AI House

Privacy notice

Last updated: November 2026

This notice explains how AI House Association handles personal data on aihousedavos.com, on the event platform and at AI House Davos. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies to us, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

AI House Associationc/o Reallabor Prättigau/DavosObere Strasse 227270 Davos PlatzSwitzerland

E-mail: team@aihousedavos.com

2. What we process and why

Visiting the website

Our servers record technical data for each request, such as the time, the page and the browser, to deliver the website and keep it secure. We do not use analytics, advertising or tracking tools.

Your account and your application

When you apply, we process your name, e-mail address, job title, organisation, the type of your affiliation, your answers in the application (for example why you want to attend and how you heard of us) and, if you add them, your LinkedIn profile, a short bio and a photo. You can give an assistant's e-mail address; we then write to that address as well.

We use these details to decide on your application, to tell you the decision, to send your pass and practical information, and to run the event. If you sign in with LinkedIn, LinkedIn tells us your name, your e-mail address and your LinkedIn member ID.

How applications are assessed

Our team decides on every application. To help, the platform sorts applications by how well they fit a session, using criteria our team sets. We also use an AI model (Claude, by Anthropic) to suggest scores for seniority, relevance to the session and likely contribution. It reads your job title, organisation, affiliation, bio and application answers, but not your name, e-mail address, photo or LinkedIn profile. The scores only order the list. A person makes every decision, reads the application itself and is free to decide against the scores.

If a session is full, the platform places new applications on a waiting list and offers freed places in the order applications came in. An offer you do not accept in time lapses automatically, and your application for that session is then withdrawn. These steps are automatic. You can tell us your view and ask for any of them to be reviewed by a person: write to team@aihousedavos.com.

Verifying your role

You can upload a document that shows your role, such as a work badge or a letter on company paper. Only our team can open it. We delete these documents when the edition closes.

Partners of a session

Some sessions are run with partner organisations. If you apply to such a session, the partner sees your name, e-mail address, job title, organisation, LinkedIn profile, bio, application answers and the fit score, and can recommend you. The partner cannot approve or decline you; we decide.

Guest directory and messages

When networking is on, approved guests of the same edition can find each other in the guest directory. Your card shows your name, job title, organisation and, if you added them, your photo, short bio, topics and what you are open to. Your e-mail address, phone number and LinkedIn profile are never shown. You can leave the directory at any time in your profile.

Messages between guests are stored so that both can read them. Our team reads a conversation only if one of you reports it. We delete messages 90 days after the edition ends.

At the door

When you arrive, the door team scans your pass and records that you attended, when, and at which entrance. If somebody is admitted without a pass, the door team notes their name and e-mail address and may record a short voice note instead of typing. We use these records to know who attended and for security. They are not used to decide anything about you.

Photographs and recordings

The whole house is a photography zone: we photograph and film throughout the event, and we cannot keep anyone out of the pictures. Our photography and recording notice explains how we use pictures and what you can do about a picture of you once it is published.

Contact form

When you write to us through the contact form, we store your message and your e-mail address so our team can read it and, where needed, answer. If you are signed in, we link the message to your account.

E-mails and newsletter

We send e-mails about your application and the event. If you agreed, we also send news and invitations, and keep your details to invite you to future editions. Each newsletter has a link to unsubscribe, and you can change your choices in your profile. We record whether e-mails were delivered.

3. Legal grounds

Where the GDPR applies, we rely on:

  • the performance of the arrangement you enter into when you apply (your application, your account, your pass, the door),
  • your consent (news and invitations, future editions, portraits and quotes, and the optional verification document), which you can withdraw at any time for the future,
  • our legitimate interests (security, sorting applications, the guest directory with the right to leave it, partners' recommendations, documenting the event),
  • legal obligations (for example keeping accounting records).

4. Who receives your data

We use service providers who process data for us under contract:

  • Supabase (the database; the data is stored with Amazon Web Services in Frankfurt, Germany; Supabase is based in Singapore and the USA),
  • Render (the servers that run the platform, in Frankfurt, Germany; Render is based in the USA),
  • Google (Google Drive for photos and recordings; Google Wallet for passes, without your name; USA),
  • Brevo (e-mail delivery; France, with a subsidiary in the USA),
  • Anthropic (the AI model used to suggest application scores; USA),
  • LinkedIn (only if you sign in with LinkedIn; LinkedIn decides itself how it handles your data there).

Partner organisations see applications to their sessions as described above. Other approved guests see your directory card. We disclose data to authorities only where the law requires it.

5. Data sent abroad

We store data in Switzerland and the EU. Some providers are based outside them or can access data from there:

  • USA: Render, Google, Brevo's US subsidiary and LinkedIn are certified under the Swiss-US Data Privacy Framework, for which the Federal Council recognises adequate protection. Anthropic and Supabase are not; with them we rely on the EU standard contractual clauses with the Swiss addendum that the Federal Data Protection and Information Commissioner (FDPIC) recognises.
  • Singapore: Supabase, under the same standard contractual clauses.

Countries of the EU and the EEA offer adequate protection in the Federal Council's view.

6. How long we keep data

  • Your account and your applications: five years after the last activity on your account. If you agreed to hear about future editions, we keep your name and e-mail address for that until you withdraw your consent.
  • Data about an edition, such as attendance and door records (including voice notes), messages you sent us through the contact form and records of e-mails we sent you: three years after that edition.
  • Verification documents: until the edition closes.
  • Badge applications: 90 days after the edition ends.
  • Messages between guests: 90 days after the edition ends.
  • Our audit log: one year.

We keep data longer where the law requires it.

7. Cookies and your browser

We only use cookies that the platform needs: to keep you signed in and to protect sign-in. Your browser also keeps some settings on your device, such as the light or dark theme and an unsent application draft for up to 14 days. We do not use cookies for analytics or advertising. You can block or delete cookies in your browser settings; you can then still read the website, but you cannot sign in. Videos from YouTube load only when you press play, through YouTube's privacy-enhanced mode.

8. Your rights

You can ask us what data we hold about you and receive a copy, have it corrected, have it deleted, object to its use and withdraw a consent. Where the GDPR applies, you can also ask us to restrict processing and to hand over your data in a portable format. Write to team@aihousedavos.com. We may ask you to confirm your identity.

You can complain to the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or to the data protection authority where you live or work in the EU.

9. Security

We protect data with encryption in transit, access limited by role, and logs of sensitive actions. No system is completely secure.

10. Changes

We update this notice when what we do changes. The date of the current version is shown at the top of this page.