Last updated: 5 July 2026
Privacy Policy
This Privacy Policy describes how snaptosuit ("we", "us") processes personal data in connection with the service available at https://snaptosuit.com and snaptosuit.ch. It is based on the revised Swiss Data Protection Act (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR). Last updated: 5 July 2026.
1. Controller
The data controller is snaptosuit. All privacy-related enquiries can be addressed to: team@snaptosuit.ch. Requests are generally answered within 30 days.
2. Data processed
We only process data that is necessary to operate the service: (a) account and organisation data (email, name, role, company or organisation name where applicable, password hash); (b) uploaded selfies and the resulting generated portraits; (c) technical usage and log data (e.g. login timestamps, IP address at login, number of generations per billing period); (d) billing data collected by our payment provider. We do not process special categories of personal data beyond the content of uploaded images.
3. Purposes and legal bases
Processing serves the performance of the user contract (contract performance under revFADP; Art. 6(1)(b) GDPR), our overriding legitimate interests in security, abuse prevention, debt collection and anonymised analysis to improve the service (Art. 31(2)(d) revFADP; Art. 6(1)(f) GDPR), and compliance with statutory obligations (in particular accounting and retention duties).
4. Generation and editing of the portraits
snaptosuit processes your uploaded images in its own multi-step procedure: we prepare the shots, drive the image generation through processes we developed ourselves, and check the results for quality before delivery. For the actual generation step we additionally use, as is common in this field, a specialised AI model from a carefully selected partner whose infrastructure is operated partly in the United States. This partner may use the images solely to provide the service we commission; any use for its own training or advertising purposes is contractually excluded, and agreements are in place that ensure an adequate level of data protection. Responsibility for and the design of the overall process (preparation, orchestration and quality assurance) rest with snaptosuit. By using the service you consent to this processing.
5. Cross-border disclosure
Where personal data is transferred to countries outside Switzerland and the EEA, this is based on recognised safeguards (EU Standard Contractual Clauses; CH-US Data Privacy Framework where applicable) and the performance of the contract with you (Art. 17(1)(a) revFADP).
6. Storage location
The primary application database and the generated portraits are hosted with a Swiss cloud provider (servers in Switzerland). The application runtime and mail delivery are provided by services with servers in the EU.
7. Retention and deletion
We retain your uploaded images and the portraits generated from them for as long as your organisation or account exists, so that we can provide the service to you continuously, for example for repeat generations, access to your results, support and quality assurance. Your images are not used to train AI models. You remain in control at all times: you can manage and delete your content in your account, and at the latest when you delete your organisation or account, or upon your request, the stored images are removed from our storage (except for any technical backups, which are overwritten in the course of normal rotation). Statutory retention obligations, in particular the ten-year business accounting obligation under Art. 958f CO for invoicing and contract data, remain reserved; such data is deleted only after those periods expire. On cancellation of the subscription, your portraits remain available until account deletion.
8. Recipients and processors
We use carefully selected processors. The following categories are involved: (a) AI model provider (USA) for image generation; (b) payment service provider (EU) for payment processing and invoicing; (c) cloud and hosting providers (Switzerland and EU) for database, application and image storage; (d) email service (EU) for transactional messages; (e) web analytics provider (Google, USA) for consent-based usage analysis; (f) advertising platforms (including TikTok, USA) for consent-based ad performance measurement. Data processing agreements ensuring an equivalent level of protection are in place with all processors. Specific information about recipients can be requested at any time at team@snaptosuit.ch.
9. Cookies
Technically necessary cookies (session management, authentication, CSRF protection) are always set; they are required to operate the service. In addition – only with your prior consent via our cookie banner – we set (a) analytics cookies from Google Analytics (Google, USA) for anonymised reach and usage analysis and (b) marketing cookies for measuring the performance of advertising (including the TikTok pixel). We use Google Consent Mode: without your consent, no analytics or marketing cookies are set and no recognition of individuals takes place. In that case Google Analytics only transmits anonymous, cookieless signals to Google that serve solely for statistical estimation and do not allow identification of individuals; the TikTok pixel is not loaded at all without marketing consent. You may withdraw your consent at any time with effect for the future.
10. Your rights
You have the right of access, rectification, deletion, restriction of processing, objection, and data portability under revFADP and GDPR. You may exercise these rights at any time by emailing team@snaptosuit.ch. You also have the right to lodge a complaint with the competent supervisory authority (in Switzerland: Federal Data Protection and Information Commissioner FDPIC; in the EU: the respective national data protection authority).
11. Obligations when uploading images
With each upload you warrant that you hold all required rights and explicit consents of the persons depicted, including consent to processing by automated systems and to transfer to providers based in the United States. You indemnify us against any third-party claims arising from a breach of this obligation (see Terms).
12. Data security
We take appropriate technical and organisational measures to protect personal data, in particular transport encryption (TLS), separated storage areas per organisation, password hashing using industry-standard methods, and logging of security-relevant events. Absolute security cannot be technically guaranteed.
13. Changes to this Policy
We may amend this Privacy Policy at any time with effect for the future. The version published at https://snaptosuit.com/en/legal/datenschutz applies; we recommend consulting this page from time to time. We will inform you of material changes in an appropriate manner.
Questions about this document? Get in touch.