Privacy Policy

Swiss Made Software + AI Partner

One Social is developed in Switzerland and meets the quality, transparency and origin guidelines of the Swiss Made Software initiative.

1. Controller

The controller for data processing on this website is:

Team Visual AG
Zurich, Switzerland
Email: info@teamvisual.ch

The controller determines the purposes and means of processing personal data.

2. Swiss Made Software Partnership and Use of AI Systems

The One Social platform, developed by Team Visual AG, is a partner of the Swiss Made Software initiative and Swiss Made Software + AI. As part of these partnerships, we are committed to adhering to the quality, transparency, and origin guidelines defined by Swiss Made Software.

A substantial part of the development and ongoing improvement of our software takes place in Switzerland. At least 60% of the development and operating costs for the platform are incurred in Switzerland.

As part of our services, modern AI systems are used to provide or support features within the platform, in particular Google Gemini, OpenAI, models accessed via OpenRouter, and fal.ai (for image and video generation). We ensure that the use of such systems is in accordance with applicable data protection regulations and the principles of the Swiss Made Software initiative.

Data processing takes place exclusively within the scope of the respective use of our tool and in accordance with the purposes described in this Privacy Policy.

3. Collection and Storage of Personal Data

a) Registration and Use of the Service

When registering for our service, the following data is collected:
• Email address (mandatory)
• Name (mandatory)
• Password (stored encrypted)
• Usage data (created posts, uploaded media, Brand Voice settings)
• IP address and timestamp of registration

Legal basis: Processing is based on your consent (Art. 6 Para. 1 lit. a GDPR) or to fulfill the contract (Art. 6 Para. 1 lit. b GDPR).

Purpose: Data processing is carried out to provide the services, manage your account, and fulfill the contract.

b) Social Media Connections

When connecting to social media platforms (Instagram, TikTok, LinkedIn), we store:
• OAuth access tokens (encrypted)
• Platform user IDs
• Token expiration times

Purpose: Automatic publishing of generated posts to your connected social media accounts. Tokens are used exclusively for actions you have authorized.

c) AI-Generated Content

To generate images and videos, we use external AI services. The following is transmitted:
• Your entered prompts
• Uploaded reference images (if used)
• Brand Voice information

Generated content is stored on our servers and accessible only to you.

d) Payment Information

Payments are processed via Stripe. We do not store complete credit card data. Only subscription status and transaction IDs are stored.

For more information, see Stripe's privacy policy: https://stripe.com/privacy

4. Disclosure of Data to Third Parties

We only disclose your data to third parties if:
• You have given explicit consent (Art. 6 Para. 1 lit. a GDPR)
• This is necessary to fulfill the contract (Art. 6 Para. 1 lit. b GDPR)
• There is a legal obligation (Art. 6 Para. 1 lit. c GDPR)

Third-party providers used (processors):
• Base44 (Platform & hosting infrastructure)
• Stripe (Payment processing, Switzerland/EU/US)
• n8n (Workflow automation)
• Google Gemini (AI systems for content generation and platform features)
• OpenAI (AI systems for content generation, USA)
• OpenRouter (AI model routing, USA)
• fal.ai (AI image and video generation, USA)
• Social media platforms (Instagram, TikTok, LinkedIn) - only with active connection

Where required, we conclude data processing agreements with these providers.

4a. International Data Transfers

Some of our processors (e.g. Stripe, Google, OpenAI, OpenRouter, fal.ai) may process data in countries outside Switzerland and the EU/EEA, including the USA. In such cases, we ensure an adequate level of protection through appropriate safeguards, in particular the EU Standard Contractual Clauses (SCC) and the corresponding Swiss addendum, or by transferring data only to recipients in countries recognised as providing adequate protection (Art. 16 f. revFADP / Art. 44 ff. GDPR).

5. Cookies and Tracking

Our website uses technically necessary cookies for the functionality of the service:
• Session cookies for authentication
• Language settings
• Security-related cookies

No third-party tracking cookies are used. Disabling cookies may lead to functional limitations.

6. Storage Duration

Your data is stored as long as your account is active. After deletion of your account, all personal data will be completely deleted within 30 days, unless legal retention obligations exist (e.g., 10-year tax retention periods for invoice data).

7. Your Rights

You have the following rights under GDPR and Swiss data protection law:

Right of access (Art. 15 GDPR): You can request information about your stored data.

Right to rectification (Art. 16 GDPR): You can request correction of incorrect data.

Right to erasure (Art. 17 GDPR): You can request deletion of your data (account deletion in settings or via email).

Right to restriction (Art. 18 GDPR): You can request restriction of processing of your data.

Right to data portability (Art. 20 GDPR): You can receive your data in a structured, common format.

Right to object (Art. 21 GDPR): You can object to the processing of your data.

Withdrawal of consent: You can withdraw any consent given at any time.

To exercise your rights, contact us at: info@teamvisual.ch

8. Right to Complain

You have the right to complain to a supervisory authority:

Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern
Tel: +41 (0)58 462 43 95
Email: info@edoeb.admin.ch

EU/EEA: The competent data protection authority in your country

9. Data Security

We implement technical and organizational security measures to protect your data:
• SSL/TLS encryption of the website
• Encrypted storage of sensitive data
• Regular security updates
• Access restrictions and authentication
• Regular backups

10. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy to comply with changed legal situations or changes to the service. The current privacy policy is always available on our website.