Privacy Policy

cmwebs is an AI Automation Agency based in Lugano, Switzerland. We build automated workflows for businesses using Claude AI, Zapier, and third-party platforms.

For any privacy-related questions or requests, contact us at: cmwebsagency@gmail.com

We collect the following personal data when you interact with our website or services:

Through the contact form:

• Your name
• Your email address
• Your business name or website
• Your selected plan and problem description

Through service delivery:

• Business email addresses and account names needed to connect third-party platforms (Gmail, Shopify, Google Business Profile, etc.)
• Business performance data accessed via connected platforms (email content, order data, review content), used solely to run the agreed automations

We do not collect: payment card details, passwords, government IDs, or sensitive personal data.

We use your personal data exclusively for the following purposes:

• To respond to your contact form inquiry and discuss our services
• To set up and maintain the automations included in your plan
• To send invoices, reports, and service communications
• To comply with applicable legal obligations in Switzerland

We do not use your data for marketing to third parties, profiling, or any purpose other than delivering the agreed service.

In delivering our service, we use the following third-party platforms that may process your data:

• Zapier, workflow automation platform. Your data passes through Zapier to connect your platforms. Privacy policy: zapier.com/privacy
• Anthropic (Claude AI), AI model used to process content within automations. Privacy policy: anthropic.com/privacy
• Google (Gmail, Sheets, Drive, My Business), connected via OAuth for email and data automations. Privacy policy: policies.google.com
• Shopify, connected for e-commerce automations. Privacy policy: shopify.com/legal/privacy
• Mailchimp, Notion, Typeform, Otter.ai, connected depending on the automations included in your plan

Each of these platforms has its own privacy policy and data processing terms. By using our service, you acknowledge that your data may be processed by these platforms in accordance with their respective policies.

cmwebs does not operate its own database or server infrastructure. Your data is processed through Zapier and the connected platforms listed above.

Contact form submissions are received by email and retained for as long as the business relationship is active or as required by Swiss law.

Upon termination of service, we disconnect all OAuth connections and cease any automated access to your accounts within 5 business days.

We retain invoices and contractual documents for a minimum of 10 years as required by Swiss commercial law.

We take reasonable technical and organizational measures to protect your data, including:

• Using OAuth for all platform connections, we never store your passwords
• Limiting access to client data strictly to what is required to run the agreed automations
• Not storing sensitive credentials in plain text

However, no internet-based service can guarantee absolute security. We recommend that clients use strong passwords and enable two-factor authentication on all connected platforms.

Under Swiss data protection law (nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right of access, request a copy of the personal data we hold about you
• Right to rectification, ask us to correct inaccurate data
• Right to erasure, request deletion of your personal data, subject to legal retention obligations
• Right to restriction, ask us to limit how we process your data
• Right to object, object to processing of your data in certain circumstances
• Right to data portability, receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at cmwebsagency@gmail.com. We will respond within 30 days.

The cmwebs website does not use tracking cookies, analytics platforms, or advertising pixels. No personal data is collected automatically when you browse this site.

If this changes in the future, this Privacy Policy will be updated and visitors will be notified via a cookie consent banner.

Our services are intended exclusively for businesses and individuals aged 18 or over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us immediately at cmwebsagency@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. For significant changes, we will notify active clients by email.

Continued use of our services after any update constitutes acceptance of the revised policy.

This Privacy Policy is governed by Swiss law, in particular the Federal Act on Data Protection (nDSG). Any dispute relating to this policy shall be subject to the jurisdiction of the courts of Lugano, Canton Ticino, Switzerland.