Roundwork AI
Sign in
Data protection · revDSG

A coaching platform built for Swiss data protection

What the revised Swiss Data Protection Act means for your coaching practice, where client data is actually processed, and which duties stay with you.

This page is a plain-language overview — not legal advice, and not the binding privacy statement. Read the privacy policy

revDSG / nFADP

What the revDSG asks of a coaching business

The revised Federal Act on Data Protection (revDSG, in force since 1 September 2023) applies to sole proprietors too. If you record client names, session notes, health-related remarks or payment details, you are processing personal data — regardless of company size.

Choosing a platform does not transfer that responsibility, but it decides how much of the work is already done for you. Your duties on one side, what Roundwork contributes on the other.

Stays your responsibility

  • Inform clients about what you collect and why, with a privacy statement on your own channels.
  • Answer access, correction and deletion requests within the statutory deadline.
  • Only collect what you actually need — session notes included.
  • Keep your own devices, mailbox and notes secure; no platform can cover that for you.

What Roundwork brings

  • Data processing agreements with the services that process data on our behalf.
  • Account deletion that removes personal data, with statutory tax records minimised rather than kept in full.
  • Data minimisation by default: on-site addresses are shared only after a confirmed booking, and public testimonials show first names only.
  • Analytics only after explicit consent — no tracking before the cookie banner is answered.

Hosting and infrastructure

Where your data actually runs

We would rather be precise than marketing-friendly here: Roundwork is a Swiss business running on Google Cloud infrastructure, which means data can be processed in the EU and the US under contractual safeguards.

Google Cloud and Firebase

Application, database, authentication and content delivery run on Google Firebase / Google Cloud with locations in the EU and the US, under a data processing agreement.

Transfers abroad

Data can be transferred outside Switzerland and the EU, in particular to the US. Those transfers rely on recognised safeguards such as standard contractual clauses and adequacy decisions.

Encryption in transit and at rest

All traffic runs over TLS/HTTPS. Sensitive values such as integration OAuth tokens are stored encrypted and server-side only — they never reach the browser.

Access control and abuse protection

Role-based permissions limit who can read what, Firebase App Check keeps automated traffic away from backend endpoints, and security reviews are carried out regularly.

We do not claim Swiss-only hosting. If your engagements require data residency in Switzerland, write to legal@roundwork.ai before signing up so we can tell you whether that is possible today.

Data handling

What we process, and why

A summary of the data involved in running a coaching business on the platform. The privacy policy lists every category in full.

Data categories

  • Account data: name, email address, encrypted password, role.
  • Coach profile: description, photos, teaching location and geodata, tax and business details via Stripe.
  • Usage data: bookings, credit transactions, page views and interactions.
  • Payment data: Stripe customer ID and transaction references — card details are handled by Stripe, never by us.
  • Optional integrations you enable yourself: Zoom and Google Calendar tokens, stored server-side only.

Account data is kept while the account is active. On deletion, personal data is removed promptly; tax-relevant records are retained for the statutory Swiss period of up to ten years, with personal identifiers minimised. Integration tokens are deleted as soon as you disconnect the integration.

Services that process data on our behalf

  • Google Cloud / FirebaseHosting, database, authentication and content deliveryEU / US
  • StripePayment processing and partner identity verification (KYC)EU / US
  • ZoomVideo meetings for online sessions, created in your own connected account (optional)EU / US
  • Google Calendar APICalendar synchronisation to block busy times (optional)EU / US
  • Google GeminiAI page setup and assistant; profile content may be sent for processingEU / US
  • OpenStreetMapMap tiles when a visitor opens the coach search mapUnited Kingdom / global CDN

Data processing agreements are in place with the processors we commission directly (Google, Stripe). The platform loads no third-party stylesheets or scripts from external CDNs.

Your rights

Rights, contact and supervisory authority

These rights apply to you as a coach and to your clients on the platform.

  • Access: find out which data is stored about you.
  • Correction and deletion, subject to statutory retention duties.
  • Data portability in a common format.
  • Objection to processing based on legitimate interests, and withdrawal of any consent at any time.

Send requests to legal@roundwork.ai. Roundwork is operated by Melzer Labs, Gaissbergstrasse 2, CH-8280 Kreuzlingen. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Bern.

Privacy policy Terms and conditions Imprint

Questions before you trust us with client data?

Write to legal@roundwork.ai — or start the trial and inspect the platform with test data first.

Become a coach

See what the platform does