Privacy Policy
Last updated: June 2026
This privacy policy explains how ipsum (https://ipsumchat.azurewebsites.net) processes personal data. We comply with the Swiss Federal Act on Data Protection (nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
Controller
Boris Kantor
Paul-Feyerabend-Hof 1, 8049 Zürich, Switzerland
boriskantor0107@gmail.com
What we collect
- Account data: email address, password hash, display name, profile photo
- Profile data: onboarding answers, bio, links, Startup School attendance
- Messages: AI chat history and direct messages you send or receive
- Technical data: session cookies required for authentication
- Browser storage: limited sessionStorage entries for UX (for example, deduplicating signup emails)
Why we process data
- To create and secure your account
- To help YC Startup School attendees discover and connect with each other
- To power AI-assisted search, onboarding, and profile editing
- To deliver direct messages and optional email notifications
Legal basis
We process data based on your consent when you sign up, and to perform the service you request (account, profile, messaging, and search).
Processors and subprocessors
We use the following service providers to run ipsum:
- Microsoft Azure (hosting, PostgreSQL database, blob storage, email, realtime messaging)
- Azure OpenAI (chat, embeddings, profile synthesis — your content may be sent to the model)
Data may be processed in Switzerland, the European Economic Area, or other countries where these providers operate, subject to appropriate safeguards.
AI processing
Onboarding answers, profile edits, search prompts, and chat messages may be processed by large language models to generate replies, match people, and build searchable profile embeddings. Do not submit information you are not comfortable sharing with these systems.
Retention
We keep your data while your account is active. When you delete your account in Settings, we remove your profile, messages, and related records from our database.
Cookies and local storage
We use strictly necessary session cookies for authentication (NextAuth). We do not use analytics or advertising cookies. No cookie consent banner is required for these essential cookies, but you can control them through your browser settings.
Your rights
You may request access, correction, deletion, or export of your personal data by contacting us at boriskantor0107@gmail.com. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (EDÖB).
Children
ipsum is intended for Startup School attendees and is not directed at children under 16.
See also our Terms of Service and Impressum.