Privacy Policy

1Controller

Conradius is responsible for CaiLook (address see legal notice). Privacy contact: ch.conradius@gmail.com or via Help.

For what happens in the reading itself, the card reader you book with is additionally responsible.

The Swiss Federal Act on Data Protection (FADP) applies. If you live in the EU, the rights under the GDPR also apply.

2Which data we process

• Account: name or nickname, e-mail, language, time zone.
• Bookings: offer, appointment, price, your question to the card reader, status, cancellations and refunds.
• Payment: you enter your card details directly with Stripe. We only see the amount, status and a payment number.
• Messages between you, the card reader and Cai as well as help and emergency reports are stored.
• Video: conversations run live via Daily.co and are not recorded. We only store who was in the room when (for «refund in case of technical problems»).
• Reviews (stars and text).
• The card reader's notes about you (visible only to her).
• Technical: IP address, browser, page views; cookies for login and security. With Google Analytics we measure how the site is used.

The questions you ask can be very personal (e.g. health, relationships). Only write what you want to share.

3Purposes

• Providing booking, payment, video room and messages (contract).
• Sending e-mails about bookings, reminders and reviews.
• Quality and safety: reviewing card readers, detecting abuse and emergencies, triggering refunds correctly (legitimate interest).
• Accounting and legal obligations.
• Improving the site (statistics).

We do not sell data and do not create advertising profiles.

4Who receives data

• The card reader you book with: name, question, appointment, messages.
• Stripe (payment, subscriptions, refunds).
• Daily.co (video room, live).
• OpenAI (AI behind Cai: answers questions, helps review card readers and texts). We only send what is necessary for the answer.
• E-mail delivery via our mail server or hosting provider.
• Google (Analytics).
• Pushover and CallMeBot only for internal emergency alerts to the operator (short text of the report).
• Authorities, where required by law.

5Abroad

Stripe, Daily.co, OpenAI, Google and Pushover are partly based in the USA. Data is transferred there only with appropriate safeguards (e.g. Swiss-U.S. or EU-U.S. Data Privacy Framework or standard contractual clauses).

6How long

• Account and messages: as long as you have an account; after that we delete them unless there is an obligation to retain them.
• Booking and payment data: 10 years (accounting obligation).
• Reviews: as long as the card reader's profile exists; anonymised on request.
• Emergency reports: as long as necessary for clarification.

7Your rights

You can request information, have incorrect data corrected and data deleted, object to processing and request your data to be handed over. Write to us for this (contact above). You can also lodge a complaint with the FDPIC (Switzerland) or the data protection authority of your EU country.

8For card readers

• We additionally process: profile (artist name, photo, text, offers, times), code test and review conversation with Cai (incl. an assessment of whether answers were copied from an AI), reviews, statistics, earnings.
• For payouts, Stripe collects your identity and bank details directly (Stripe Connect). CaiLook does not see them in detail.
• You may use customer data you receive via CaiLook only for the reading and must treat it confidentially.