Web Helper
Swiss revDSG & EU GDPR · Local-First Architecture

Privacy & Cookie Policy

Information regarding data processing, cookies, and browser extension permissions in accordance with the Swiss revDSG and EU GDPR.

1. Data Controller & Contact

1.1 Responsible Entity

The controller responsible for data processing under the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR) is:

Dal Molin Consulting GmbH · Allmendweg 15, CH-6330 Cham (Canton of Zug), Switzerland · UID: CHE-105.087.167

contactwebhelper.ai

2. Data We Process on Web Helper

2.1 Website Visits & Server Log Data

When you visit Web Helper (webhelper.ai), our infrastructure automatically records technical connection data (IP address, timestamp, requested URL, HTTP status, referrer, and browser/OS user agent) in server logs to ensure operational stability, TLS security, and abuse prevention.

2.2 Forms, Surveys, Assessments & Business Inquiries

When you request a download, participate in an online survey or assessment, book a meeting, submit a contact/waitlist form, or enter into a bilateral business agreement via Web Helper, we process the contact and business details you provide (such as name, work email, company, role, and your form/assessment inputs) to deliver the requested resource, manage our business relationship, and follow up on your inquiry.

2.3 User Accounts, Single Sign-On & Venture-Scoped Consent

Where Web Helper provides account sign-in, authentication is handled via the central identity infrastructure of Dal Molin Consulting GmbH:

  • Authentication & Session Data: We process your email address, profile name, authentication identifiers (including Google or LinkedIn OAuth profile tokens when you choose Social Sign-In), and active session metadata (session ID, IP address, user agent) so you can manage and revoke sessions.
  • No Silent Cross-Platform Marketing: While your login account allows convenient sign-in across platforms operated by Dal Molin Consulting GmbH, product updates and marketing communications are strictly scoped to Web Helper. Signing up for Web Helper never subscribes you to marketing emails from other platforms without your separate, explicit consent.

2.4 Billing & Payment Data (Where Applicable)

For paid subscriptions or services on Web Helper, payment processing is handled by PCI-DSS compliant payment providers (such as Stripe) or standard commercial invoicing. We store billing status, invoice records, and subscription identifiers—never raw credit card numbers.

3. Web Helper — Browser Extension & Data Architecture

3.1 Local-First Browser Storage & Optional Cloud Services

By default, webpage captures (Stage A DOM snapshots and Stage B formatted JSON, Markdown, and CSV outputs) and your Session Capture History (wh_capture_history) are processed and stored locally inside your browser (chrome.storage.local). Webpage content is only transmitted outside your browser when you explicitly trigger a download/export, bridge data to an application origin you have authorized (WebAppBridge), configure an outbound webhook, or invoke optional server-assisted features (such as Layer 2 page classification via /api/v1/classify, which evaluates structural page signals to route sub-pages).

3.2 Chrome Extension Manifest V3 Permissions Disclosure

The Web Helper Chrome Extension requests only the minimum Manifest V3 permissions necessary for its single purpose of structured webpage inspection and formatting:

  • storage: Stores your local capture history, latest capture snapshot, workspace preferences, and authenticated extension session tokens in local/sync browser storage.
  • tabs: Reads the active tab URL and title in the Popup and Side Panel and coordinates user-initiated page reads with the active tab.
  • sidePanel: Opens the native docked Chrome Side Panel (chrome.sidePanel) for side-by-side inspection of structured JSON, Markdown, and CSV.
  • content_scripts (http://*/*, https://*/*): Executes local DOM reading and schema formatting inside the active page when triggered by the user, and enables two-way WebAppBridge communication on user-authorized workspace origins.

3.3 Chrome Web Store User Data Policy (Limited Use Compliance)

The use of information received from Chrome and Google APIs adheres strictly to the Chrome Web Store User Data Policy, including the Limited Use requirements. User data accessed by the extension is used solely to provide and improve the user-facing web formatting features requested by the user, and is never sold to third parties, used for personalized advertising, or used to determine creditworthiness.

4. Purposes & Legal Bases of Processing

4.1 Purposes of Processing

We process personal data to: (a) provide, secure, and maintain our websites, online services, and bilateral engagements, (b) fulfill contracts, subscriptions, and download/assessment requests, (c) communicate service notices and opted-in product updates, and (d) analyze aggregated or de-identified usage telemetry to calibrate and improve our software, classifiers, and AI-assisted tools.

4.2 Legal Bases (Swiss revDSG & EU GDPR)

Processing is conducted in accordance with the Swiss revDSG and, where applicable, GDPR Art. 6(1)(b) (performance of a contract or pre-contractual measures), Art. 6(1)(f) (legitimate interests in platform security, service improvement, and B2B communication), and Art. 6(1)(a) (your revocable consent for optional cookies or marketing updates).

5. Service Providers (Sub-Processors) & International Transfers

5.1 Categories of Service Providers

To operate our services efficiently and securely, we engage carefully selected third-party service providers ("sub-processors") strictly under data processing agreements across the following categories:

  • Cloud Hosting & Serverless Compute (primarily in Switzerland and the European Union);
  • Database, Authentication & Transactional Email Infrastructure;
  • AI & Language Model Providers (where AI-assisted classification or analysis features are invoked);
  • Payment Processors & Optional Web Analytics.

5.2 Cross-Border Data Transfers

We prioritize data processing within Switzerland and the European Economic Area (EEA). Where a service provider processes data in a jurisdiction without a direct statutory adequacy decision (such as the United States), we ensure appropriate safeguards in accordance with Art. 16 revDSG and Art. 46 GDPR, specifically the Swiss-U.S. / EU-U.S. Data Privacy Framework (DPF) or standard contractual clauses (SCCs) recognized by the Swiss FDPIC.

6. Cookies & Consent Management

6.1 Strictly Necessary vs. Optional Cookies

We use strictly necessary cookies to remember your privacy choices (cc_cookie) and, where applicable, to maintain secure HTTP-only authentication sessions. Optional, anonymized analytics cookies (integrated with Google Consent Mode v2) are deactivated by default and are only set if you grant consent via our cookie banner.

6.2 Managing Your Cookie Preferences

You can review, change, or withdraw your cookie consent at any time using the interactive button below or in the website footer:

7. Data Retention, Security & Your Rights

7.1 Retention Period

We retain personal data only as long as necessary to provide the requested services, maintain an active user account or business relationship, or comply with statutory retention obligations under Swiss commercial and tax law (Art. 958f Swiss Code of Obligations).

7.2 Your Rights & Supervisory Authority (EDÖB)

Under the Swiss revDSG and EU GDPR, you have the right to request access, rectification, erasure, restriction of processing, or data portability of your personal data, and to withdraw consent or opt out of marketing communications at any time. To exercise your rights, contact us via the email address in Section 1. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), Feldeggweg 1, CH-3003 Bern (https://www.edoeb.admin.ch).

Last updated: October 2026 · Cham (Canton of Zug), Switzerland

Privacy & Cookie Policy | Web Helper