Privacy policy
How Avis Boost collects, uses and protects personal data, in line with the Swiss Federal Act on Data Protection (FADP, SR 235.1) and its ordinance (DPO, SR 235.11).
Last updated: October 22, 2026
Avis Boost is an online service published by Vergasta Digital ("we") in Switzerland. This policy meets the duty to inform under Art. 19 FADP. It covers three groups of people: merchants who use Avis Boost, customers of those shops who receive a review request, and visitors to avisboost.ch.
Who is responsible?
- Vergasta Digital, Rue du Temple 5, 2610 Saint-Imier, Switzerland, contact@avisboost.ch, is responsible for merchant data (account, billing), website visitor data and technical logs.
- The shop is responsible for the data of its own customers that it enters or imports into Avis Boost. For that data, Vergasta Digital acts as a processor (Art. 9 FADP), under the data processing agreement (DPA).
Merchant data
- Account: name, e-mail address, password (stored with irreversible encryption), language, phone number for two-factor authentication, Google or Apple identifiers if you use them to sign in.
- Shop: name, address, phone, Google profile link, text message sender name, sending settings.
- Billing: Stripe customer ID, card type and last four digits, subscription history. The full card number is processed by Stripe and never reaches us.
- Usage: referral code, notification preferences, security logs (IP address, browser, date and action).
Data of shop customers
When a shop uses Avis Boost, we process on its behalf:
- the person’s first name, last name, mobile number and, where provided, e-mail address and language;
- the request history: sending date, text message delivery status, date the link was opened;
- the rating given and, if the person writes one, their private message, along with how the shop handles it.
This data is used only to send the shop’s review requests and pass the answers on to it. It is never sold or used for advertising. If the person chooses to leave a review on Google, they leave Avis Boost: Google then processes their data under its own policy.
Website visitors
- Contact form: name, establishment, e-mail address, phone and message, used to answer the request.
- Advertising conversion measurement: only if you accept it in the banner shown on your first visit.
Purposes and legal bases
| Purpose | Basis |
|---|---|
| Providing the service and managing the account | Performance of the contract |
| Sending review requests on behalf of the shop | Shop’s instructions (processing, Art. 9 FADP) |
| Billing and keeping accounting records | Contract and legal obligation (Art. 958f CO) |
| Security and access logging (Art. 4 DPO) | Overriding interest |
| Answering contact requests | Overriding interest |
| Advertising conversion measurement | Consent |
Processors and recipients
We use the following providers, who are bound by contract to confidentiality and data protection obligations.
| Provider | Role | Location |
|---|---|---|
| Infomaniak Network SA | Hosting of the website, application and database, sending e-mails | Switzerland |
| Twilio Inc. | Sending text messages (review requests, sign-in codes) | United States / international |
| Stripe Payments Europe, Ltd. | Subscription payment | Ireland / international |
| Google LLC / Apple Inc. | Sign-in with a Google or Apple account, if you choose it | United States / international |
| Google LLC | Advertising conversion measurement (Google Tag Manager, Google Ads), with your consent | United States / international |
| Umami Software, Inc. | Anonymous audience measurement of the website, without cookies (Umami) | International |
| Cloudflare, Inc. | Bot protection on the contact form (Turnstile) | International |
| Trustpilot A/S | Invitation to review Avis Boost, one month after sign-up | Denmark |
| BunnyWay d.o.o. | Fonts in the merchant area (Bunny Fonts) | Slovenia |
| Browser push services (Google, Apple, Mozilla) | Delivering push notifications, if you turn them on | International |
Transfers abroad
The application is hosted in Switzerland. Some of the providers above process data in the European Union or the United States. These transfers are limited to what is necessary and covered by appropriate safeguards, in particular the standard contractual clauses recognised by the Federal Data Protection Commissioner (Art. 16 and 17 FADP).
Retention
- Account data: as long as the account is active, then deleted or anonymised within a reasonable time after it is closed.
- Data of shop customers: as long as the shop keeps it in its area. It is deleted at the shop’s request or when its account is closed. Review request links expire after 30 days.
- Billing records: 10 years (Art. 958f CO).
- Security logs: at least one year, then deleted.
- Contact form messages: as long as needed to handle the request.
Security
We protect data with encrypted connections (HTTPS), irreversibly encrypted passwords, two-factor authentication (mandatory for our team), separation of data between shops, review links that cannot be guessed and that expire, and logging of access to personal data (Art. 4 DPO).
Your rights
Within the limits of the law, you can:
- get information about your data (right of access, Art. 25 FADP);
- have inaccurate data corrected and ask for it to be deleted (Art. 32 FADP);
- receive your data in a common format (Art. 28 FADP): merchants can download it at any time from the Profile page;
- object to processing based on our overriding interest.
If you are a customer of a shop and no longer want to receive review requests, contact that shop. You can also write to us and we will pass your request on. To exercise your rights, write to contact@avisboost.ch. We reply within 30 days. You can also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.
Cookies and local storage
| Name | Role | Duration |
|---|---|---|
| avis-boost-session, XSRF-TOKEN | Session and form security (necessary) | Session |
| avisboost_ref | Remembers the code of a referral link | 30 days |
| avisboost_site_access | Access to the site during its preparation phase | 30 days |
| avisboost-consent (local storage) | Remembers your choice in the consent banner | Until cleared |
| Google cookies (Tag Manager, Ads) | Advertising conversion measurement | Per Google, only with your consent |
Without your consent, advertising tags set no cookies. You can change your mind at any time by clearing the site data in your browser. We do no remarketing or personalised advertising. Audience measurement (Umami) sets no cookies and does not store your IP address.
Changes
This policy may change to follow the law or the service. The date of the last update is shown at the top of the page.
A question about your data? Write to contact@avisboost.ch. A person based in Switzerland will reply.