Privacy policy

The controller is Patrya Gestion Sàrl (a limited liability company under Swiss law, UID CHE-325.953.314, chemin des Matines 7, 1007 Lausanne, Switzerland), publisher of Ryze Systems and Ryze My Life, which can be reached via ryzesystems.io.

The processing described here falls under the Swiss Federal Act on Data Protection (nFADP, in French nLPD) and, where the data subject is in the European Union, under the GDPR.

All the data processed is professional data: it concerns a person in their role within a company. No sensitive data within the meaning of Art. 5 nFADP (health, opinions, trade union membership, etc.) is requested or used.

Professional contact details

contact_nom, contact_email, contact_telephone, entreprise, secteur, url_site (contact name, email, phone, company, sector, website). An email address or a phone number is enough: the other fields stay empty if they are not supplied.

Field notes

The sales representative enters a free description of the conversation (notes, ligne_prospect) as well as the pain points mentioned and the rough size of the team. These are their observations, not an assessment of you as a person.

Context of origin

The channel of arrival and the raw payload received from that channel are kept in meta: for the website form, this includes the page from which it was sent (referer header) and the proof of consent described in point 04.

Commercial register

For a Swiss company, and from its name alone, the tool can query Zefix, the official register kept by the Federal Commercial Registry Office: company name, UID, registered office, legal form and status are then retrieved. This is information that is public by nature, never guessed: without a clear match, nothing is recorded.

Two details that matter. No company register is queried outside Switzerland: a French, Belgian or other company is not looked up in any register, either by us or by a third party. And this lookup only takes place for records that go through our internal sales follow-up, not for every diagnostic, and only when this enrichment is enabled on the server side; it can be disabled, in which case nothing is queried at all.

Viewing a diagnostic

See point 08: sections displayed, time spent on each, reaching the bottom of the page, clicks on the contact buttons, and the browser’s user-agent header (truncated to 400 characters). No IP address is recorded: the IP address is only used to limit the rate of requests, in memory, without being written to the database.

Comments

If you comment on a section of a diagnostic, the message, the section concerned and, if you fill them in, the name and email address you give are recorded.

• Getting back in touch with you and following up the commercial conversation.
• Preparing a personalised diagnostic for your company and, where appropriate, a priced proposal.
• Knowing whether the document sent has been viewed, and what you stopped on, in order to follow up usefully rather than at random.
• Managing internal sales activity (allocation of leads, statuses, volumes).

Your data is neither sold, nor rented, nor passed on to third parties for advertising purposes or for prospecting on behalf of others.

Public form. When you fill in a Ryze Systems form yourself, the basis is your consent (Art. 6 para. 6 nFADP; Art. 6(1)(a) GDPR). It is collected through a checkbox that is not pre-ticked: without it, the form is refused and nothing is recorded. The fact of consent, its timestamp, the exact wording displayed and its version are kept with the record, as proof. You can withdraw it at any time (point 11); withdrawal does not affect what was done before.

Direct B2B prospecting. When the contact arises from a professional encounter (in the field, at a trade show, a business card handed over, an introduction), the basis is the publisher’s legitimate interest in approaching companies with an offer that matches their activity (Art. 6(1)(f) GDPR; Art. 31 nFADP). The processing remains limited to professional contact details and conversation notes. You can object at any time, without giving a reason (point 11).

Online advertising. A lead can also arrive from a form hosted by an advertising platform. In that case, the platform collects the consent, under its own terms, before passing the record on to us.

Internally: the sales representatives of Ryze Systems, each within their own scope, and the administrators of the tool.

Externally, only the following service providers, each for a specific function:

• Supabase: hosting of the database and management of internal accounts. Instance in the eu-central-1 region (Frankfurt, European Union).
• Vercel: hosting and running of the web application.
• OpenAI: generation of the text of the diagnostic and of follow-up messages, and reading of a photo of a business card or of a dictation when the sales representative uses one. Depending on the case, it receives: the company name, the sector, the field notes, the public content of the website analysed, the contact’s name and any comments you made. Amounts never come from the model: they are calculated separately (point 10). Requests are sent with application-level storage disabled (store: false).
• Airtable: mirror copy of the leads (name, email, phone, company, sector, notes, status, estimate) in the publisher’s working base.
• Zefix: Swiss commercial register (Federal Commercial Registry Office). Only the company name is sent to it, for a public lookup, and only for a Swiss company: outside Switzerland, this provider is never called.
• WhatsApp (Meta): if you use the “Chat on WhatsApp” button, the conversation takes place on WhatsApp, under Meta’s terms.
• Telephone operator: if the presentation is sent by SMS, the message passes through the operators of the sender and of the recipient.

Communication within the publisher. Ryze Systems runs several tools on the same infrastructure. An automatic mechanism of the database copies each lead record (name, email, phone, notes and follow-up) to another Supabase project of the same publisher, when it is created and then at each change, as well as an activity summary once a day. This is not a transfer to a third party: the controller remains the same, and the purpose remains internal sales management.

The database is hosted in the European Union. However, OpenAI, Airtable, Vercel and Meta are companies established in the United States: the data passed on to them, as described in point 05, is processed outside Switzerland and the EU.

These transfers rely on the data processing agreements (DPA) and the standard contractual clauses built into these providers’ terms.

As long as a record is active (a sales representative comes back to it, its status changes, a diagnostic is regenerated), it stays in the database: this is the duration of the ongoing commercial relationship.

After 30 days without any activity on a record whose relationship has not been concluded, it is anonymised automatically, every night: contact details, notes and free text erased, diagnostics, comments and viewing events deleted. It is exactly the same processing as an erasure request, and it is irreversible.

Two statuses are excluded, because they correspond to a concluded relationship: converti (converted), a current client, for whom we must be able to document follow-up, invoicing and support, and perdu (lost), kept in order to know what was won and what was lost.

Applications sent from the Join page are deleted automatically 6 months after a refusal, and 12 months after the last activity if nothing came of them. Answers to the Diagnostic 360 are deleted 30 days after the last activity on the assessment.

This automatic purge does not prevent you from acting sooner: you can ask for your record to be erased (point 11) at any time, without waiting for this period.

A diagnostic page sent to you is not a passive document. It records, with a timestamp and linked to that specific document:

• which sections appeared on screen, and the time spent on each;
• the fact of having reached the bottom of the page;
• the opening of the comments area;
• clicks on the WhatsApp and appointment booking buttons;
• skipping the introduction animation;
• your browser’s user-agent header.

This measurement serves one purpose only: allowing your contact person to follow up on what really interested you. Durations of less than one second are ignored and those beyond ten minutes are capped: a tab left open is not attention. A click on the booking button changes your record to the “interested” status.

These pages are not indexed by search engines and are only accessible with the secret link that was sent to you. A diagnostic that has not been shared can never be viewed.

On public pages only, Ryze Systems may use Google Analytics 4 to measure their traffic. Refusal is the default: the Google script is not downloaded and no measurement is sent before an explicit click on “Accept”. Advertising storage remains refused in all cases.

Diagnostic pages accessible by secret link, the CRM and the RML sales area are excluded from this measurement. Your choice is kept in the browser’s local storage; you can withdraw it as easily as it was given with the button below.

The only existing cookies are the session cookies of the internal area: they are set after a Ryze Systems sales representative logs in, are used solely to maintain that session, and are strictly necessary for the area to work. As such, they do not require prior consent.

The diagnostic page uses your browser’s session storage for two things: not replaying the introduction animation and not counting a section already seen twice. These values disappear when the tab is closed and are not used for any profiling.

A priority score and an investment range are calculated automatically from what you or your contact person indicated (sector, team size, pain points mentioned, elements observed on your public website). This calculation follows fixed rules; it guides the order of processing internally.

No decision producing a legal effect or significantly affecting you is taken on this basis alone: a human decides to make contact, to make a proposal and to price it. You can ask to know the logic applied to your record and have any incorrect input data corrected.

You have the following rights at any time:

• Access: obtaining a copy of what is recorded about you, including field notes and viewing events.
• Rectification: having an inaccurate contact detail, sector or note corrected.
• Erasure: having your record, its diagnostics, its comments and its viewing events deleted.
• Objection: refusing any further prospecting. No reason has to be given.
• Withdrawal of consent: if you had filled in a public form.
• Portability: receiving the data you supplied to us in a machine-readable format.
• Restriction: asking for processing to be frozen while a dispute is checked.

A single request is enough, through one of these channels. Simply state the name of the company concerned and, if it is about a diagnostic, the link you received:

• by email to contact@ryzesystems.io
• by WhatsApp at +41 76 214 60 69

We reply within 30 days. The request is free of charge. If you consider the reply insufficient, you can refer the matter to the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or, if you live in the European Union, to the supervisory authority of your country.

The database is accessed exclusively on the server side: the administration key is never sent to the browser. A diagnostic is only accessible with its secret link, and only once the sales representative has shared it. Public entry points (form, webhook) require a shared token, filter the authorised origins and limit the rate per IP address. Exchanges take place over HTTPS.

These measures reduce the risk; they do not eliminate it: no online service can guarantee absolute security.

This page evolves with the product. The version in force is the one displayed on the French page, with its date. The consent collected on the public form keeps the reference of the version that was presented to you on the day you gave it.