Privacy Policy

1. Introduction

Welcome to Village ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Email address (for account creation and communication)
• Profile information (preferred language, country of origin, citizenship group, municipality, family situation, employment status)
• Household member information (names, dates of birth, relationships)
• Task completion status and progress
• Document metadata (filenames, types, upload dates) - actual document files are stored securely
• Email drafts and communication preferences

2.2 Automatically Collected Information

• Usage data and analytics
• Device information and browser type
• IP address (for security and fraud prevention)

3. How We Use Your Information

We use your information to:

• Provide personalized task guidance based on your profile
• Send you task reminders and notifications (with your consent)
• Generate email drafts in local languages
• Store and manage your documents securely
• Improve our services and user experience
• Comply with legal obligations (GDPR, Swiss DPA)

4. Data Storage and Security

Your data is stored securely using Supabase, which provides:

• Encryption at rest and in transit
• Row-Level Security (RLS) to ensure you can only access your own data
• Regular security audits and compliance certifications

Documents are stored in encrypted storage buckets with signed URLs for secure access.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We use trusted third-party services (Supabase, Resend, QStash) that process data on our behalf under strict confidentiality agreements
• Legal Requirements: When required by law or to protect our rights and safety
• With Your Consent: When you explicitly consent to sharing (e.g., email relay mode)

6. Your Rights (GDPR & Swiss DPA)

You have the following rights regarding your personal data:

• Right to Access: Request a copy of all your data (available in Settings → Privacy)
• Right to Rectification: Update or correct your profile information at any time
• Right to Erasure: Delete your account and all associated data (available in Settings → Privacy)
• Right to Data Portability: Export your data in a machine-readable format
• Right to Object: Opt-out of email notifications and reminders
• Right to Withdraw Consent: Revoke consent for data processing at any time

To exercise these rights, please contact us at hello@expatvillage.ch or use the privacy controls in your account settings.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained until account deletion
• Email drafts: Auto-deleted after 30 days unless saved
• Audit logs: Retained for 1 year for security and compliance
• Deleted accounts: 30-day grace period for recovery, then permanent deletion

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising. For more details, see our Cookie Policy.

9. Children's Privacy

Our service is not intended for children under 16. We collect household member information (including children's names and dates of birth) only to provide task guidance for families. This information is stored securely and is only accessible to the account holder.

10. International Data Transfers

Your data may be processed and stored in servers located in the European Union (EU) and Switzerland. We ensure that all data transfers comply with GDPR and Swiss DPA requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: