Privacy policy
We collect as little data as possible. Here is exactly what we collect, why, and on what legal basis.
Controller
The controller responsible for personal data on this website is named on the Impressum page. For any data-protection request, please contact support@getvitora.com.
Applicable law
This site is operated from Switzerland and complies with the revised Swiss Data Protection Act (revFADP). Because the site is also used by people in the EU/EEA, the EU General Data Protection Regulation (GDPR) applies in parallel.
Visiting the site
When you visit getvitora.com, our host Netlify (Netlify, Inc., San Francisco, USA) records standard server logs (IP address, user-agent, requested path, timestamp) for a limited period to operate and protect the service. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR). Transfer to the United States is covered by the EU Standard Contractual Clauses that Netlify has in place. We do not use analytics or tracking tools.
Launch notification signup
When you submit the launch-notification form we store your email address, chosen language, and the timestamp of the submission. Data is stored on Supabase (Supabase Inc., EU region Frankfurt). We will send exactly one email — when the app launches — and delete the data afterwards. Legal basis: consent (Art. 6(1)(a) GDPR), which you give by submitting the form. You can withdraw this consent at any time by emailing support@getvitora.com; we will delete your address within 7 days.
Cookies
We do not use tracking or marketing cookies. The only cookie we set is a strictly necessary functional cookie ("NEXT_LOCALE") that remembers your chosen language. Strictly necessary cookies do not require consent under § 25 (2) TTDSG (DE) or revFADP (CH).
Your rights
You have the right to access, correction, deletion, restriction of processing, data portability, and objection at any time — email us at support@getvitora.com. You may also lodge a complaint with a supervisory authority: in Switzerland with the FDPIC, in Germany with your state data-protection authority, in Austria with the DSB.
No profiling, no third-party sharing
We do not profile users, run no advertising, sell no data, and share your address with nobody outside the processors named above (Netlify, Supabase).
Changes to this policy
We may update this policy when services or law change. The current version is always at this URL.