Legal
Privacy & cookies
Last updated 6 June 2026. This notice explains what personal data Vitryne collects, why, and the choices you have. We follow the Swiss Federal Act on Data Protection (nFADP) and, for visitors and customers in the EU, the General Data Protection Regulation (GDPR).
Who we are
Vitryne is operated by G. Chines SA (trading as “Geibo”), Rue Baylon 2bis, 1227 Carouge (GE), Switzerland. For any privacy question or to exercise your rights, contact us at contact@geibo.ch.
Geibo is the data controller for your personal data. Our full legal entity details (name, registered address and registration number) are in our legal notice.
What we collect and why
- Account data (name, email, organisation) so you can sign in and we can run your account. Legal basis: performance of our contract with you.
- The documents you uploadand the catalogue data extracted from them. These are stored privately for your organisation. We do not use them to train AI models, and our AI extraction providers process them on no-training terms (see “Where your data lives”).
- Billing data handled by our payment provider, Stripe. We never see or store your full card details.
- Analytics about how the product is used, to improve it. Legal basis: your consent (see cookies below). Until you consent, analytics run in anonymous, cookieless mode.
Where your data lives
Your account, catalogue and uploaded documents are stored and hosted in Switzerland and the EU: the database and file storage are in Zurich (Supabase), and application hosting and analytics are in the EU.
To turn an uploaded PDF into a catalogue, the file is sent to our AI extraction providers, Google and Anthropic, which may process it on infrastructure outside the EU (including the United States) for the time it takes to extract the works. We use their API offerings that do not train models on your data, under their data-processing terms and standard transfer safeguards. The full list of providers and locations is on our subprocessors page.
Cookies and similar technologies
We keep cookies to a strict minimum. We use two kinds:
- Strictly necessary: a secure session cookie from our authentication provider (Supabase) that keeps you logged in. The site cannot work without it, so it needs no consent.
- Analytics (optional): PostHog, which helps us understand product usage. Until you accept, PostHog runs in cookieless mode: it stores nothing on your device and identifies no one. Only if you accept does it set cookies / local storage.
We do not use advertising or third-party marketing cookies. Our fonts are self-hosted, and our payment and sign-in providers (Stripe, Google) may set their own cookies on their own pages under their own policies when you use them.
You can change or withdraw your analytics choice at any time:
Sharing and processors
We share data only with the service providers that run Vitryne, each bound by a data-processing agreement: Supabase (authentication, database and file storage), Vercel (application hosting), PostHog (analytics), Stripe (payments), Resend (transactional email), and Google and Anthropic (AI extraction). The full list, with what each receives and where it is processed, is on our subprocessors page. We never sell your data.
How long we keep it
We keep your account and catalogue data for as long as your account is active. If you close your account, we delete or anonymise your data within a reasonable period, except where law requires us to keep certain records (for example billing).
Your rights
You can ask to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Under the GDPR you may also lodge a complaint with your local supervisory authority; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). To exercise any right, email contact@geibo.ch.
Changes to this notice
We may update this notice as the product evolves. When we make material changes, we will update the date at the top and, where appropriate, let you know in the app.