Privacy
Swiss Federal Act on Data Protection and UK transparency standards · version 0.3 · 17 August 2026
Current status: the free validator remains browser-only. A selected workbook or CSV and its validation result are not transmitted to Dali AI, Cloudflare, Stripe or another provider. Stripe hosts the separate subscription checkout and processes the business, billing and payment data entered there. There is still no UK Filing server-side file upload or customer-file database. Do not send invoice files or confidential framework data by email.
Controller
Dali AI GmbH, Wassergrabe 4, 6210 Sursee, Switzerland, UID/VAT number CHE-410.112.306. Privacy contact: mi@dali-ai.ch.
What is processed
| Data | Purpose | Recipient | Retention |
|---|---|---|---|
| IP address, requested URL, device and security metadata | Delivering and protecting the static website | Cloudflare, Inc. | According to Cloudflare's service configuration and retention policy; Dali AI does not maintain a separate visitor log |
| Name, business contact details and message content sent by email | Answering an enquiry and preparing a possible B2B relationship | Dali AI and Hostpoint AG as email host | Until the enquiry is resolved, or longer where required for an ensuing contract or legal record |
| Selected subscription, business name, billing address, tax ID, contact email, payment status and Stripe customer/subscription identifiers | Forming and administering the subscription, billing, fraud prevention and legal records | Dali AI, Stripe group entities, payment-method providers and their service providers | For the subscription and afterwards as required for accounting, tax, dispute and other legal records |
| Offer-dismissal preference stored on the visitor’s device | Not repeating the post-check subscription message after it is dismissed | No recipient; it remains in the browser | 14 days |
For UK visitors, the legal bases relied on are contract steps and performance for subscriptions, legal obligations for accounting and payment records, and legitimate interests for website security, fraud prevention and business enquiries. Dali AI performs no automated eligibility or pricing decision. Stripe may apply its own fraud and payment-risk processes as described in its privacy information.
Files checked in the browser
When a visitor chooses an MI file, the browser reads it into temporary working memory and applies the validation rules on the same device. The website sends no file content, file name, result, row count or framework selection back to Dali AI or an analytics service. Closing or refreshing the page removes the selected file and result from the page’s working memory.
For the RM6292 check, the browser downloads a compact reference containing the public GCA Service Table and customer URNs. That reference contains public authority identifiers; the visitor’s workbook is compared against it locally.
Service providers and locations
Cloudflare, Inc. delivers and protects the website through its global network and may process connection metadata in the United States and other countries used by its group and listed sub-processors. Dali AI relies on Cloudflare's Data Processing Addendum, including applicable contractual transfer safeguards.
Stripe group entities provide the hosted checkout, recurring billing, payment processing, authentication and fraud prevention. Stripe receives the information entered on its checkout page and may share transaction data with banks, card networks, payment-method providers and service providers. Stripe acts as a processor for some payment activity and as a controller for purposes it determines itself. Stripe describes the relevant entities, international transfers and safeguards in its Privacy Center. Dali AI receives customer and transaction records from Stripe but not complete card numbers or security codes.
The subscription-management page links to a dedicated Stripe portal configuration. Stripe verifies access by sending a one-time passcode to the customer email used at checkout. The UK Filing website does not receive the entered email, passcode or portal activity.
Hostpoint AG hosts the dali-ai.ch email service in Switzerland. Email enquiries are not routed through the UK Filing website.
Cookies and analytics
Dali AI sets no analytics or advertising cookies and uses no tracking pixel on the UK Filing pages. After a visitor dismisses the post-check subscription message, the browser stores only a local expiry time for 14 days so the message is not repeated. This preference is not transmitted. Cloudflare may set strictly necessary security cookies when a protection feature requires them. Stripe's separately hosted checkout may use cookies and similar technologies for payment security, authentication, fraud prevention and any optional Stripe service selected by the customer; Stripe explains these in its own checkout notices and Privacy Center.
Your rights
Subject to the applicable law, you may request access, correction, deletion, restriction, portability or objection by writing to the privacy contact above. Swiss data subjects may contact the Federal Data Protection and Information Commissioner. Where the UK GDPR applies, UK data subjects may complain to the Information Commissioner's Office.
Before customer files are processed server-side
A checkout subscription does not itself upload or transfer an MI file. Before recurring server-side customer-file processing begins, Dali AI will confirm the secure transfer and production processing arrangements, publish or provide the relevant hosting and storage providers, retention periods, approved sub-processors and data processing agreement, and resolve any UK-representative requirement that applies.
This notice covers the Cloudflare site, local browser validator and Stripe subscription checkout. It does not claim that a server-side MI-file upload or customer-file database is operating.