Privacy Policy

1. Introduction and scope

This Privacy Policy applies to the VERZE marketing website at verze.ai (the “Website”). It describes how we handle personal data of visitors to the Website. It does not cover how we process customer or end-user data within the VERZE platform itself — that processing is governed by a separate agreement, including a Data Processing Agreement, with our customers.

We apply both the Swiss revFADP and, where it applies to you, the EU GDPR. Where the two differ, we follow the stricter standard for the visitors it protects.

2. Who we are (controller)

The controller responsible for processing your personal data is:

• Julith Group AG (operating as “VERZE”; “we”, “us”)
• UID: CHE-221.330.585
• Schipfe 32, 8001 Zurich, Switzerland
• Email: team@verze.ai
• Phone: +41 79 580 60 13

For any privacy-related request, contact us at team@verze.ai.

3. The personal data we process

Depending on how you interact with the Website, we process the following categories:

• Technical and usage data — IP address, device and browser type, operating system, referring page, pages viewed, and timestamps. This is generated automatically when you load the Website and through the analytics described below.
• Company and visitor identification data — through our visitor-analytics tool (see Section 7) we may identify the organisation a visit comes from (via reverse-IP lookup) and, in some cases for visitors based in the United States, an individual contact.
• Contact data you provide — when you email us or book a session, we receive your name, email address, any phone number, your company, and the content of your message.
• Enriched and derived data — our CRM/sales-intelligence provider may append additional business information about a contact (such as job title, employer, and professional location) sourced from third parties and public sources, and may generate derived insights such as lead scores.

4. Why we process your data (purposes)

• To deliver, operate, and secure the Website (including defending against attacks).
• To understand how the Website is used and which organisations show interest, so we can improve our content and prioritise outreach.
• To respond to your enquiries and arrange and conduct strategy sessions or meetings.
• To manage business relationships and carry out lawful B2B marketing and sales activities.
• To comply with our legal obligations and to establish, exercise, or defend legal claims.

5. Legal bases

Under the GDPR (and consistent with the revFADP), we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR) — operating and securing the Website, basic measurement, B2B relationship management, and lawful direct marketing to businesses. You can object to processing based on legitimate interests (see Section 11).
• Performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR) — responding to your enquiries and arranging meetings at your request.
• Consent (Art. 6(1)(a) GDPR) — non-essential cookies and tracking, including the Apollo visitor-tracking and profiling described in Section 7. You can withdraw consent at any time (see Sections 7 and 11).
• Legal obligation (Art. 6(1)(c) GDPR) — where we must retain or disclose data to comply with the law.

6. Cookies and tracking technologies

Essential cookies and storage. We use a small amount of strictly necessary storage to remember your cookie choices. These are required for the Website to work and do not need consent.

Apollo visitor tracking and analytics (consent required). With your consent, we use Apollo (provided by ZenLeads Inc., d/b/a Apollo.io, USA). Apollo places a first-party cookie and loads a tracking script that collects your IP address, device and browser information, and the pages you view. It identifies the organisation behind a visit (via reverse-IP) and, for some United States visitors, an individual contact. We use this to measure interest in our content and to prioritise sales outreach. Apollo may also enrich contact records and generate lead scores, and may add business-contact data to its shared database (see Sections 4 and 12).

This tracking only runs after you opt in. When you first visit, a banner lets you accept or reject non-essential tracking. We do not load Apollo unless you accept. You can change or withdraw your choice at any time using the Cookie settings link in the footer.

More information from Apollo: its Privacy Policy, Data Processing Addendum, sub-processor list, and opt-out tools.

7. Recipients and processors

We share personal data only with service providers who process it on our behalf, or where required by law. Our main providers are:

• Cloudflare, Inc. (USA) — website hosting, content delivery, and security. Cloudflare processes server logs, including IP addresses and request metadata, to deliver and protect the Website. See Cloudflare’s Privacy Policy, DPA, and sub-processors.
• ZenLeads Inc., d/b/a Apollo.io (USA) — visitor analytics and CRM / sales-intelligence, as described in Section 7. Apollo acts as our processor for our use of the service and as an independent controller for its own contact database.
• Google Workspace (provided by Google Ireland Limited) — to receive and respond to the emails you send us.

We do not sell your personal data.

8. International data transfers

Some of our providers are based in the United States, so your personal data may be transferred there. For these transfers we rely on appropriate safeguards:

• Swiss-U.S. and EU-U.S. Data Privacy Framework — both Cloudflare and Apollo self-certify under the Data Privacy Framework, which the Swiss authorities and the European Commission recognise as providing adequate protection for certified recipients.
• Standard Contractual Clauses — as an additional safeguard, our providers incorporate the EU Standard Contractual Clauses (with Swiss adaptations).

You can request a copy of the relevant safeguards by contacting us at team@verze.ai.

9. How long we keep your data

• Server and security logs are kept by our hosting provider only for a limited period needed to operate and secure the Website.
• Analytics and CRM data are kept for as long as needed for the purposes described above, and in line with our providers’ retention practices.
• Enquiries and business-relationship data are kept for the duration of our contact and relationship, and afterwards only as required for legal or evidentiary purposes.

10. Your rights

Subject to the conditions in the applicable law, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing, including profiling and direct marketing;
• receive certain data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email us at team@verze.ai. We will respond within the time limits set by the applicable law (generally within 30 days under the revFADP and one month under the GDPR).

11. Automated decision-making and profiling

Our analytics and CRM provider uses automated techniques to enrich contact records and generate lead scores, which is a form of profiling. We use these insights to prioritise outreach. We do not make decisions that produce legal or similarly significant effects on you based solely on automated processing. You can object to this profiling (see Section 11).

12. Data security

We and our providers use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and reputable infrastructure providers certified to recognised security standards. No method of transmission or storage is completely secure, but we work to protect your data and to continually review our measures.

13. Complaints

If you have a concern about how we handle your personal data, please contact us first so we can help. You also have the right to lodge a complaint with a supervisory authority:

• Switzerland — the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), edoeb.admin.ch.
• EU/EEA — the data protection authority in your country of residence, place of work, or where the alleged infringement took place.

14. Children

The Website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from children.

15. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated by appropriate means.

16. Contact

Questions about this policy or your personal data? Email team@verze.ai or write to us at Schipfe 32, 8001 Zurich, Switzerland.