Privacy policy
How Swizee processes personal data, and the rights you have.
1. Controller
Ocho Agency - Lepetit Consulting, Rue du Port-Franc 22, 1003 Lausanne, Switzerland, operating the service under the trade name Swizee, is the controller within the meaning of the Swiss Federal Act on Data Protection (FADP).
Contact for any question about data protection: info@swizee.link.
2. Applicable law
Swizee is established in Switzerland, addresses professional establishments located in Switzerland, invoices in Swiss francs and ships physical signs within Switzerland only. The Swiss FADP applies.
The service is available in several languages, three of which are Swiss national languages. Neither that fact, nor the possibility that a visiting guest opens a menu from abroad, is enough to make a foreign law applicable. Other data protection laws may apply where their own conditions of application are met.
3. Two distinct roles
For the data of its business customers — accounts, establishments, content, billing — Swizee determines the purposes and means of the processing and is the controller.
For requests sent by a hotel's guests through the stay guide — name, phone number, room number, message — it is the establishment that decides to collect them and what to do with them. Swizee processes them on behalf of that establishment, on its instructions, and passes them on to it.
Swizee does not use this data for any purpose of its own. The processing necessary to provide the service is reserved: delivering the notification, backups, security and abuse prevention, support at the establishment's request, and compliance with legal obligations.
Anyone wishing to exercise their rights over this data should contact the establishment concerned in the first instance; Swizee assists in that context.
4. Data processed and purposes
Account — email address, password stored as a hash, display name, language. Purpose: account creation, authentication, service communications. Necessary to perform the contract.
Establishment — name, country, time zone, languages enabled. Purpose: configuration and publication.
Content — menus, dishes, prices, allergens, stay guide, text. Purpose: publishing the experience intended for the establishment's guests.
Media — logos, dish photographs, cover images. Purpose: display. Images are re-encoded on upload and their EXIF metadata is removed.
Imported documents — the PDF file uploaded to create a menu. Purpose: reading the menu automatically. The document is deleted as soon as the proposal is accepted or discarded.
Translations — text generated automatically from the customer's content.
Billing — billing address, amounts, subscription status, transaction references. Swizee never has access to payment card data, which is entered directly with Stripe.
Sign orders — recipient, delivery address, postcode, town. Purpose: shipping.
Website contact — full name, establishment name, city, email, language and message. Purpose: replying to the enquiry sent to the Swizee team.
Usage statistics — Swizee measures the use of published experiences in order to give establishments aggregated statistics. This measurement uses no cookie. Swizee keeps no IP address, no user agent and no visitor identifier in this context: only the establishment and QR code concerned, the type of event, the language chosen and a broad device category are recorded. These statistics are designed without individual tracking of visitors.
Requests from a hotel's guests — see clause 3.
Security — session token stored as a hash, sign-in attempt counters, two-factor authentication secret and recovery codes stored encrypted, logs of actions taken on an account. Purpose: security of the service, abuse prevention, evidence.
The establishment's Wi-Fi password, where entered for the guide: stored encrypted.
5. Cookies
The service uses only cookies necessary for it to work: a session cookie to keep a signed-in user connected to their management area, and a language cookie set only when a visitor chooses a language themselves on the site.
Experiences opened by an establishment's guests set no cookie at all. No third-party analytics tool, no advertising pixel and no external font are used.
6. Recipients and roles
Swizee does not sell any data and passes it to third parties only as far as necessary to operate the service. The following providers do not all act in the same capacity.
| Provider | Function | Categories transmitted | Role |
|---|---|---|---|
| Railway | Hosting of the applications, the database and the files | All data held by the service | Processes the data on behalf of Swizee |
| Stripe | Payments, subscriptions, billing | Customer reference, billing address, amounts; payment data is entered directly with Stripe | Acts on behalf of Swizee to carry out the payment, and on its own account for fraud prevention and its own legal obligations, notably anti-money-laundering |
| Google (Gemini) | Menu import and reading; automatic translation | The imported document; the text to be translated | Processes the content transmitted under the terms applicable to the interface used |
| Infomaniak | Delivery of the service's emails | The recipient's address and the content of the message, including the notification of a guest request | Processes the data on behalf of Swizee |
Data may also be disclosed to an authority where the law requires it.
7. Disclosure abroad
Part of the processing takes place outside Switzerland. Based on the checks Swizee has carried out and on what the providers publish:
- Railway — file storage answers from Amsterdam, Netherlands; the applications and the database are configured for the provider's European region, in the Netherlands. Railway is a company established in the United States and states that its own processing operations take place principally there.
- Stripe — an international group. Stripe states that the majority of its service providers are located in the European Union, the United States and India, and that it relies on standard contractual clauses for disclosures from Switzerland.
- Google — Google LLC is established in the United States; processing through the Gemini interface may take place in the United States and in the other countries where Google operates its infrastructure.
- Infomaniak — services hosted in Switzerland.
These disclosures are made either to states recognised as offering adequate protection under the FADP, or on the basis of the safeguards provided for by Swiss law — in particular standard contractual clauses or equivalent mechanisms — as set out in those providers' terms.
8. Retention periods
The service applies the following periods automatically:
| Data | Period |
|---|---|
| Usage statistics | 13 months |
| Requests from a hotel's guests | 90 days |
| Contact form enquiries | 90 days |
| Imported document | Deleted when the proposal is accepted or discarded; 30 days if the import is abandoned |
| Uploaded media not attached to any content | 24 hours |
| Session | 14 days |
| Password reset link | 7 days after use or expiry |
| Sign-in attempt counters | 24 hours |
| Invitation | 90 days after acceptance, 30 days if revoked or expired |
The following data is kept according to a necessity criterion rather than for a period fixed in advance:
| Data | Criterion |
|---|---|
| Content and account after the contract ends | Kept so that the account can be reactivated or the content retrieved, and deleted at the customer's request or once no longer needed for that purpose |
| Account without a subscription that has stayed inactive | Kept for as long as its holder can reactivate it, and deleted on request or once no longer needed |
| Audit logs | Kept for as long as necessary for the security of the service, abuse prevention and evidence |
Once Swizee sets numerical periods for these three categories and applies them automatically, this policy will be updated accordingly.
Finally, some data must be kept irrespective of any request:
| Data | Period | Basis |
|---|---|---|
| Accounting records and invoices | 10 years from the end of the financial year | Code of Obligations art. 958f para. 1 |
9. Security
Passwords are stored as hashes, never in clear text. Two-factor authentication secrets and Wi-Fi passwords are encrypted. Traffic is encrypted in transit. Each establishment's data is isolated at database level. Access to production data is limited to those who need it.
No measure removes risk entirely: Swizee applies appropriate technical and organisational measures, without being able to guarantee absolute security.
10. Your rights
Any data subject has the rights provided for by the FADP, in particular the right to information about the data concerning them, to have inaccurate data corrected, to request its deletion or destruction, to object to processing, and to request that processing be restricted.
Requests should be sent to info@swizee.link. Swizee may ask for information allowing the requester's identity to be verified, and handles requests within a reasonable period.
In accordance with the FADP, the exercise of these rights may be restricted, deferred or refused in the cases provided for by law, in particular where a legal obligation requires the data to be kept, where an overriding interest of Swizee or of a third party stands in the way, or where a request is manifestly unfounded. Swizee then states the reason for its decision. The data concerned is no longer used for other purposes and is deleted as soon as the reason for keeping it disappears.
Anyone may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).
11. Changes
Swizee may adapt this policy. The applicable version is the one published on the site, dated at the foot of this page. A substantial change is communicated to customers by email.
12. Contact
Ocho Agency - Lepetit Consulting, Rue du Port-Franc 22, 1003 Lausanne, Switzerland — info@swizee.link
Version of 22 September 2026