Privacy policy

Last updated: 13 November 2026 (section 5, monitoring with Langfuse, added). The German version is authoritative.

This policy covers the website lab.bh-automation.cloud and the Google application “Muster AG (Labor)”. Both belong to the Enterprise AI Lab, a private demonstration project. The Swiss Federal Act on Data Protection (FADP) applies.

1. Controller

Beat Hutter, Switzerland
Contact: wilhelmbiener68@gmail.com

2. Visiting this website

• The website is served via GitHub Pages, a service of GitHub, Inc. in the USA. GitHub processes technical data such as IP address, time and requested page in order to deliver the site and protect it from abuse. See the GitHub privacy statement.
• The website sets no cookies. It uses no analytics or advertising services and loads no fonts or scripts from third parties.

3. Contact by email or LinkedIn

If you get in touch, your details are used only to answer your message and are not passed on.

4. Google application “Muster AG (Labor)”

• Purpose: The application gives the lab's AI agent read-only access to the mailbox musterag.labor@gmail.com. The mailbox belongs to the project and receives test emails, most of them from Beat Hutter himself.
• Scope: only the gmail.readonly permission and only this one mailbox. The application cannot send, delete or modify emails.
• Data read: sender, recipients, subject, date and text of incoming emails.
• Processing: The agent classifies each email, for example as a request, invoice, advertising or suspicious. It records category, sender, subject and a short reason in a log. From requests it creates drafts in the lab's ERP. Only Beat Hutter sees the results.
• Language model: To classify and handle emails, their content is sent to a language model provider, currently DeepSeek. Processing takes place outside Switzerland, including in China. Please do not send confidential information to the lab mailbox.
• Storage and retention: Access credentials and the log are kept on a project computer in Switzerland for the duration of the lab and deleted on request.
• No other use: The data is not sold, not used for advertising and not shared beyond the services named here and in section 5. It is not used to train our own models.
• Google policy: The application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Revoking access: The owner of the mailbox can revoke access at any time at myaccount.google.com/permissions.

5. Monitoring of the agents (Langfuse)

• To trace the agents' workflows, cost and quality, the lab records every working session of the agent: model calls, tool calls, duration, tokens and cost.
• For this the lab uses Langfuse Cloud by Langfuse GmbH, Berlin, with data stored in the EU. See the Langfuse privacy policy.
• Content such as instructions, responses and excerpts from emails is transmitted in shortened form, and credentials and secrets are removed beforehand. The data is kept for at most 30 days.
• An email to the lab mailbox may therefore also be stored at Langfuse in shortened form.

6. If you write to the lab mailbox

Your email is processed as described in section 4. Muster AG is a fictional company, so no business results from your email. On request we delete your email and the log entry.

7. Your rights

You may request information about your data and ask for it to be corrected or deleted. Write to wilhelmbiener68@gmail.com.

8. Changes

This policy is updated when the lab gains new features. The version published here applies.