Zurich Dinner Agent ("we", "us", "our") is an email-based restaurant recommendation service for English-speaking residents and visitors in Zurich. This privacy notice explains how we handle your personal data in accordance with the Swiss Federal Act on Data Protection (nDSG).
Data Controller
Zurich Dinner Agent
Zurich, Switzerland
Contact: escadroncervelas-dev@agentmail.to
What Data We Collect
When you use our service, we process the following personal data:
| Data | Source | Purpose |
|---|---|---|
| Email address | Your inbound email | To identify you, deliver recommendations, and manage your free tier usage |
| Email content (request text) | Your inbound email | To parse your dining preferences (party size, date, cuisine, neighborhood) |
| Request count per calendar month | Derived from your usage | To enforce free tier limits (1 request/month) |
| Timestamp of each request | System-generated | For rate limiting and service operation |
We do not collect:
- Your name (unless included in your email signature)
- Payment information (Stripe handles this directly — not yet implemented)
- Location data, device information, or cookies (we have no app or website login)
- Restaurant booking confirmations or dining history
How We Process Your Data
Your email is processed by an AI language model (Claude by Anthropic) to extract dining preferences. These preferences are used to query publicly available restaurant listing platforms (Lunchgate, Foratable) for availability. The results are formatted and sent back to your email address.
AI processing: Your request text is sent to the Anthropic API for natural language parsing. Anthropic's data retention policies apply to this processing. We do not use your data to train AI models.
Legal Basis
We process your data based on:
- Performance of a service (Art. 31 para. 2 let. a nDSG): Processing is necessary to deliver the restaurant recommendations you requested by emailing us.
- Legitimate interest (Art. 31 para. 1 nDSG): Request counting and rate limiting to maintain service quality and prevent abuse.
Data Retention
| Data | Retention Period |
|---|---|
| Email address + request count | Until end of calendar month + 30 days (for billing reconciliation) |
| Email content (request text) | Deleted within 48 hours of thread closure |
| Reply emails sent | Deleted within 48 hours of thread closure |
After the retention period, data is permanently deleted. We do not maintain long-term user profiles.
Data Sharing
We share your data with the following processors:
| Processor | Purpose | Location |
|---|---|---|
| AgentMail | Email sending/receiving | USA |
| Anthropic | AI request parsing | USA |
| Render.com | Server hosting | EU (Frankfurt) |
For transfers to the USA, we rely on the processors' Standard Contractual Clauses (SCCs) and data processing agreements.
We do not sell your data, share it for advertising, or provide it to restaurants.
Your Rights
Under the nDSG, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Correct inaccurate data
- Deletion: Request deletion of your data
- Data portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interest
- Withdraw consent: Where processing is based on consent
To exercise any of these rights, email us at escadroncervelas-dev@agentmail.to. We will respond within 30 days.
Complaints
If you believe we have not handled your data correctly, you can file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch
Changes to This Notice
We may update this privacy notice from time to time. The "last updated" date at the top will always reflect the most recent version.