepted.
Version 2026-08-31.1 · Effective 31 August 2026