Privacy policy

Last updated: 10 November 2026

This is a translation. Only the French version is legally binding.

This policy describes how Novarim processes the personal data of visitors to novarim.ch as well as the data processed as part of our service (AI receptionist, appointment booking and calendar connection). We apply the FADP (revised Swiss Federal Act on Data Protection); for persons in the European Union, we also apply the GDPR as a precaution, since our offering is aimed at Switzerland.

Controller

Marsiglia Novarim, sole proprietorship of Eliott Marsiglia, trade name Novarim, Chemin du Coteau 4, 2533 Evilard, Switzerland. Contact (including for data protection): info@novarim.ch.

Our dual role. Novarim is the controller for the data of the site, of prospects, of written requests, of calls to our demo number, of WhatsApp messages sent to us from the site, and of accounts and use of the dashboard; and a processor for the data of callers processed via the AI phone service, on behalf of the business called — which is then the controller. For the latter, please address your requests first and foremost to the business concerned.

Data we collect

Contact form / quote request: name, email address and the content of your message (and, where applicable, telephone / company name). Data provided voluntarily by you.
Technical data: when you visit the site, the host may log technical information (IP address, browser type, timestamp) for security and proper operation purposes.
Online subscription: business email address, plan chosen, acceptance of the General Terms and Conditions (version, date, time and IP address) and the ad that brought you here (utm parameters in the page address, and fbclid if you accept advertising cookies). The ad is also passed to Stripe with the subscription. The card is entered with Stripe: we never see its number.
One free trial per card: the card fingerprint, an identifier computed by Stripe (never its number), and the subscription that had the trial. It serves only to open no more than one free trial per card. If yours has already had its trial, we also keep your email address, so that your next subscription starts without a trial.
Discount on the first month: your email address, the page where you left it and the ad that brought you here (utm parameters in the page address, and fbclid if you accept advertising cookies). If you tick the box, we only write to you after you confirm via the link you receive.
Use of the service: data relating to your use of the dashboard, including your exchanges with its artificial intelligence features.
Calls to our demo number: your number, the recording, the transcript and the summary of the call. Telephony, voice and transcription are processed in the United States.
WhatsApp messages: your number, your profile name and your messages, which pass through WhatsApp (Meta, United States) and arrive on Eliott Marsiglia’s phone.
Questions asked in the site FAQ: the text of your question and the answer written by artificial intelligence. Your IP address, in hashed form, is used only to limit the number of questions per day.
Site analytics: page views and a few actions, counted without cookies by Umami, which we host ourselves.
Meta ads, if you accept them: the Meta pixel sets the _fbp and _fbc cookies and tells Meta which ad brought you here. If you then subscribe, we also send Meta your email address in hashed form and the amount, to link the purchase to the ad. Without your consent, none of this is sent.
Local preferences: stored on your device (your answer about advertising cookies, any refusal of site analytics, the reserved discount, the language chosen to book at a restaurant; for the duration of the tab, your questions to the FAQ and a code linked to the booking in progress). These are not tracking cookies — see Cookies.

Purposes & legal basis

Answering your requests and preparing a quote (pre-contractual measures).
Ensuring the security and operation of the site (legitimate interest: protecting it from abuse and outages).
Collecting payment for and invoicing subscriptions (performance of the contract).
Providing, securing and improving our products based on their use (legitimate interest: running and improving the service).
Keeping proof of the version of the General Terms and Conditions accepted (legitimate interest: proving the contract).
Knowing which ad brought you here, through the utm parameters in the page address (legitimate interest: knowing which ads work).
Honouring the discount reserved with your address (pre-contractual measures).
Opening no more than one free trial per card (legitimate interest: preventing abuse).
Protecting online booking from bots (legitimate interest: preventing abuse).
Answering questions asked in the site FAQ, and protecting it from bots and abuse (legitimate interest: informing visitors, preventing abuse).
Sending you reminders, tips and news from Novarim, if you have requested and then confirmed this (your consent, revocable via the link in each email).
Letting you try Aralys on the demo number (legitimate interest: presenting our service).
Replying to your WhatsApp messages (pre-contractual measures).
Counting visits to the site, without cookies (legitimate interest: knowing which pages are read). You can refuse this under Cookies.
Measuring the effectiveness of our Meta ads (your consent, revocable on the Cookies page).

We do not sell your data. No advertising measurement data is sent to Meta without your consent to advertising cookies.

Recipients & processors

Your data may be processed by technical service providers, on our behalf unless otherwise stated:

Hosting: Hetzner Online GmbH (Germany / EU), for the site and the API.
Database & storage: Supabase (Switzerland, Zurich; US company), for the secure storage of data.
Backup copies: Akenes SA (Exoscale, Switzerland, Geneva), which stores encrypted copies of our database; only Novarim holds the key to read them.
Emails: an email provider (United States, Swiss-U.S. Data Privacy Framework), for sending and receiving our emails, the verification code and the call alerts sent to businesses.
Follow-up emails: Brevo (France / EU), for the emails a business sends to its own customers from Novarim.
Payment: Stripe (Ireland / EU and United States, Swiss-U.S. Data Privacy Framework), for collecting subscription payments and invoicing.
Telephony & recording: a telephony operator (United States, Swiss-U.S. Data Privacy Framework), for receiving, routing and recording calls, and sending reminder SMS messages. Its contract also allows it to process calls and SMS messages on its own behalf, in particular to combat abuse, including by training models, and to develop its services.
Voice intelligence: a voice provider (United States, Swiss-U.S. Data Privacy Framework), for the voice, the transcription and the conduct of the conversation, with a language model supplied by a second provider (United States, Swiss-U.S. Data Privacy Framework).
Text analysis: a language model provider (United States, standard contractual clauses), to extract the relevant information from WhatsApp messages.
Site FAQ: a language model provider (United States, standard contractual clauses), to write the answers to questions asked in the site FAQ.
Dashboard artificial intelligence: language model providers (United States; Swiss-U.S. Data Privacy Framework or standard contractual clauses, depending on the provider).
Translation: DeepL (Germany / EU), to translate the summary of a call that is not in the business’s language.
Messaging: Meta Platforms / WhatsApp (United States, Swiss-U.S. Data Privacy Framework), for appointment reminders and confirmations, and messages sent to us from the site.
Calendars: Google (Google Calendar API), Microsoft (Microsoft Graph) or CalDAV, when a calendar is connected — see the dedicated section below.
Address lookup: swisstopo (geo.admin.ch, Switzerland), when a business enters its address.
Ads: Meta Platforms (United States, Swiss-U.S. Data Privacy Framework), to measure our ads, only if you have accepted advertising cookies.
Site analytics: Umami, software that we host ourselves with Hetzner (Germany / EU).
Error tracking: Sentry (data hosted in Germany / EU; US company), to detect service outages.
Internal alerts: a team messaging service (United States, Swiss-U.S. Data Privacy Framework), to notify our team of a demo request (name, telephone, email).
Fonts: Google Fonts (United States, Swiss-U.S. Data Privacy Framework), loaded by the dashboard and our emails: Google then receives your IP address. The novarim.ch site serves its own fonts.

International transfers

Our telephony, voice, language model, email and team messaging providers, as well as Meta, Stripe and Google, are located in the United States. Supabase and Sentry host our data in Europe, but they are US companies. Each transfer outside Switzerland and the EU relies on the safeguard indicated next to the provider in the list above (art. 16 FADP): the Swiss–U.S. Data Privacy Framework, under which the provider is certified, or standard contractual clauses supplemented by the adaptations required by the FDPIC. A copy of these safeguards can be requested from info@novarim.ch.

Novarim service — calls and appointments

When the Novarim service (AI receptionist) is used, we process, on behalf of the customer business, the data needed to book appointments:

Call data: caller’s number, recording and transcript of the call, reason for the request, and summary generated by the agent.
Appointment data: name of the person, contact details provided, date, time and type of appointment.
Reminders: if the business activates them, the caller receives the confirmation or reminder of their appointment by SMS (telephony operator) or by WhatsApp (Meta), and can reply to it. These messages pass through the United States.
Online booking: if a restaurant opens its booking page on novarim.ch, we receive on its behalf the first name, surname and mobile number you enter there, together with the date, time and number of people. If you provide them, we also receive an allergy or intolerance, a mobility need (reduced mobility or wheelchair) and your note for the restaurant. They reach the business’s team with the booking; no message sent to you repeats them. The mobility need concerns your health: it is sensitive data. If you use a wheelchair, you are offered only the times at which an accessible table is free. The confirmation is sent by WhatsApp or SMS. Before sending, your browser performs a short calculation that slows down automated submissions. It runs on your device, without any third-party service or cookie.
Allergies: if you report an allergy for a booking, by phone, online or to the business’s team, we record who it is for, the allergen and your words, translated if the call is not in French. The team marks it as read, which records who read it and when; as long as no one has read it, a reminder alerts the team. An allergy concerns your health: it is sensitive data. It is used only to adapt the meal, is never copied to your guest record and, if given by phone, passes like the rest of the call through our voice and language model providers in the United States.
Waiting list: when a service is fully booked, Aralys can put you on the business’s waiting list: your name, your mobile number, the number of people, the desired day, service and time, the language of the call, the time of registration and the link to that call. If a table becomes free, it may be offered to you by WhatsApp or SMS; it is then held for you for 30 minutes, or 10 minutes when it is three hours or less before the service.
Call sentiment: based on the conversation, the voice provider estimates how you experienced the call (satisfied, neutral or dissatisfied), and our system keeps one of your sentences as transcribed, shortened if it is long. The business uses it to judge how Aralys handled the call, and can add its rating (‘good’ or ‘needs review’) and a comment. Novarim reads this feedback to improve Aralys.
Flagged guest: a business can flag a guest, with a short, factual reason (for example, repeated no-shows without notice); the flag carries its date and its author. When a booking under that name and that number is recognised, by phone, online or on the waiting list, it is not confirmed automatically: it awaits the team’s decision. The reason stays in the business’s dashboard: Aralys does not mention it, and no automatic message contains it.

This data is used to handle your requests and your bookings for the business. Novarim does not sell it, does not use it for advertising and does not train any model with your calls.

You are talking to an artificial intelligence, and not to a person; the agent tells you so at the start of the call, and at the same time informs you that the call is recorded. If you do not wish to be recorded or to talk to an AI, you can say so at the start of the call, ask for the contact person the business has designated if it has one, hang up, or contact the business by other means.

Automated decision-making. No decision producing legal effects or significantly affecting you is taken solely on the basis of AI: a human supervises appointments and requests via a dashboard and can intervene, correct or refuse (art. 21 FADP, art. 22 GDPR).

Connecting your calendar (Google Calendar / Microsoft Outlook)

If a business connects a calendar from Google or Microsoft / Outlook, Novarim accesses it only to create, modify and delete the appointments made by the agent, and check availability (to avoid double bookings).

Data accessed: the busy slots of the connected calendar and the events created by Novarim.
Permissions requested: Google calendar.events (read the events of the designated calendar, create and manage those of Aralys) and calendar.calendarlist.readonly (list your calendars, solely so that you can choose the one Aralys will use); Microsoft Graph Calendars.ReadWrite (read/write access to events only — no access to emails or contacts).
Storage: only secure access tokens and the address of the connected account are kept, to maintain the connection. No calendar content is kept beyond what is necessary for booking appointments.
No sharing: Novarim does not sell this data, does not pass it on to any third party, does not use it for advertising or to train a model, and no one reads it — except where strictly necessary (support at your request, security, or legal obligation).
Revocation: you can disconnect the calendar at any time from your dashboard, or revoke access from your account with Google or Microsoft. Disconnecting deletes the stored tokens.

The use and transfer by Novarim of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements. The same applies to data received via Microsoft Graph.

Novarim's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention period

Requests sent from the site: messages and contact details are deleted from our database 24 months after the last contact. A copy also arrives in our email inbox and our team messaging service; it is not deleted automatically, we erase it at your request.
Discount on the first month: the address is deleted 90 days after your last action: signing up, unsubscribing or subscribing. If you have confirmed that you want our emails, 24 months after the last contact.
One free trial per card: the fingerprint is deleted 24 months after the end of the last subscription taken out with this card: erasing it on departure would reopen the trial to anyone who leaves and then comes back. The address of a refused trial, 90 days after the refusal.
Acceptance of the General Terms and Conditions: version, date, time, IP address and email address are kept for ten years after the end of the contract, the limitation period for claims (art. 127 CO): this is the proof of the contract. If the subscription is not completed, they are deleted 90 days after the attempt.
Call records: their content, including call sentiment, and the caller’s number are erased 30 days after the call, as are the business’s comment and the indication of who gave the rating; the date, time and status of the call remain. The rating itself (‘good’ or ‘needs review’) is erased with its date 24 months after it was given. Calls to the demo number follow the same rule.
Allergies: erased together with their read acknowledgement and the booking note that repeats them, including your note for the restaurant, 30 days after the visit. Those from a group request that did not go ahead are deleted with it, 30 days after the request.
Online booking: the request sent from the page, including your choices, is deleted 2 days after it was first sent, whether confirmed or not. The mobility need stays with the confirmed booking, with no retention period of its own: it is deleted with the business’s data, at the latest 120 days after the end of the contract.
Waiting list: the registration is deleted 30 days after the requested service.
Flagged guest: a flag lapses automatically 12 months after it is set. Once removed, its reason is erased 30 days later, and its dates and authors 12 months later.
Recording and transcript: deleted 30 days after the call at the voice provider, and at the latest 30 days after the call at the telephony operator.
SMS and WhatsApp conversations: deleted 30 days after the last message.
Questions asked in the site FAQ: questions and answers kept for 12 months, without IP address. The hashed IP address is erased after 2 days.
Use of the service: deleted or anonymised at the latest 24 months after their collection, or with the business’s data at the end of the contract. Anonymous statistics are kept without time limit.
Data of a customer business: deleted after verification by our team, at the latest 120 days after the end of the contract. Accounting records are kept for ten years, as required by law; Stripe keeps payment data in accordance with its own legal obligations.
WhatsApp messages: no automatic deletion; we erase them at your request.
Backup copies: encrypted, erased at the latest 16 days after their creation; data erased from our database may remain in them until then.
Site analytics, server logs and error tracking: no deletion period has yet been set; we erase what concerns you at your request.

Your rights

You have the right of access, rectification, erasure, objection, restriction and portability in respect of your data. To exercise these rights: info@novarim.ch.

You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the supervisory authority of your country in the EU.

Security

The site is served over HTTPS. We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.