This Privacy Notice for Sprep amp. GmbH ("we," "us," or "our") describes how and why we collect, store, use, and share your personal information when you use our services ("Services"), including when you visit www.sprep.ch or use the Sprep web application. Sprep is an AI-powered platform that transforms how professionals consume and share complex information by generating podcast-style dialogues from your documents.
Questions or concerns? Contact us at info@sprep.ch.
1. WHAT INFORMATION DO WE COLLECT?
Information you provide to us
We collect personal information you voluntarily provide when you register or use our Services. This includes:
- Email address and password (for account creation)
- Job title and professional context (optional, collected during onboarding)
- Documents and source materials you upload to generate podcasts
- Feedback and messages you send us directly
Payment data
If you purchase a subscription, payment data (card details, billing address) is collected and stored directly by our payment processor, Paddle. We do not store payment instrument details ourselves. Paddle's privacy policy: paddle.com/legal/privacy.
Voice data
If you use our voice features, we collect any voice samples you provide and any resulting voice models ("Voice Data"). Voice Data may constitute sensitive personal information under applicable law. We collect and process Voice Data only with your explicit consent, given when you create or upload a voice. You may withdraw consent at any time by deleting the voice in your account settings or by contacting us at info@sprep.ch.
We process Voice Data solely to deliver the voice feature you requested. We do not use Voice Data to train general-purpose AI models and do not share Voice Data for advertising or marketing purposes.
Information collected automatically
When you use our Services we automatically collect:
- Log and usage data (IP address, browser type, pages visited, timestamps, error reports)
- Device data (device type, operating system, browser configuration)
This data is used for security, performance monitoring, and — with your consent — analytics.
2. HOW DO WE PROCESS YOUR INFORMATION?
We process your personal information to:
- Create and manage your account and organisation
- Deliver the Services you have requested (podcast generation, transcription, translation, audio)
- Process payments and manage your subscription
- Analyse how the Services are used to improve them (with your consent)
- Respond to your support requests and feedback
- Comply with legal obligations and protect our rights
3. WHAT LEGAL BASES DO WE RELY ON?
We process your personal information only when we have a valid legal basis under the GDPR and the Swiss Federal Act on Data Protection (FADP):
- Performance of a contract — processing necessary to provide the Services you have subscribed to.
- Consent — analytics tracking via Mixpanel and optional features such as voice cloning. You can withdraw consent at any time.
- Legitimate interests — security monitoring, fraud prevention, product improvement, where these do not override your rights and freedoms.
- Legal obligation — where required by law (e.g., financial record-keeping).
4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?
We share personal information only in the following situations:
- Service providers — infrastructure (Supabase), payment processing (Paddle), analytics (Mixpanel), and AI processing (Google). See section 7 for detail on AI providers.
- Business transfers — in connection with a merger, sale, or acquisition of all or part of our business.
- Legal requirements — where required to comply with applicable law, a court order, or government authority.
We do not sell your personal information.
5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
The Services may contain links to third-party websites or services. We are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party sites you visit.
6. DO WE USE COOKIES AND TRACKING TECHNOLOGIES?
We use cookies and similar technologies for session security, preference storage, and usage analytics (with your consent).
Mixpanel (usage analytics)
With your explicit consent, we use Mixpanel to track how you interact with the Services (pages visited, features used) in order to improve the product. Mixpanel processes usage data on servers in the United States under Standard Contractual Clauses (SCCs).
You can grant or withdraw analytics consent at any time via the cookie banner displayed when you first use the Services. Choosing "Essential only" immediately disables all Mixpanel tracking.
Mixpanel's privacy policy: mixpanel.com/legal/privacy-policy
We do not use Google Analytics or serve advertising cookies.
7. DO WE OFFER AI-BASED PRODUCTS?
Yes. All AI processing in Sprep — content extraction from uploaded documents, topic curation, transcript generation, translation, and text-to-speech audio — is performed exclusively by Google Cloud AI (Gemini models).
When you upload documents or generate content, the text of those documents is transmitted to Google's servers for processing. Google processes this data in the United States under Standard Contractual Clauses (SCCs). Google's privacy practices: policies.google.com/privacy.
Important: Avoid uploading documents that contain sensitive personal data of third parties unless you have a legal basis to share that data with Google for AI processing.
We do not use your content to train general-purpose AI models. We do not use OpenAI, ElevenLabs, or other AI providers for core processing.
8. HOW LONG DO WE KEEP YOUR INFORMATION?
- Account and profile data — until you delete your account.
- Uploaded documents and generated content — retained while your account is active to enable ongoing re-use and re-generation.
- Voice data — until you delete the voice or your account, whichever occurs first.
- Payment records — for the period required by applicable accounting and tax law (typically 10 years under Swiss law).
- Analytics data (Mixpanel) — until you withdraw consent or delete your account.
9. HOW DO WE KEEP YOUR INFORMATION SAFE?
We implement appropriate technical and organisational measures to protect your personal information: encrypted data transmission (TLS/HTTPS), row-level access controls, and secure cloud infrastructure (Supabase, Google Cloud Storage). No electronic transmission or storage system is 100% secure; we cannot guarantee absolute security.
10. DO WE COLLECT INFORMATION FROM MINORS?
The Services are intended for business users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, contact us at info@sprep.ch and we will delete it promptly.
11. WHAT ARE YOUR PRIVACY RIGHTS?
Under the GDPR and Swiss FADP, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Data portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
You can delete your account directly in the app (Organisation Settings → Delete Account). For data export requests or to exercise any other right, email info@sprep.ch with the subject "Privacy Request". We will respond within 30 days.
You have the right to lodge a complaint with your supervisory authority. In Switzerland: Federal Data Protection and Information Commissioner (FDPIC). In the EU, contact your national data protection authority.
12. CONTROLS FOR DO-NOT-TRACK FEATURES
We do not respond to browser Do-Not-Track signals. You can control all analytics tracking via the consent banner in the Services. Selecting "Essential only" disables Mixpanel immediately and permanently until you change your preference.
13. DO WE MAKE UPDATES TO THIS NOTICE?
We may update this Privacy Notice periodically. The "Last updated" date at the top indicates when changes were last made. For material changes, we will notify you by email or via a notice in the Services. Continued use of the Services after notification constitutes acceptance of the updated notice.
14. HOW CAN YOU CONTACT US?
For questions, complaints, or requests regarding this Privacy Notice:
Sprep amp. GmbH
Eimatt 14a, 6372 Ennetmoos, Switzerland
15. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?
- Delete your account — Organisation Settings → Delete Account. This permanently removes your account, organisation, all podcasts, transcripts, audio files, and cancels your subscription.
- Request a data export — email info@sprep.ch with subject "Data Export Request". We will provide a copy of your data within 30 days.
- Withdraw analytics consent — use the consent banner in the app.