Last updated: 14 July 2026

Privacy policy

AI-Karma is built on the principle of data minimisation: the safest way to protect your data is not to collect it. This page describes exactly what happens — including our uses of artificial intelligence.

The essentials in four points

• Your assessments stay in your browser (local storage). We keep no user database, there are no accounts, and we do not see your answers.
• No cookies, no advertising trackers, no advertising, no resale of data. The only measurement: aggregated, anonymous visit statistics, without cookies (details below).
• Two functions send data to a server, and only at your explicit request: report generation and website pre-analysis (details below).
• Controller: Jaurès Adjamonsi, Juriens (VD), Switzerland — contact@ai-karma.ch.

What happens in your browser

Your questionnaire answers, your assessments, your draft and your register of AI systems are saved in your browser's local storage, on your device. They are never transmitted to us automatically. You can delete them at any time (the “Delete” button, or clearing site data in your browser) — deletion is immediate and final, because no copy exists on our side.

Audience measurement

To know which pages are viewed, we use Vercel Web Analytics, a cookie-free audience measurement: nothing is written to or read from your device. The data collected is aggregated and anonymous — page viewed, referring page, approximate location (country, region or city), device and browser type. There is no persistent identifier: visits are deduplicated server-side using an ephemeral fingerprint, never stored as such and renewed every day, with no tracking from one site to another. The content of your assessments is never involved: this measurement counts page views, not what you do on them. Processing is carried out by Vercel, our host (see processors below).

Our uses of AI and server-side processing

Two functions, triggered only by a click on your part, send data to our server (hosted by Vercel), which passes it to the Claude API (Anthropic) for processing:

• KarmaWriter report: the company name, sector, headcount and your answers are transmitted for as long as it takes to write the report. We keep nothing after the response.
• Website pre-analysis: the URL you enter is transmitted; our server reads the public pages of that website for the duration of the analysis. We keep neither the URL nor the content after the response.

In accordance with Anthropic's policy applicable to the API, the data transmitted is not used to train the models. This processing involves a transfer to the United States (see processors below). If you want no transfer at all: do not use these two buttons — the whole assessment works without them, with a report generated locally from a template.

Processors

Sending the report by e-mail: your address is used for that send alone — we keep no list and send no newsletter. If you tick the optional box “AI-Karma may contact me”, a copy of the report is sent to contact@ai-karma.ch and we write to you about it at most once. Without that box, no copy reaches our inbox and your address is added to no list — but let us be precise: your address and the content of the message pass through Resend, our sending provider, which keeps the delivery log. As account holders we have access to it, and we use it for nothing other than the technical monitoring of sends.

Legal basis for these transfers (art. 16 FADP): Vercel is certified under the Swiss-U.S. Data Privacy Framework, a framework recognised by the Federal Council as providing adequate protection (in force since 15 September 2024); transfers to Anthropic, Resend and Upstash rely on the standard contractual clauses built into their data processing agreement (art. 16 para. 2 let. d FADP). We also limit these transfers to what is strictly necessary, without retention, and are working towards a Swiss hosting option (see our “Our own score” page).

Your rights (FADP)

You have the rights of access, rectification, erasure and objection provided for by the Federal Act on Data Protection (FADP). Since your assessment data never leaves your browser, you exercise them yourself first (local deletion). For any other request — for example concerning an e-mail you have sent us — write to contact@ai-karma.ch: we reply within 30 days. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).

Complaints and reporting

If content produced by our AI functions seems wrong or problematic to you (an inaccurate pre-analysis suggestion, the wording of a report), report it to contact@ai-karma.ch with the screenshot or export concerned: a human review is carried out and a reasoned reply is given to you within 30 days. As a reminder: no AI-Karma function takes a decision in your place — AI suggestions are always subject to your validation.

Security and changes

The server functions are protected by rate limiting, strict input validation and, for website pre-analysis, an anti-SSRF guard that resolves the host name and refuses any private or reserved address before opening the connection — protections verified by automated tests replayed at every evolution of the engine. Any change to this policy will be dated at the top of the page; substantial changes will be flagged on the home page.