Privacy policy
This English translation is provided for convenience. In case of any discrepancy, the German version prevails.
1. Controller and contact
This privacy policy explains how innoQ AG processes personal data in connection with parlumina.ch, app.parlumina.ch and communication with the Provider.
innoQ AG
Schutzengelstrasse 57, CH-6340 Baar, Switzerland
UID CHE-111.701.917
Phone: +41 41 743 01 11
Email: support@parlumina.ch
Requests regarding data protection rights, including access, rectification and erasure, can be sent to this contact point.
2. Scope
This policy applies to the website parlumina.ch, the application app.parlumina.ch and communication with innoQ AG. It concerns visitors, customers and users, representatives of organisations, holders of a secondary address, people whose data appears in Parlumina content, and third parties whose data users include in their input.
Linked third-party services, in particular parlament.ch and other federal sources, are subject to their own privacy notices.
Taking note of this privacy policy is not a blanket consent to any processing. Where consent is required, it is obtained separately and can be withdrawn at any time with effect for the future.
3. Personal data processed and purposes
We only process personal data that is necessary for the respective purpose. The following overview shows typical data and purposes:
| Area | Data processed | Purpose |
|---|---|---|
| Visiting the website and application | IP address, time, pages accessed, browser and device information, error messages | Provision, security, abuse prevention and troubleshooting |
| User account and login | Name, login and contact address, authentication data at the identity service, optional profile picture, language settings, records of consent; where applicable, secondary address. Accounts with the same verified email address are merged. | Conclusion of contract, account management, login, evidence of declarations |
| Organisation and subscription | Name, address and UID of the organisation, representative and confirmation of authority to represent | Performance of the contract with the organisation |
| Purchase, payment and credits | Offer, price, time of purchase, term, billing details, payment status, payment method, card brand and last four digits, payment provider identifier, credit balance and usage, refunds | Processing purchases, billing, displaying credit usage, refunds and accounting |
| Referral programme | Referral code and the link between the referring and the new account | Attributing and crediting referrals |
| Data navigator | Search queries (not stored), filters, saved views, watchlists, tags, notifications and settings | Providing the features and saving work in progress |
| Analysis assistant | Questions, answers, conversation histories, reports, ratings of answers, if you allow it the current view in the data navigator (page and filters), and credit usage | Answering questions, displaying histories, creating reports, improving quality and billing |
| Voice input | Audio data for real-time transcription and transcripts | Converting speech to text for the analysis assistant |
| Communication and support | Content and metadata of emails, account notices and confirmations | Customer service, contractual notices and evidence of declarations |
| Operations and security | Logs of logins, access and system events, and blocks | Data security, troubleshooting, detecting compromises and enforcing the terms of use |
We do not use personal data for advertising, do not sell it and do not create advertising profiles. Employees or auxiliaries are only given access where necessary in individual cases, for example for operations, security, troubleshooting or legal obligations. If you rate an answer from the analysis assistant, authorised employees may view the rating together with the related conversation in order to improve quality.
4. Data about office holders in the content
Parlumina processes information about the public political activities of members of the Federal Assembly, members of the Federal Council and other office holders. The data comes from publicly accessible official sources, in particular the data services of the Parliamentary Services (parlament.ch, Curia Vista, the Official Bulletin, voting results and the register of interests) and other official federal publications.
This includes names, functions, party and parliamentary group membership, committee memberships, parliamentary initiatives, speeches, voting behaviour, declared interests, and analytical categories and political positions derived from them. Information about political views and activities can be sensitive personal data within the meaning of the FADP.
The data is prepared, linked, in part enriched using AI, and presented in research results, visualisations and answers. Derived political positions are methodological interpretations of public activity, not official findings. Private and family life is not the subject of Parlumina and is not specifically analysed.
Data subjects can request access and rectification and can object. If accuracy can be neither proven nor disproven, a note of dispute can be added. In case of discrepancies, the original source prevails; corrections to official sources must be requested from the responsible authority.
5. AI features and voice input
Analysis assistant. Questions, the necessary conversation history and – if you allow this in your settings – the current view in the data navigator are sent to OpenAI, processed there and returned as an answer. OpenAI also generates titles and suggested follow-up questions. Search terms that you enter in the data navigator or that the analysis assistant derives from your question are also sent to OpenAI for semantic search and converted there into numerical vectors. Under the terms agreed with the providers, input is not used to train their models. Providers may store data for a limited period to detect abuse.
Reports and data enrichment. For reports, the questions and answers you select are sent to the Google Gemini API. To enrich parliamentary content, we use Google Gemini and OpenAI exclusively with public source data, not with user input.
Voice input. If you use the optional voice input, audio data is sent in real time directly from your browser to Soniox in the European region for transcription. Parlumina does not store the audio data. Soniox describes real-time requests as processed temporarily and not stored, unless storage is enabled or agreed. The transcript is then linguistically cleaned up by OpenAI, passed to the analysis assistant as input and kept with the conversation history.
We do not make any decisions based solely on automated processing within the meaning of the FADP that have legal effects on users or significantly affect them. AI output may contain errors. Reports of inaccurate personal data can be sent to the contact point in Section 1.
6. Legal basis for processing
We process personal data in accordance with the principles of Art. 6 and 8 FADP. Where processing requires a justification (Art. 31 FADP), we rely on the following grounds:
- conclusion and performance of the contract, in particular for the user account, subscription, credits, payments and notices (Art. 31 para. 2 let. a FADP);
- compliance with legal obligations, in particular retention obligations for business records and accounting vouchers and obligations under VAT law;
- overriding private or public interests, in particular in the operation, security and further development of Parlumina, abuse prevention and transparency about the public activities of office holders;
- consent, where required for a specific processing activity. Such consent is obtained separately and can be withdrawn with effect for the future.
7. Service providers and other recipients
The following service providers support the operation of Parlumina. The specific processing is governed by the respective provider agreements.
| Function | Service provider | Location and notes |
|---|---|---|
| Hosting, API and logs | Vercel Inc. | Backend functions in Frankfurt (Germany); provider based in the USA. |
| Database and backups | PostgreSQL on servers of Hetzner Online GmbH | Germany. |
| Search | Meilisearch and semantic search API, operated by innoQ AG itself on servers of Hetzner Online GmbH | Germany. Search terms are sent to OpenAI for semantic search (see Section 5). |
| Login and profile picture | ZITADEL Cloud at auth.parlumina.ch | Switzerland region. |
| Language models | OpenAI (analysis assistant, titles and follow-up questions, voice input clean-up, semantic search); Google Gemini API (reports) | USA or without regional restriction. Providers may have limited retention periods for abuse detection. |
| Voice input | Soniox | European region; audio data is not stored by Parlumina. |
| Email delivery | Hostpoint AG | Switzerland. |
| Payment processing | Stripe Payments Europe, Limited | Ireland. Stripe receives payment details directly; we do not store full card numbers. |
The application loads fonts from Google Fonts (Google Ireland Limited) and portrait photos from parlament.ch. These providers receive your IP address and technical information about your browser.
The payment provider may also process data for its own purposes, for example to combat fraud or to meet its own legal obligations; its own privacy notices apply to this. Other recipients may include fiduciaries, auditors, legal advisers and authorities and courts, where necessary for accounting, the protection of legal rights or due to a legal obligation.
8. Disclosure abroad
Personal data is processed in Switzerland, in EU states and in the USA, in particular by Vercel, OpenAI and Google. Disclosure abroad takes place in accordance with Art. 16 FADP: to countries with an adequate level of data protection, on the basis of appropriate safeguards such as standard data protection clauses recognised by the FDPIC or – for US companies – under the Swiss-U.S. Data Privacy Framework, provided the company concerned is certified under it.
You can find the current list of certified US companies in the Data Privacy Framework list. Further information on requirements and safeguards is provided by the FDPIC on disclosure abroad (in German). For recipients in the USA, access by US authorities cannot be completely ruled out despite safeguards. A copy of the applicable safeguards can be requested from the contact point in Section 1.
9. Cookies and browser storage
Parlumina itself does not set any cookies. The login service ZITADEL sets technically necessary cookies for login at auth.parlumina.ch.
The website and application use your browser’s local storage (local storage and session storage) for the login session, settings such as language, colour scheme and start page, the state of the analysis assistant and navigation, and to pass on a referral code. This information stays on your device unless it is sent to our servers for the respective feature. No advertising or analytics tools are used.
You can restrict or delete storage in your browser settings. Without the storage required for login and session, you cannot log in, and settings will not be kept.
10. Retention and deletion
We keep personal data only for as long as necessary for the respective purpose or due to legal obligations. It is then deleted or anonymised. The following periods apply:
| Data | Retention |
|---|---|
| User account, settings and contact addresses | Until the account is deleted; then deletion from the active Parlumina systems. Statutory retention obligations remain reserved. |
| Input, conversation histories, reports and saved views | Until the account is deleted. Chats can be archived but not deleted individually; reports and saved views can be deleted individually. |
| Voice input audio data | Not stored by Parlumina. According to its privacy policy, Soniox processes real-time requests temporarily unless storage is enabled or agreed. |
| Invoices, accounting vouchers and payment data | 10 years from the end of the financial year, where the statutory retention obligation under Art. 958f CO applies. |
| Records of consent, termination and notices | Until the relevant limitation periods expire; usually up to 10 years after the end of the contract. |
| Server and access logs | As long as necessary for operations, troubleshooting and security; then automatic deletion according to the respective service provider’s periods. |
| Customer service correspondence | 2 years after the request has been closed. |
| Backups | Until the end of the backup rotation. |
After 24 months without a subscription, the account may be deleted after prior notice. Deleted data may remain in backups until the end of the backup rotation and is not actively processed there. Copies held by AI providers are deleted according to their own periods.
11. Data security
We take appropriate technical and organisational measures in accordance with Art. 8 FADP and Art. 1–6 DPO. These include encrypted transmission between your browser and our services (TLS), access restrictions on a need-to-know basis, logging, regular security updates and backups.
In the event of a data security breach that is likely to result in a high risk to the personality or fundamental rights of the data subjects, we will inform the FDPIC and the data subjects to the extent required by law.
12. Rights of data subjects
Subject to applicable data protection law, you can in particular request access, rectification, erasure or restriction, object to processing, withdraw consent with effect for the future and – under the statutory conditions – request the release or transfer of personal data you have provided yourself.
Please send your request to support@parlumina.ch. We may ask for suitable proof to verify your identity. Statutory retention obligations and overriding interests of third parties or in the enforcement of rights may limit individual rights; any limitation will be explained.
You can file a report with the Federal Data Protection and Information Commissioner (FDPIC).
13. Organisations as customers and secondary address
If an organisation takes out a subscription, we process the data of the representative and the user to perform the contract. Invoices and contractual notices concern the organisation. We do not disclose the user’s input and results to the organisation. The organisation informs the user about the disclosure of their data to innoQ AG.
If a customer adds a secondary address, we process this email address to deliver confirmations and notices and to receive declarations. The addition is confirmed to both addresses. The secondary address does not give access to Parlumina or to input or results. The customer must be entitled to provide the secondary address.
14. Changes
We may update this privacy policy for new features, changed service providers or processing locations, and changes in the law. The version published on this page applies. We announce material changes in the account or to the contact address. Where consent is required, we obtain it separately.
Last updated: 26 October 2026