Privacy Policy

1. Data controller

The party responsible for data processing on this website is:
Verein Verix, c/o Cindy Mühlethaler, 6037 Root, Lucerne, Switzerland
Contact: hallo@verix.contact

2. Principles of data processing

Verix processes personal data exclusively according to the principles of the revised Swiss Federal Act on Data Protection (revFADP, in force since 1 September 2023). Data is only collected to the extent necessary for operating the platform.

3. Legal basis

We process your data on the following legal grounds: your consent (e.g. when registering, uploading a receipt, or using the optional advanced AI check in the Fake Review X-Ray), the performance of a contract (e.g. for paid provider subscriptions), our legitimate interest in a functioning, manipulation-resistant platform (anti-fraud and anti-manipulation measures), and legal obligations.

4. What data we collect

We collect the following data:

Registration: email address, password (hashed)
Reviews: review text, star rating, proof type
Receipts: uploaded receipts / photos (stored encrypted)
Receipt metadata: uploaded receipt photos are automatically scanned for EXIF data and an image hash (pHash) used for duplicate and manipulation detection
Technical data: IP address (hashed for anti-manipulation purposes), timestamp
Fake Review X-Ray (optional): if you use the "advanced AI check" on /warum-verix, the text you enter (max. 2,000 characters) is submitted for analysis but not stored

We collect no data for advertising purposes. There are no third-party analytics trackers. Tip: where possible, black out third-party names and card or account numbers on your receipt before uploading it — the merchant, date and amount are enough for verification.

5. Purpose of data processing

Operating the review platform
Verifying receipts (OCR)
Anti-manipulation measures (IP hashing, rate limiting)
Automated duplicate and image-manipulation detection (EXIF, image hash)
AI-assisted detection of incentivised language (always via word list; optionally also via Infomaniak AI, see section 6)
Communicating with users (regarding questions/issues)

6. Data processors

To operate the platform we use the following data processors, who are contractually bound to comply with Swiss data protection law.

Infomaniak Network SA (Geneva, Switzerland) — hosting of server and database.

Infomaniak AI (Geneva, Switzerland) — only if you actively use the optional "advanced AI check" in the Fake Review X-Ray (/warum-verix): the text you enter is sent to this Swiss AI service for analysis and is not stored afterwards. Without this explicit use, no data is transmitted.

7. Data storage — Switzerland only

All data is stored on servers located in Switzerland (Infomaniak Network SA, Geneva). There is no transfer to US services (no AWS, no Google Cloud, no Azure). As we do not use a US cloud provider, our infrastructure is not directly affected by the US Cloud Act.

We use PocketBase as a self-hosted backend system. No external databases.

8. Retention period

Personal data is retained only as long as necessary for the stated purpose, and at most 3 years after account inactivity. Receipts and OCR data are anonymised once verification is complete.

9. Your rights

Under the revFADP, you have the right to:

Access the data stored about you
Rectification of inaccurate data
Deletion of your data (right to be forgotten)
Data portability — export your data as JSON
Withdraw any consent given

If you delete your account, your personal data (email, profile) is removed. Reviews that have already been published and approved remain visible to other users for transparency reasons, but without any personal reference to your account.

Please direct requests to: hallo@verix.contact

10. Cookies

Verix only uses technically necessary cookies (session token for login). No tracking or advertising cookies are used.

11. Contact for privacy questions

For questions regarding data protection, please contact:
hallo@verix.contact

Last updated: 22 September 2026 · Verix, Root, Lucerne