Privacy policy

1. Controller

KikoSpace AG, Hauptstrasse 35, 8750 Glarus, Switzerland.

Privacy contact: d.kryvashei@zolli.ai

2. What data we process

Contact and demo requests (demo, pilot, Copilot access): name, email address, phone number, company, role, and where applicable border crossing and language. Purpose: handling your request and getting in touch.

Tariff-number tool: your goods description and — for emailing the result — email address, name and company. Goods descriptions are sent to AI models for classification; please do not enter personal data there.

Operational and security data: IP address, browser information and access time (hosting logs, bot detection, rate limiting). Purpose: secure operation of the website and abuse prevention.

Marketing emails: if you opted in on the tariff-number tool, we occasionally send you updates about Zolli and customs topics by email. You can withdraw this consent at any time — via the unsubscribe link in the email or by contacting us.

Customer relationship (CRM): details from the tariff-number tool (the email for the result), the demo and the pilot request are also stored in KikoSpace AG's own CRM system on servers in Switzerland — together with your goods description, the result, the identifier of your visit to the tool and, where present, the campaign parameters (see “Cookies and similar technologies”). Purpose: handling your request, contacting you about Zolli and organising our customer care. Legal basis: our legitimate interest in initiating a business relationship; for marketing emails, your consent.

3. Job applications

If you apply through the form on our careers page, we process the details you enter there: name, e-mail address, the role you selected, the link you provide (a LinkedIn profile, CV or portfolio, for example) and your message.

We use them solely to assess your application and to communicate with you; the basis is the initiation of an employment or contractor relationship at your request. Providing the data is voluntary — without your name and e-mail address, however, we cannot process the application.

The application reaches us by e-mail (for the mail provider see the section “Service providers (processors)”). We do not pass it on to third parties. Applications we do not pursue are deleted no later than six months after the process ends, unless you agree to longer storage.

Please do not send us sensitive personal data, such as details about health, religion or trade-union membership.

4. Analytics and session recordings

We use PostHog (data hosted in the EU) for usage statistics and product improvement. This includes session recordings (session replays): page views, clicks, scrolling and text entered into form fields (except passwords) may be recorded.

When you submit a form, we link your use of the website to your email address.

You can object to analytics at any time — see the “Objection (opt-out)” section.

5. Cookies and similar technologies

We use cookies and localStorage to enable analytics (browser recognition, session attribution). We do not use third-party advertising trackers.

Campaign parameters: if you reach zolli.ai through a link with campaign parameters (such as utm_source or the gclid click ID of a Google ad), we store these parameters for 90 days in the cookie “zolli_attr”. If you submit a form during that time, we copy them into our CRM so that we know which campaign brought you to us. The opt-out below covers analytics only; you can delete or block this cookie in your browser settings.

You can refuse this storage: via the opt-out below or through your browser settings (blocking or deleting cookies and site data).

6. Service providers (processors)

We use the following service providers:

• Vercel Inc., USA — hosting (servers in the Frankfurt region) and bot protection.
• PostHog Inc., USA — analytics and session recordings; data hosted in the EU.
• Resend (Plus Five Five, Inc.), USA — email delivery (EU region).
• Infomaniak Network SA, Switzerland — hosting of our CRM system (data centre in Switzerland).
• AI model providers (e.g. Anthropic, OpenAI; USA) — classification of goods descriptions, translation of editorial content.
• Google (YouTube) — videos in our news are loaded only after a click (youtube-nocookie.com); this transfers data to Google.

7. Cross-border disclosure

Personal data may be transferred to the EU/EEA and to the USA. For the USA we rely on the Swiss-U.S. Data Privacy Framework (for certified providers) or on the standard contractual clauses recognised by the FDPIC.

8. Retention

We retain personal data for as long as necessary for the stated purposes or as required by statutory retention obligations (in particular for business correspondence).

Form requests in the CRM: the details of a request (including the goods description and phone number) are kept with the contact in the CRM as long as a business relationship exists or is being initiated. At your request we delete them earlier.

9. Your rights

You have the right to access, rectification, erasure, objection to processing, and data portability (Art. 25 et seq. and 28 et seq. FADP). Contact d.kryvashei@zolli.ai.

You may also contact the Federal Data Protection and Information Commissioner (FDPIC).

10. Objection (opt-out)

Here you can disable analytics (including session recordings) for your browser:

11. Changes

We may amend this notice as needed. The version published on this page applies.