Privacy
Privacy
We collect as little as we can. This page says in plain words what happens when you visit this site, use the chat or write to us on Instagram.
Who is responsible
Florin Widmer, T&W Automations, Heusser-Staub-Strasse 37, 8610 Uster ZH. Privacy questions: info@twautomations.ch This notice covers the website twautomations.ch, the chat on this website and our demo account @theproprules on Instagram. If a customer of ours uses an assistant on their own Instagram account or their own website, this notice does not apply; the customer’s own notice does. More under “Instagram DM assistant: who is responsible”.
If you fill in the form
We receive your name, email, business, your answers from the form — what you need (website, AI chatbot, Instagram DM assistant, a combination or not sure yet) and what trade you are in — and, if you give them, your phone number and message. Your IP address is sent along too: it appears in the notification to us and limits spam sent through the form. These details are emailed to us and used only to answer your enquiry. We pass them to nobody and use them for no advertising.
When you use the chat
A chat sits in the bottom right corner that answers questions about our work and books appointments. Its answers come from an AI system, not from a person — for anything binding we get in touch ourselves. Your message goes to our server at api.twautomations.ch and from there to Anthropic, who run the language model. Our contracting party is Anthropic Ireland, Limited; the data is stored in the USA, and the answer may also be computed in other countries. This is safeguarded by Anthropic’s data processing agreement with the European Commission’s Standard Contractual Clauses and the adaptations for Swiss law. According to the provider, the content is not used to train models. If you want an appointment, the chat asks for your name and email address, and for your phone number if you care to give it. The appointment goes into our Google calendar and you get a confirmation by email. Please do not put health data, ID numbers or other particularly sensitive details into the chat.
What the chat stores
The conversation lives in your browser while you are here and disappears when you close the tab. The only things we keep are what an enquiry needs: name, phone number and what it is about for a callback, plus email address and the appointment itself for a booking. Those sit in our database at Supabase Inc., whose servers for our project are in the EU, and in the calendar at Google Ireland Ltd.; the notifications run through our mailbox at Hostinger. The only thing processed outside Switzerland and the EU is the chat message itself, at Anthropic, as described above. The conversation text itself we do not keep. For troubleshooting, the server logs technical messages without chat content.
Instagram DM assistant: who is responsible
The Instagram DM assistant (also called an AI DM setter when it works for coaches) answers direct messages on an Instagram account with the help of AI. There are two cases. On twautomations.ch and in the demo account @theproprules we are responsible ourselves: T&W Automations, Florin Widmer. This notice applies to those. In the demo account the assistant answers only messages that contain the keyword DEMO. If a customer uses the assistant on their own Instagram account or their own website, the customer is responsible. We are then a processor, on the basis of a data processing agreement. For those accounts the customer’s privacy notice applies, not this one. If you wrote through a customer’s account, please read theirs.
Instagram DM assistant: what is processed and what is not
What is processed is the text of your direct message, your Instagram username and the ID of the conversation. If the conversation ends in an enquiry (a lead), your name, your phone number or email address as far as you give them, and a short summary of what you asked about are added. We do not store the conversation text. For every reply the assistant reads the history fresh from Instagram and does not file it anywhere. All that is stored is a technical conversation state (stepped in, paused, lead reported), without text. On Instagram the conversation stays there like any direct message; Meta’s privacy policy applies to it as well. If a keyword applies, the assistant steps in only on messages that contain that word. Nothing is stored from any other message. Images, voice messages, story mentions and reactions are not processed and not answered.
Instagram DM assistant: AI notice and handover to people
The first reply in every conversation says openly that an AI assistant is writing. If the business or coach writes into the conversation themselves, the assistant goes quiet there for a set time (default: 12 hours). Anyone can ask to speak to a person. With the AI DM setter, an alert then goes to the coach.
Instagram DM assistant: recipients and places
Your message arrives through Instagram, run by Meta Platforms Ireland Ltd., at our server api.twautomations.ch. Meta’s privacy policy applies as well. To be answered it goes to Anthropic. The answer is processed in the USA; the contracting party, the Standard Contractual Clauses and the note on training are set out above under “When you use the chat”. The technical conversation state and enquiries sit with Supabase Inc., whose servers for our project are in the EU. Email notifications run through Hostinger International Ltd., servers in the EU. For an appointment booking, Google (calendar) or the customer’s booking service comes in, for example Cal.com in the USA.
Instagram DM assistant: access credentials
To connect the assistant we store an access key for the Instagram account on the server. It is never shown in the browser and expires after 60 days. We renew it automatically. A business account is connected through a sign-in link on Instagram itself. We never know the password.
If you book a call through Cal.com
The “Book an intro call” link on the services page and the booking link the assistant sends on our demo account at the end of a conversation lead to Cal.com, a booking service run by Cal.com, Inc. in the USA. This site loads nothing from Cal.com; only your click opens the booking page. What you enter there, such as your name, email address and the time you pick, goes to Cal.com and into our calendar as an appointment so we can hold the call with you. Cal.com stores this data in the USA. The booking page itself is covered by Cal.com’s privacy policy. If no work comes of it, we delete the booking after twelve months, like other enquiries.
How long we keep it
Enquiries that do not turn into work are deleted after twelve months. That covers form and chat enquiries, leads from the Instagram DM assistant and appointments that lead nowhere. The technical conversation state from Instagram is deleted three months after the last message, and the usage counters for the daily quota after three months. Deletion runs automatically. For actual jobs the statutory retention periods apply.
Providers that process data
Hostinger International Ltd.: hosting of this site and of our server api.twautomations.ch (chat and Instagram DM assistant), mailbox and email sending (Europe). Supabase Inc.: database for enquiries and the technical conversation state (EU). Anthropic: producing the answers in the chat and in the Instagram DM assistant (USA, Standard Contractual Clauses). Meta Platforms Ireland Ltd.: Instagram, which carries the direct messages (Meta’s privacy policy applies as well). Google Ireland Ltd.: calendar for appointment bookings. Cal.com, Inc.: booking page for intro calls (USA), only if you click the link.
Hosting and server logs
The site and our server api.twautomations.ch, which runs the chat and the Instagram DM assistant, are hosted with Hostinger International Ltd. on servers in Europe, and the mailbox for form enquiries and the notifications from the chat and the Instagram DM assistant sits with the same provider. Opening the site produces technical logs there, such as IP address, time and page requested. They serve operation and security and are deleted shortly after.
What we do not do
This site sets no cookies and loads nothing from other companies’ servers when you open it. Fonts and images are served by our own server, and the chat script comes from our server api.twautomations.ch. The only thing kept in your browser is the chat conversation, and only until you close the tab. There is no analytics or advertising software, no tracking across other sites, and nothing handed to ad networks.
Your rights
You can ask what we hold, have it corrected or have it deleted at any time. An email to info@twautomations.ch is enough. If you wrote through a customer’s account or website, contact the business first. We support them with it.
Having your Instagram data deleted
You want us to delete data we received about you from Instagram? Write to info@twautomations.ch and give your Instagram username. We delete the technical conversation state, enquiries and leads tied to your account and confirm it to you. These are our data deletion instructions, which Meta requires for apps. Conversations that sit on Instagram itself you delete there; we have no access to them. If you wrote through a customer’s account, contact the business first.