Co-Labs · Trust
What your clients entrust to you is hosted in Switzerland, in your name.
Hosted in Switzerland, backed up every night under encryption, in your name — your legal pages too. This page says who touches what, and what you take with you the day you decide to.
Politique de confidentialité
Vos données sont hébergées en Suisse, et cette page le dit à vos clientes — sous votre nom, à votre adresse.
- 1.Qui est responsable
- 2.Ce qui est collecté
- 3.Pourquoi, et à quel titre
- 4.Qui y a accès
- 5.Où sont les données
- 6.Combien de temps
- 7.Vos droits
- 8.La sécurité
- 9.Les cookies
Your legal notice carries your nameYour clients read your name, your address, your commitment.
Your data stays in SwitzerlandThe software and your client cards run with a Swiss host.
The points the law requires are writtenYou publish, that’s all.
Your data is yoursYou and your team have access; encrypted, backed up every night, in your name.
Your data is hosted in Switzerland, and an encrypted copy leaves every night
A Swiss server, a backup read back, a second copy off site.
Your database, your photos and your backups live with Infomaniak, in Switzerland. Every night, a backup is encrypted before it is written, then read back to check that it is intact; it stays 14 days on the server and 30 days at Swiss Backup, in Switzerland too, where nothing arrives but unreadable bytes: the key never leaves our server. Your photos, too, are encrypted and copied off site, and a full restore has been replayed into an empty database.
- HostingInfomaniak, in Switzerland
- Backupevery night, encrypted before writing, read back afterwards
- Fontsserved from our own servers: displaying your website passes your visitor’s address to no third party
- Keys and tokensyour provider credentials and your Google calendar, encrypted in the database
The points the law requires are written, in your name
Four legal pages on your website, filled in from your Settings.
Your website publishes its legal notice, its privacy policy, its terms and conditions and its cookies page, with your company name, your address and your UID number as entered; each is authoritative in French, and says so. The cookie banner appears on the first visit, and the line pointing to your terms and conditions sits under the button when your client confirms.
Your clients exercise their rights from their client area, and the policy names the Swiss authority to turn to. Your receipts separate the VAT amount from the rate, and every promotional mailing carries its unsubscribe link; your appointment reminders, for their part, arrive without it.
- Legal pageslegal notice, privacy, terms and conditions, cookies
- FADPexport and erasure from your client’s area, supervisory authority named
- VATrate and amount shown separately on the receipt, PDF summary for your return
- Unfair Competition Actunsubscribe link in every promotional mailing
Your data processors, named one by one
No ‘and other partners’.
Seven providers handle a share of your data, each for one precise task, and your website’s privacy policy tells your clients which one does what, and which ones work outside Switzerland. Artificial intelligence, telephone, SMS, email, payment and voice go through providers established in the United States. For trades that travel to the client, one public service is added: the job address is located by the Confederation’s address service, in Switzerland.
- OpenAIwhat Liah reads and what she replies
- Twiliotelephone and SMS
- SendGridemail
- Stripepayments; the card number never passes through us
- ElevenLabsLiah’s voice, when it is chosen for your business
- Google Calendaronly if you connect your calendar
- Infomaniakhosting and backups, in Switzerland
Your data is yours
Your records, your appointments, your takings and your photos are yours: they live under your address — subdomain or your own domain name — and it is your back office that reads and writes them. A website not yet published stays closed to visitors.
You and your team have access, each according to her role; at the counter, a code you choose protects your figures. Your backups are encrypted before they are written and read back every night, your providers’ credentials are encrypted in the database, and every access point into the application is inventoried: none is open to everyone without a written reason.
- Who has accessyou, and your team according to the role you give it
- Encryptionbackups and secrets encrypted; the key never leaves our server
- Every access point inventoriednothing open to everyone without a written reason
What you take with you, and what your client takes with her
Your client file downloads as CSV, ready for Excel, up to a cap that the screen tells you about if it is reached — the figure is on the limits page; your sales journal as CSV and your VAT summary as PDF follow, over the period of your choice. Your client, for her part, downloads her data from her client area — profile, appointments, orders, exchanges with Liah — and requests the erasure of her account in the same place: her name, her telephone and her email disappear, the accounting records remain without her name.
And if you decide to leave, we delete your business at your request: the attached accounts and the photos go with it, and the log keeps a count of what was taken away.
- Your client’s areaher data in a single file, her erasure in the same place
- Leavingbusiness deleted on request, accounts and photos included, the action written to the log
What we will adjust with you
Every line on this page describes what the code does; automated tests hold it, green before anything goes live, and a register of more than a hundred compliance points, cross-checked against the code, serves as the checklist.
Co-Labs does not yet have a registered legal entity. Your back office is protected by a password, with no two-factor authentication for now. The live database’s disk is not encrypted; the backups and the secrets are. The data processing agreements with these providers remain to be signed. The detail lives on the limits page.
Want to see it under your business’s name?