Privacy policy

Offrizo is made for tradespeople who want a simple tool. This policy is written in the same spirit: what we collect, why, where it is, and how you stay in control. It complies with the Swiss Federal Act on Data Protection (FADP, the revised “nLPD”) in force since 1^st September 2023.

1. Who is responsible

GAFAITI Technology Services, a sole proprietorship registered in the commercial register of the canton of Vaud, with its seat in Pully (VD), Switzerland. Responsible person: Yassine Gafaiti. Contact for any question about your data: support@offrizo.ch.

2. Which data, and why

2.1 Your account

• E‑mail address and password: to create your account and recognise you. The password is hashed by our authentication provider; we never know it.
• Mobile number, optional: only if you choose to receive your verification code by SMS rather than by e‑mail.
• Verification codes: sent by e‑mail (or SMS if you chose it) when you create your account, on a new device and after a password reset. Never on every launch.

2.2 Your work in the app

Your company profile, logo, price book, clients, quotes, invoices, job-site photos, dictations and their transcriptions, statuses and payment reminders. This data lives on your phone first. The app works offline; the server only receives a backup copy of it (see 3) so that you can find everything again on a new phone.

2.3 Your clients’ data

Your clients’ names, addresses, phone numbers and e‑mails are yours: you are responsible for their processing within the meaning of the FADP, and we process them on your behalf, only to make the app work (storage on your phone, backup, generation of your documents). We use them for nothing else.

2.4 Subscription

The purchase goes through Apple or Google. We receive an anonymous subscription identifier and its state (trial, active, cancelled) via RevenueCat. We never see your card or your bank details.

2.5 App stability

If the app crashes, a technical report (phone model, version, crash trace) is sent to Sentry. These reports are filtered before sending: no name, amount, e‑mail, photo or quote text appears in them. No session tracking, no screen recording.

2.6 Automatic quote generation

When this feature is enabled in the app, the photos and the dictation you choose to send are transmitted, via our server in Zurich, to the artificial intelligence model provider Anthropic (United States) to produce a draft. The processing is one-off; the provider does not use this data to train its models. If you don’t use this feature, nothing is transmitted. Its activation is indicated in the app.

2.7 What we don’t do

• No advertising, no sale or rental of data, no profiling.
• No trackers or cookies on the offrizo.ch website.
• No analysis of your behaviour in the app beyond anonymous counters (number of quotes created, for example) that cannot identify you.

3. Where the data is stored

• On your phone: all of your work, in the app’s protected storage.
• In Switzerland (Zurich): your account and your backup (a copy of your data, and your logo), at Supabase on Amazon Web Services infrastructure located in the Zurich region. Each backup is accessible only with your account.
• Outside Switzerland, occasionally: sending transactional e‑mails (Resend), crash reports (Sentry) and, if enabled, automatic generation (Anthropic). These transfers rely on contractual safeguards compliant with the FADP.

4. Processors

5. How long

• Your account and your backup: as long as your account exists.
• Account deletion: from the app (« Mon compte » › « Supprimer mon compte », i.e. “My account” › “Delete my account”) or by e‑mail. Server data is erased immediately, and at the latest within 30 days. What is on your phone is erased by the app at the same time. See Delete your account.
• Crash reports: 90 days.
• Technical server logs: 30 days.
• Your sent quotes and invoices stay on your phone as long as you keep them: the accounting record-keeping obligations (10 years in Switzerland) are yours, and the app lets you export them.

6. Your rights

At any time you can: access your data, correct it, export it (your clients as a CSV file from the app, your documents as PDFs), have it erased, or object to a processing. Write to support@offrizo.ch from your account’s address; we reply within 30 days. In case of disagreement, you can refer the matter to the Federal Data Protection and Information Commissioner (FDPIC).

7. Security

• Encryption in transit (TLS) between the app, the server and each processor.
• Hashed passwords, revocable sessions, biometric unlock on your phone.
• Each user only accesses their own data on the server (access rules at the database level).
• Third-party service keys are never in the app: they stay on the server.

8. The offrizo.ch website

The website is a static page with no cookies or trackers. Its only form is the launch waiting list (8.1). Cloudflare, which hosts the site, records technical access logs (truncated IP address, page requested) for a short time, for network security.

8.1 Launch waiting list

The “Founding‑member place” form records your e‑mail address, your trade, your canton, the phone type, and your mobile number if you give it. Sole purpose: to notify you on launch day and to assign you, where applicable, the founder price in order of confirmation. We send you an e‑mail to confirm your address (double opt-in), an e‑mail with your sign‑up number, then an e‑mail on launch day — and an SMS if you left your number for the beta; nothing else. The data is stored at Cloudflare (D1 database, infrastructure in Western Europe) and the e‑mails go out via Resend. An unconfirmed address is erased after 30 days; every e‑mail contains a link that erases your sign‑up immediately; the whole list is erased at the latest six months after launch. The form also records a technical fingerprint of your connection, valid for one day, solely to limit abusive submissions.

9. Changes

If this policy changes significantly, the app tells you before the change applies. The version in force is always the one published on this page, with its date.