Privacy notice
At a glance: our website code adds no advertising or analytics trackers, but the hosting platform measures traffic; security and sign-in services are involved; the planner sends enquiries only when you submit them; email and partner accounts involve server-side processing.
Who is responsible?
AIRvertize by Cosmodama GmbH
Baarerstrasse 135, 6300 Zug, Switzerland
Authorised representative: Christian Hölscher
Email and privacy enquiries: info@airvertize.com.
Website, hosting and restricted access
This website is provided through OpenAI Sites using Cloudflare infrastructure. Requests transmit technical data such as your IP address, request time, requested address and browser information to the infrastructure serving the website. This enables delivery, access control, troubleshooting and protection against abuse. The current preview is restricted to invited users and uses the platform’s sign-in and access controls. The partner application receives the authenticated account identifier and email address. According to the official Sites documentation, the platform automatically records traffic and provides counts of unique visitors and page views. Sites currently offers no configurable data residency, including for its database, files and logs. The visitor-counting method, identifiers or storage involved, retention and available controls still need clarification. Provider-side logs, authentication storage, processing countries and contractual arrangements also require confirmation before public launch.
Headquarters location · Google Maps and Street View
Our contact-details page offers a Google Street View building view and a Google map of Baarerstrasse 135, Zug. The address and our contact details work without loading Google. The embed connects to Google only after you select “Show building” or “Show map”. Activating a view is optional and does not subscribe you to marketing.
Once activated, Google receives technical data including your IP address, browser/device information, request time and the referring website origin. Google may use cookies or other identifiers and associate activity with a Google account, depending on your Google settings. Google processes data internationally, including in the United States. Its Privacy Policy explains the provider’s processing, retention and controls. The provider for users in Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Permission applies only to the currently open page and is not saved in a cookie or browser storage. “Unload Google view” removes the embed and stops further requests from it; it cannot undo data already transmitted or delete cookies set by Google. Reloading the page resets the choice. The direct Google Maps link opens Google’s own service. Where consent is required under applicable law, your activation provides consent to this optional connection; you can stop it at any time using the unload control.
Campaign Planner and contact form
Campaign selections and calculations are processed in page memory. When you send a campaign enquiry, your selected media plan and optional phone number are sent with your contact details through Resend to info@airvertize.com. The server recalculates the demo estimate and creates a PDF with illustrative asset images. If you choose an email copy, the enquiry and PDF are also sent to the email address you enter. After Resend accepts the enquiry, the website stores the contact details, message, reference, selected campaign, server-calculated estimate, copy status and internal lead status in Cloudflare D1 so authorised AIRvertize users can follow up. The generated PDF itself is not stored in the database. The confirmation PDF and reference are also kept in this browser tab’s session storage so you can download them after refreshing; closing the tab clears that browser copy. Downloaded files and email copies remain under your control.
When you select “Send enquiry” in the contact form, your name, email address, optional company, enquiry type and message are sent to our website server and forwarded through Resend to info@airvertize.com. Your email address is used as the reply-to address. We use these details to respond to your campaign or partnership enquiry. For Campaign Builder submissions, the contact handler saves the enquiry and calculated media plan in the protected campaign-lead area after the delivery provider accepts the main email. Other contact-form messages are not saved in the website database or intentionally logged. If direct sending is unavailable, the button is labelled “Open email draft”; you must then send the draft yourself from your email application.
To limit abuse, the server derives an hourly identifier from your signed-in account ID, or your IP address for anonymous requests. It stores a cryptographic hash, attempt count and expiry, without the raw identifier or message content, in the website database. Records expire within two hours and are removed on the next valid, configured submission; this is not a fixed-time automatic deletion service. The planner’s estimates are illustrative and do not involve automated decisions with legal or similarly significant effects.
Form email delivery · Resend
Resend (Plus Five Five, Inc., United States) processes the contact and message details needed to deliver your enquiry, together with delivery metadata. According to its documentation, email and log data is retained for 30 days on the Free plan. Stored data is held in the United States even when an EU sending region is selected. Its data processing addendum incorporates EU Standard Contractual Clauses, with provisions for Swiss transfers. See Resend’s processing information and data processing addendum. The account-specific agreement and company allocation must be retained and reviewed before public launch. The website sends plain-text enquiries, with PDF attachments for Campaign Builder submissions, and adds no tracking pixels. Provider-level tracking settings remain part of the launch review.
Email enquiries · IONOS
Email sent to info@airvertize.com is received in an IONOS mailbox. We use the sender and contact details, message, attachments and correspondence history to answer your enquiry and coordinate the requested campaign or partnership. IONOS processes the mailbox data as the email service provider. Please do not send passenger lists, sensitive personal information or unrelated third-party data. The account confirms that the IONOS data processing agreement was concluded on 8 October 2026. The supplied agreement (version 1.3, March 2026) and its public annexes have been reviewed. Annex 1 expressly covers email products and specifies deletion within seven days after customer deletion or the end of the contract, and email-service logs for up to 28 days; separately purchased email archiving has distinct rules. These provider deadlines do not determine when we should delete an enquiry. The precise mailbox product, applicable company contract allocation and our own retention schedule remain to be finalised.
Partner portal
The portal stores the signed-in account identifier and email, company and contact profile, optional phone and notes, submitted media information, enquiry messages and uploaded files. Its database uses Cloudflare D1 and its file storage uses Cloudflare R2 through the hosting platform. Application access checks limit partner records to their owner and the AIRvertize administrator. An enquiry addressed to a partner is visible to that partner and the administrator. Data is used to manage media portfolios and coordinate enquiries. Unlike the public planner, this data is stored on the server. The portal also contains submitted Campaign Builder leads and campaign orders created after customer conversations, including contact details, messages, selected placements, calculated budget and contact estimates, internal lead status and notes. Saved revisions and records of PDFs emailed from the workspace are retained with the order. Revised plans are delivered through Resend and copied to info@airvertize.com. Access is limited to authorised AIRvertize administrators. The current portal does not implement automatic expiry or a self-service account-deletion function; a retention and deletion process must be established before operational use.
Purposes and legal framework
Swiss data protection law applies to our processing. Where the EU GDPR applies, the proposed legal bases are Article 6(1)(b) for steps requested by a person before a contract and for that person’s contract; Article 6(1)(f) for business-contact communication and the legitimate interests in operating, securing and coordinating our services; and Article 6(1)(c) for applicable legal obligations. These allocations and any balancing of interests must be documented for the final setup. Processing that requires consent will only be introduced with an appropriate consent mechanism. Submitting an enquiry is not a subscription to marketing.
Internal CRM, pitch creation and creative files
Authorised AIRvertize administrators may store business contact details, company profile information, communication notes, sales stage, next actions, campaign requirements and files in the protected admin workspace. The workspace can generate tailored campaign proposals from selected media plans. If a customer or prospect logo is uploaded, it is placed into clearly illustrative advertising mock-ups in the proposal PDF. Files are stored in Cloudflare R2 and structured records in Cloudflare D1. Proposal emails are delivered through Resend and copied to info@airvertize.com; the workspace records the recipient, sending time and provider message identifier.
Resend delivery status can be retrieved by an administrator. Open or click information is available only if the relevant tracking is enabled in the Resend account and generated by the recipient’s email client; such signals can be incomplete or misleading. Before public outreach begins, AIRvertize must define its legal basis, recipient information, retention period and objection process for prospecting and any open or click measurement. The prospect radar contains company-level business information and directional AIRvertize estimates. On administrator request, it may retrieve publicly available website metadata and generic business contact addresses from a listed company website; it does not automatically send outreach or intentionally collect private consumer data. The current private preparation version does not expose a public client upload link.
Connected company email and file storage
Authorised administrators can connect company Google Workspace accounts to the restricted business workspace. After connection, Gmail synchronisation imports the business correspondence selected by the workspace’s filters and matches it to CRM contacts; messages can be sent when an administrator initiates or schedules authorised outreach. The Drive connection archives company research, contact records, communication and campaign files in the designated company folder. These integrations process business contact details, message contents and attachments, and store connection credentials with server-side protection. Disconnecting removes the saved connection credentials; it does not delete messages or files already held in Gmail, Drive or the CRM. The Google grant can also be revoked through the connected Google Account. In Staging, imported Gmail messages are limited by the configured test label and Drive uses a separate staging folder.
Retention and international processing
Unsaved planner choices remain in the browser. Submitted Campaign Builder enquiries remain in the protected campaign-lead database for follow-up; downloaded enquiries remain under your control. The lifetime of the observed security cookie is described above. Mailbox, portal, infrastructure-log and backup retention periods are not yet approved for this preview. The final rules must distinguish open enquiries, concluded matters and records subject to legal retention duties, and provide deletion or anonymisation when the purpose ends. Cloudflare states that cookie data may be processed in the United States by default. The full list of recipient countries, relevant provider entities and the transfer safeguards applicable to our actual hosting and email contracts remain open. We do not currently claim Swiss-only or EU-only hosting, or that a particular transfer agreement has been verified.
Your choices and rights
Contact info@airvertize.com for information about your personal data or requests for access, correction or deletion. Depending on the applicable law and its conditions, rights can also include restriction, portability and objection. Where processing relies on consent, you can withdraw it for the future. We may need proportionate information to verify your identity. You can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC); where the GDPR applies, you may lodge a complaint with the competent EU supervisory authority. Required form fields are marked; without the information needed for an enquiry or account, we cannot provide the corresponding function.