Auditfyy

Privacy policy

Last updated: 10.05.2026

1. Controller

KOMUNIQUE GMBH
Blumenrainstrasse 29, 9050 Appenzell, Schweiz
Email: [email protected]

2. Data collected and purposes

We process personal data solely for the purpose of operating the Auditfyy platform:

  • Account data: Name, email address, agency name to provide the service
  • Usage data: Log data, audit results, project information to operate the platform
  • Payment data: Processed exclusively by Stripe. We store no card details.
  • Technical data: IP addresses and browser information for security and debugging

Anonymous free website check

No account is required for the free website check. We process the URL or domain you submit and limited lasting check metadata, such as technical request and processing information. These details may be retained as service records. The check results themselves are never saved and are held only temporarily for delivery.

To limit abuse, we use a signed cookie valid for two days and hashed abuse-control signals. This control information is stored temporarily and deleted no later than two days after collection. Checks may be subject to daily and technical rate limits.

To perform a check, our systems fetch the publicly accessible page you provide and take its robots.txt rules into account. For AI-assisted analysis, we make two AI requests to DataForSEO. The submitted URL and publicly accessible page content may be transmitted to and processed by that provider. Do not submit confidential or non-public URLs.

You may request access, correction, erasure, restriction of processing, or object to processing of your personal data. Because the check is anonymous and does not require an account, we may not be able to associate a request with a specific check. For enquiries and manual deletion requests, contact [email protected].

3. Legal basis

Processing is based on:

  • Art. 6(1)(b) GDPR / Art. 31 revDSG (performance of contract)
  • Art. 6(1)(f) GDPR / Art. 31 revDSG (legitimate interest)
  • Art. 6(1)(a) GDPR / Art. 31 revDSG (consent, where applicable)

4. Hosting location and data transfers

The Auditfyy platform is hosted exclusively in the European Union (EU region). All server data, including user data, audit results, and database data, is stored and processed on servers within the EU. No platform data is transferred to third countries unless explicitly stated below.

5. Third-party integrations (Google services)

Auditfyy offers optional integrations with Google services: Google Analytics 4, Google Search Console and Google Ads. These integrations are voluntary and activated by the user in the project settings.

When an integration is active, Auditfyy reads selected performance data (e.g. clicks, impressions, sessions) from the user's Google account in read-only mode and displays it in the project dashboard. Raw data remains in the user's Google account. Auditfyy does not permanently store full Google raw datasets. Use of Google services is subject to Google's privacy policy (google.com/privacy).

Users can disconnect Google integrations at any time in the project settings. Once disconnected, no further data is retrieved from the Google account.

6. Sub-processors

We engage the following service providers that process personal data on our behalf:

  • Cloud Infrastructure Provider (EU region data center): Hosting and infrastructure; data stored exclusively in the EU; Data Processing Agreement pursuant to Art. 28 GDPR
  • Stripe, Inc. (USA): Payment processing; EU Standard Contractual Clauses
  • Resend, Inc. (USA): Email delivery; EU Standard Contractual Clauses
  • OpenAI, Inc. (USA): AI summaries and AI chat assistant (paid plans); Data Processing Agreement, no training data use via API
  • Google LLC (USA): (a) Optional platform integrations (GA4, Search Console, Google Ads) – only when activated by the user; (b) Google Tag Manager and Google Analytics 4 on the marketing website (auditfyy.com); EU Standard Contractual Clauses

7. Retention and deletion

Data is retained for as long as the account is active. After account cancellation, personal data is deleted within 30 days unless legal retention obligations apply (invoices: 10 years under Swiss accounting law).

8. Your rights

You have the right to:

  • Access your stored data (Art. 15 GDPR / Art. 25 revDSG)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR / Art. 32 revDSG)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

To exercise your rights, please contact: [email protected]

9. Right to lodge a complaint

You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the data protection authority in your country of residence.

10. Cookies and tracking

In the Auditfyy platform (app) we use only technically necessary cookies (session cookie for authentication, language preference).

On the marketing website (auditfyy.com) we use Google Tag Manager. Google Analytics 4 is loaded only in accordance with the consent controls already provided on the website (see section 11).

11. Google Tag Manager and Google Analytics 4

On the marketing website (auditfyy.com) we use Google Tag Manager (GTM-WLHWZZVS) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The Tag Manager itself does not process personal data; it controls the loading of further tags — including Google Analytics 4 (GA4).

Google Analytics 4 collects the following data on the marketing website:

  • Pages visited and time spent on the site
  • Approximate origin (country/region), device type and browser
  • Referrer (how visitors arrived at the website)
  • IP address (anonymised/truncated by Google before storage)

GA4 is used only after you have given consent through the consent controls already provided on the website. You can change or withdraw consent there at any time. Data is processed on Google servers in the USA. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) acts as data processor within the EU; the transfer to the USA is based on EU Standard Contractual Clauses (Art. 46 GDPR).

Legal basis: Art. 6(1)(a) GDPR (your consent).

You can also prevent Google Analytics from collecting data by installing the Google Analytics opt-out browser add-on or by disabling third-party cookies in your browser settings.

Further information on Google's data processing can be found at: policies.google.com/privacy