Privacy notice
This note describes how Rewisio processes personal data. It is not legal advice and not a finished legal review.
Controller
Simone Solida Bahnhofweg 5 6252 Dagmersellen Switzerland Email: support@rewisio.ch She is responsible for processing personal data in connection with Rewisio (https://rewisio.ch).
What we process
Name, email address, password stored only as a hash, details about your business and locations, Google reviews of your connected locations, reply drafts and published replies, and billing data.
Service providers
Payments go through Stripe Checkout. We do not store card details ourselves. Checkout is connected and currently runs in test mode, with no live charges. When you connect a location, we receive reviews through Google Business Profile. Access credentials are stored encrypted. Reply drafts are created in Rewisio. Review text and style settings are sent to OpenAI only when you explicitly switch that on. The application is intended for Vercel, function region Frankfurt (fra1). The database is Neon Postgres, intended in the EU (Frankfurt). This is not Swiss hosting and not a verified assurance that every processing step stays in Frankfurt.
Transfers abroad
Stripe, Google and OpenAI may process data outside Switzerland and the EU. Vercel and Neon are intended for the EU/Frankfurt region. This is an overview. It does not describe individual safeguards and it is not Swiss hosting.
Retention and rights
We delete account data within 30 days after the account is deleted. We delete Google data for connected locations, reviews and replies within 30 days after the location is disconnected or after cancellation. We keep invoice records for 10 years (Swiss Code of Obligations, OR). Access, correction and deletion: support@rewisio.ch.
Reach measurement
We measure how often the public pages are opened. A check value is formed from the IP address and the browser identifier with a random key that is valid only that day and is then deleted. We do not store the IP address. We keep the day, the page and the check value. After 30 days those rows are replaced by daily totals and deleted. The basis is our legitimate interest in this measurement. Vercel processes IP addresses in server logs.