Privacy Policy

1Who is responsible for your data

This Privacy Policy explains how Webosa Koç (“Veiria”, “we”, “us”) handles personal data when you visit veiria.com or use the Veiria service. Webosa Koç is the data controller. Our full postal and contact details are at the foot of this page.

2Which law applies

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies to a given visitor or customer, the EU and UK General Data Protection Regulation (GDPR).

3Personal data we collect

Data you give us

Name, work email address, company name, the website domain(s) you ask us to analyse, and the content of messages you send us. If you buy a plan, billing details are collected and processed by our payment provider; we receive limited transaction data (such as the last four digits of a card and the billing country), not full card numbers.

Data collected automatically

IP address, approximate location derived from it, device and browser type, referring page, pages viewed, and date/time stamps. We use cookies and similar local storage, and record product-analytics events about how the site and app are used (for example which steps of a sign-up flow are completed). Non-essential analytics are used only with your consent where consent is required.

Data from your website and public sources

To produce audits and drafts, the Service reads the content of your public web pages and records how AI platforms and search engines respond to prompts about your business and your market. This material can incidentally include the names of people publicly associated with your business (for example a quoted founder or author).

4Why we process your data, and our legal bases

• Provide and administer the Service — to run scans, generate reports and Deliverables, operate your account and provide support. Legal basis: performance of a contract.
• Billing and records — to take payment and keep accounting records. Legal basis: contract and legal obligation.
• Security and abuse prevention — to protect the Service and investigate misuse. Legal basis: legitimate interest and legal obligation.
• Product analytics and improvement — to understand usage and improve the Service. Legal basis: legitimate interest, or consent for non-essential cookies.
• Marketing emails — to send updates about Veiria. Legal basis: consent; every email has an unsubscribe link.
• Legal compliance — to comply with law and respond to lawful requests. Legal basis: legal obligation.

5AI processing and sub-processors

To deliver the Service we send prompts and, where relevant, extracts of your public content to third-party AI platforms (which today include providers such as OpenAI, Google, Anthropic and Perplexity) so they can generate audits, scores, sample answers and drafts. We aim to use business or API tiers whose terms state that submitted data is not used to train their public models, but we do not control those platforms.

We also rely on sub-processors for hosting and infrastructure, payment processing, email delivery and product analytics. Each is bound by a data-processing agreement. The current list of sub-processors is available on request at contact@veiria.com; we will give reasonable notice of a material change.

6Cookies and similar technologies

We use strictly necessary cookies and local storage to run the site (for example to remember a preference or an A/B test group), and, subject to your consent where required, analytics cookies to measure usage. You can block or delete cookies in your browser; some features may then not work as intended.

7Sharing and disclosure

We share personal data with the sub-processors described above, with professional advisers under a duty of confidentiality, and with public authorities or courts where we are legally required to do so. If the business is reorganised, merged or acquired, data may transfer to the successor under this Policy. We do not sell personal data.

8International transfers

Some sub-processors are located outside Switzerland and the EEA, including in the United States. Where we transfer personal data to such a country, we rely on an adequacy decision, on the EU Standard Contractual Clauses together with the Swiss addendum, or on another lawful transfer mechanism. A copy of the relevant safeguards is available on request.

9How long we keep data

• Account and Service data: for as long as your account is active and then for up to 90 days, after which it is deleted or anonymised, unless a longer period is required by law.
• Invoicing and accounting records: retained for 10 years, as required by Swiss law.
• Support messages: up to 24 months after the matter is resolved.
• Analytics data is aggregated or de-identified over time.

10Security

We use technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls on a need-to-know basis, and regular review of our providers. No system is completely secure, and we cannot guarantee absolute security.

11Your rights

Subject to the conditions in applicable law, you can ask us to: give you access to the personal data we hold about you; correct inaccurate data; delete data; restrict or object to certain processing; and provide data you gave us in a portable format. Where processing is based on consent, you can withdraw it at any time without affecting prior processing.

To exercise a right, email contact@veiria.com. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, or, if you are in the EEA or UK, with your local supervisory authority.

12Automated processing

Visibility scores and audit findings are generated automatically. They are assessments of a business and its web content and do not produce legal or similarly significant effects on an individual. We do not make decisions about individuals based solely on automated processing.

13Children

The Service is intended for businesses and is not directed to children under 18. We do not knowingly collect personal data from children.

14Changes to this Policy

We may update this Policy. The version in force is the one published here with the effective date shown above. If a change is material we will give notice by email or in-product before it takes effect.

15Contact

Questions or requests about privacy: contact@veiria.com.