Privacy
Your data, setting by setting
What leaves, to whom and where depends on the setting chosen for the case: No AI, Minimal AI or AI assistant. This page sets it out for each one.
Provisional version, updated on 12 October 2026: this text has not yet been reviewed by a lawyer.
1. In short
| No AI | Minimal AI | AI assistant | |
|---|---|---|---|
| Who processes | Concilim | Concilim | Concilim, and the AI provider on Concilim's behalf |
| Where | in Geneva | in Geneva | the case in Geneva; the texts the AI reads, with OpenAI, in the United States; if this service is down, Infomaniak, in Geneva |
| Emails | Resend, in the United States | Resend, in the United States | Resend, in the United States |
| What goes to an AI provider | No text goes to an AI provider. | this setting is not offered in this country | what you write to the assistant, what you say there about the other person, and the agreement you both see |
| To whom | — | this setting is not offered in this country | OpenAI, in the United States; if this service is down, Infomaniak, in Geneva |
| Names | — | replaced by letters, once known | replaced by letters, once known; the other person's name written before they arrive is sent as is |
| Who chooses | the person who opens the case | each person for themselves | the person who opens the case; the invited person can refuse it for both; either can switch it off |
| What the provider keeps | — | not yet confirmed in writing | not yet confirmed in writing |
| How long | until you ask for deletion; a signed letter stays | until you ask for deletion; a signed letter stays | until you ask for deletion; a signed letter stays |
No AI
- Who processes
- Concilim
- Where
- in Geneva
- Emails
- Resend, in the United States
- What goes to an AI provider
- No text goes to an AI provider.
- To whom
- —
- Names
- —
- Who chooses
- the person who opens the case
- What the provider keeps
- —
- How long
- until you ask for deletion; a signed letter stays
Minimal AI
- Who processes
- Concilim
- Where
- in Geneva
- Emails
- Resend, in the United States
- What goes to an AI provider
- this setting is not offered in this country
- To whom
- this setting is not offered in this country
- Names
- replaced by letters, once known
- Who chooses
- each person for themselves
- What the provider keeps
- not yet confirmed in writing
- How long
- until you ask for deletion; a signed letter stays
AI assistant
- Who processes
- Concilim, and the AI provider on Concilim's behalf
- Where
- the case in Geneva; the texts the AI reads, with OpenAI, in the United States; if this service is down, Infomaniak, in Geneva
- Emails
- Resend, in the United States
- What goes to an AI provider
- what you write to the assistant, what you say there about the other person, and the agreement you both see
- To whom
- OpenAI, in the United States; if this service is down, Infomaniak, in Geneva
- Names
- replaced by letters, once known; the other person's name written before they arrive is sent as is
- Who chooses
- the person who opens the case; the invited person can refuse it for both; either can switch it off
- What the provider keeps
- not yet confirmed in writing
- How long
- until you ask for deletion; a signed letter stays
2. Who processes, and why
The data is processed by the publisher of the service, named in the legal notice. For any question about your data, write to us through the contact page.
- The case: opening it, moving the agreement forward, keeping what you write in it.
- Security: limiting abuse and detecting bots.
- Signing in: sending you a one-time code by email.
- Legal obligations: what the law requires to be kept (evidence, accounting).
Legal bases (UK GDPR, art. 6): performance of the contract for the case and signing in (art. 6.1.b); legitimate interest for security (art. 6.1.f); legal obligation for the rest (art. 6.1.c).
- Your account
- Your email address, the name you give, your sign-in sessions.
- The case
- What you write in it, the agreement, approvals and signatures; with the assistant, your exchanges with it.
- Technical data
- The IP address during sensitive actions (opening a case, verifying an address), the browser, anti-abuse logs.
- Audience measurement
- No third-party audience measurement, no advertising cookie, no social network pixel.
3. What leaves, and where
The application and the data are hosted in Geneva. Emails go through a provider in the United States, which receives the address and the name of the person inviting. If AI help is chosen, the texts it reads go to the provider named here, in the country named here; without AI, no text goes to an AI provider.
- Infomaniak Network SA, in Geneva: hosting of the application and the data, and incoming emails.
- Resend, in the United States: outgoing emails (sign-in codes, invitations, notices).
- OpenAI, in the United States; if this service is down, Infomaniak, in Geneva: the AI assistant.
- Infomaniak, in Geneva: the AI assistant, in a case opened by an organisation that chose hosting in Switzerland.
The providers the list places in the United States receive your data there. For the “AI assistant”, OpenAI processes your texts under its data processing addendum, which is part of its terms: the transfer of data from the United Kingdom rests on standard contractual clauses supplemented by the UK Addendum. OpenAI data processing addendum. For e-mails, we do not yet have written confirmation of the safeguards that govern this transfer; you can ask us for them through the contact page.
4. Setting by setting
No AI
No AI reads what you write.
- Who processes
- Concilim
- Where
- in Geneva
- What goes to an AI provider
- No text goes to an AI provider.
- Who chooses
- the person who opens the case
- How long
- until you ask for deletion; a signed letter stays
Minimal AI
An AI fills in the fields of a form from the words you give it, when you ask. You reread the form before sending it.
- Who processes
- Concilim
- Where
- in Geneva
- What goes to an AI provider
- this setting is not offered in this country
- Who chooses
- each person for themselves
- How long
- until you ask for deletion; a signed letter stays
AI assistant
You write privately to an AI, which also reads the agreement you build together. The person you invite can refuse it, for both of you.
- Who processes
- Concilim, and the AI provider on Concilim's behalf
- Where
- the case in Geneva; the texts the AI reads, with OpenAI, in the United States; if this service is down, Infomaniak, in Geneva
- What goes to an AI provider
- what you write to the assistant, what you say there about the other person, and the agreement you both see
- Who chooses
- the person who opens the case; the invited person can refuse it for both; either can switch it off
- How long
- until you ask for deletion; a signed letter stays
5. The other person's data
What you write about the other person to your assistant goes to its provider. They are informed of this when they arrive, or by the invitation email Concilim sends them.
6. Names replaced
Your names and e-mail addresses are replaced by letters before each request to the model, and restored on display. The model reads the facts of the dispute — amounts, dates, what happened. The other person's name, if you write it before they arrive, is replaced by nothing: write “the other”.
7. What the AI does, and what the provider keeps
The assistant answers only the person who writes to it. Minimal AI suggests the words of a form, which you reread before sending it.
- OpenAI keeps for up to 30 days, to monitor abuse, logs that may contain your texts, unless the law requires more.
- Infomaniak: We do not yet have written confirmation of what this provider keeps of your texts.
8. No automated decision
No decision is made by the software alone: every sentence of the agreement is accepted by both people.
9. Safety signals
If a text mentions a danger, a category and a date are sent to Concilim, never your text.
10. How long
We keep your account and your cases until you delete them. A signed letter is not deleted: it also binds the other person, and it must remain possible to verify it.
You can yourself delete a case that is not yet signed, and your account.
Closing your account deletes your e-mail address, not your cases: the other person keeps their access to them.
Our backups are kept for 30 days: what you delete may remain in them until then.
The server's technical logs are kept for 14 days.
11. Your rights
In the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 give you these rights:
- Access to your data (art. 15).
- Rectification of inaccurate data (art. 16).
- Erasure (art. 17), within the limits of what the law requires to be kept.
- Restriction of processing (art. 18).
- Portability, in a structured, commonly used and machine-readable format (art. 20).
- Objection to processing based on legitimate interest (art. 21).
- Withdrawal of consent at any time, without effect on what has already been done.
If you believe your rights are not respected, you can lodge a complaint with Information Commissioner's Office (ICO).
To exercise these rights, write to us through the contact page.
12. Security, cookies, updates
Encryption in transit (TLS), hashed secrets (verification codes, session tokens), separated private channels, daily backups.
Only cookies needed for the service: the sign-in session, the guest session, the language. No advertising cookie, no third-party audience cookie.
This page may change; the date of its last update is written at the top.