Privacy Policy

This Privacy Policy applies to the VERZE marketing website atverze.ai (the “Website”). It describes how we handle personal data of visitors to the Website. It does not cover how we process customer or end-user data within the VERZE platform itself. That processing is governed by a separate agreement, including a Data Processing Agreement, with our customers.

We apply both the Swiss revFADP and, where it applies to you, the EU GDPR. Where the two differ, we follow the stricter standard for the visitors it protects.

The controller responsible for processing your personal data is:

• Julith Group AG (operating as “VERZE”; “we”, “us”)
• UID: CHE-221.330.585
• Schipfe 32, 8001 Zurich, Switzerland
• Email: team@verze.ai
• Phone: +41 79 580 60 13

For any privacy-related request, contact us at team@verze.ai.

Depending on how you interact with the Website, we process the following categories:

• Technical and usage data: IP address, device and browser type, operating system, referring page, pages viewed and timestamps. This is generated automatically when you load the Website and through the analytics described below.
• Company and visitor identification data: through our visitor-analytics tool (see Section 7) we may identify the organisation a visit comes from (via reverse-IP lookup) and, in some cases for visitors based in the United States, an individual contact.
• Contact data you provide: when you email us or book a session, we receive your name, email address, your company and the content of your message, together with anything else you choose to write to us.
• Event registration data: when you register for one of our events, we receive the session you chose, your name and your email address. For the sessions that run through Luma you enter those details on Luma’s own checkout and Luma passes the registration to us as the host of the event (see Section 7). For a session that has no date yet, our own form sends the same details to us by email. The form does not ask for a phone number and we send no SMS.
• Optional extension feedback: when you submit the extension feedback form, we receive your message and the attached page report: full page URL, browser and extension version, score breakdown, metadata and any article, structured data or crawler checks you collected. Your email address is optional. You can review the report before sending; it stays in your browser until you press Send feedback. We use these reports to investigate scoring issues.
• Enriched and derived data: our CRM/sales-intelligence provider may append additional business information about a contact (such as job title, employer, and professional location) sourced from third parties and public sources and may generate derived insights such as lead scores.

• To deliver, operate and secure the Website (including defending against attacks).
• To understand how the Website is used and which organisations show interest, so we can improve our content and prioritise outreach.
• To respond to your enquiries and arrange and conduct strategy sessions or meetings.
• To register you for an event and to send you the confirmation, the joining link, reminders and the recording afterwards.
• To manage business relationships and carry out lawful B2B marketing and sales activities.
• To comply with our legal obligations and to establish, exercise or defend legal claims.

Under the GDPR (and consistent with the revFADP), we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR): operating and securing the Website, basic measurement, B2B relationship management and lawful direct marketing to businesses. You can object to processing based on legitimate interests (see Section 11).
• Performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR): responding to your enquiries, arranging meetings at your request and registering you for an event you signed up to.
• Consent (Art. 6(1)(a) GDPR): non-essential cookies and tracking, including the Apollo visitor-tracking and profiling described in Section 7. You can withdraw consent at any time (see Sections 7 and 11).
• Legal obligation (Art. 6(1)(c) GDPR): where we must retain or disclose data to comply with the law.

Essential cookies and storage. We use a small amount of strictly necessary storage to remember your cookie choices. These are required for the Website to work and do not need consent.

Apollo visitor tracking and analytics (consent required). With your consent, we use Apollo (provided by ZenLeads Inc., d/b/a Apollo.io, USA). Apollo places a first-party cookie and loads a tracking script that collects your IP address, device and browser information and the pages you view. It identifies the organisation behind a visit (via reverse-IP) and, for some United States visitors, an individual contact. We use this to measure interest in our content and to prioritise sales outreach. Apollo may also enrich contact records and generate lead scores and may add business-contact data to its shared database (see Sections 4 and 12).

This tracking only runs after you opt in. When you first visit, a banner lets you accept or reject non-essential tracking. We do not load Apollo unless you accept. You can change or withdraw your choice at any time using the Cookie settings link in the footer.

More information from Apollo: its Privacy Policy, Data Processing Addendum, sub-processor list, and opt-out tools.

We share personal data only with service providers who process it on our behalf or where required by law. Our main providers are:

• Cloudflare, Inc. (USA): website hosting, content delivery and security. Cloudflare processes server logs, including IP addresses and request metadata, to deliver and protect the Website. See Cloudflare’s Privacy Policy, DPA, and sub-processors.
• ZenLeads Inc., d/b/a Apollo.io (USA): visitor analytics and CRM / sales-intelligence, as described in Section 7. Apollo acts as our processor for our use of the service and as an independent controller for its own contact database.
• Luma Labs, Inc. (San Francisco, USA): registration for the events that run through Luma. On our events pages the “register” button loads Luma’s checkout script from embed.lu.ma and opens Luma’s own checkout, where you enter your details. Luma receives your name, your email address, anything else its checkout asks you for and the session you chose. It uses them to register you, to send reminders and to send the confirmation email that carries the calendar invite and the Google Meet joining link. As the host of the event we receive your registration from Luma. The script loads only on our events pages and only for the sessions that register through Luma; every other session uses our own form described below. To see, correct or delete what Luma holds, use your Luma account or write to Luma at support@luma.com; for the copy we hold as the host, email us at team@verze.ai. See Luma’s Privacy Policy.
• Postmark: delivers website form submissions to our team by email. That covers demo requests, extension feedback with its attached report and interest in the event sessions that do not run through Luma. Cloudflare Turnstile verifies those submissions to help prevent spam.
• Google Workspace (provided by Google Ireland Limited): to receive and respond to the emails you send us.

We do not sell your personal data.

Some of our providers are based in the United States, so your personal data may be transferred there. This is what each transfer rests on:

• Swiss-U.S. and EU-U.S. Data Privacy Framework: both Cloudflare and Apollo self-certify under the Data Privacy Framework, which the Swiss authorities and the European Commission recognise as providing adequate protection for certified recipients.
• Standard Contractual Clauses: as an additional safeguard, our contracts with these providers incorporate the EU Standard Contractual Clauses (with Swiss adaptations).
• Luma (event registration): Luma Labs, Inc. is based in the United States. Its Privacy Policy names no transfer mechanism such as the Data Privacy Framework or the Standard Contractual Clauses, so the transfer is governed by Luma’s own Privacy Policy. Your data reaches Luma only if you choose to register for a session that runs through Luma. Questions about that transfer? Email us at team@verze.ai.

You can request a copy of the relevant safeguards by contacting us at team@verze.ai.

• Server and security logs are kept by our hosting provider only for a limited period needed to operate and secure the Website.
• Analytics and CRM data are kept for as long as needed for the purposes described above and in line with our providers’ retention practices.
• Enquiries and business-relationship data are kept for the duration of our contact and relationship and afterwards only as required for legal or evidentiary purposes.

Subject to the conditions in the applicable law, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing, including profiling and direct marketing;
• receive certain data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email us at team@verze.ai. We will respond within the time limits set by the applicable law (generally within 30 days under the revFADP and one month under the GDPR).

Our analytics and CRM provider uses automated techniques to enrich contact records and generate lead scores, which is a form of profiling. We use these insights to prioritise outreach. We do not make decisions that produce legal or similarly significant effects on you based solely on automated processing. You can object to this profiling (see Section 11).

We and our providers use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and reputable infrastructure providers certified to recognised security standards. No method of transmission or storage is completely secure, but we work to protect your data and to continually review our measures.

If you have a concern about how we handle your personal data, please contact us first so we can help. You also have the right to lodge a complaint with a supervisory authority:

• Switzerland: the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), edoeb.admin.ch.
• EU/EEA: the data protection authority in your country of residence, place of work or where the alleged infringement took place.

The Website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from children.

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated by appropriate means.

Questions about this policy or your personal data? Email team@verze.ai or write to us atSchipfe 32, 8001 Zurich, Switzerland.