Privacy Policy

Last updated: February 2026

1. Data collected

We collect data necessary for the operation of the service: name, surname, professional email address, company name, construction project data, emails synchronized from Outlook (with your consent), audio recordings of site visits, and meeting minutes.

2. Data usage

Your data is used exclusively to provide Cantaia features: email classification, report generation, task creation, pricing intelligence, and daily briefings. We never use your data for advertising purposes or resale to third parties.

3. Data hosting

All data is hosted in Switzerland through our partner Supabase (Swiss cloud infrastructure). Audio recordings are stored temporarily (7 days by default) then automatically deleted after transcription. Data is encrypted in transit (TLS 1.3) and at rest (AES-256).

4. Subprocessors

We use the following subprocessors: Supabase (hosting), Anthropic Claude (artificial intelligence), OpenAI Whisper (audio transcription), Stripe (payments), Microsoft Graph API (Outlook synchronization). Each subprocessor is subject to strict contractual obligations regarding data protection.

5. Your rights

In accordance with GDPR and the Swiss DPA, you have the right to access, rectify, delete, and port your personal data. You can exercise these rights at any time by contacting us by email or from your management portal.

6. Contact

For any questions regarding the protection of your personal data, you can contact us at: privacy@cantaia.io