Privacy policy

1. Who is responsible for your data

Ganacsato is operated by the company Ganacsato.

For any question about your data, write to contact@ganacsato.com.

2. What we collect

Your account: your email address. If you sign in with Google, we also receive your name and profile photo. With Apple, your name and email address, or the relay address Apple creates for you.

What you post: your reviews, ratings, photos, replies and reports.

Businesses you suggest: the business details, and your contact details if you provide them.

Claiming a listing: proof that the business is yours (a code received by text message or phone call, an email from the business’s address, an official document or a message from an official account).

Your favourites.

Technical data: IP address, device and browser type, language, approximate country based on your IP address so we can show the right language, and server logs.

3. Why we use it

To run Ganacsato: your account, publishing your reviews, your favourites and verifying listings. Legal basis: providing the service you ask for.

To protect the site and its users: filtering spam and insults, handling reports, preventing fake reviews and keeping accounts secure. Legal basis: our legitimate interest.

To reply to your messages and meet our legal obligations.

We do not sell your data and we do not use it for advertising.

4. What everyone can see

When you post a review, your display name, profile photo, rating, text and the date are public. Your email address is never published.

5. Google reviews

On listings, we show the business’s Google rating and latest Google reviews through the Google Places service, as they are, with their author and a link to Google. We do not store them. Google’s privacy policy applies to this content.

6. Who we share it with

We use service providers who process data on our behalf, and only for what we need:

Supabase: database and accounts, servers in Ireland (European Union).

Vercel: website hosting, worldwide server network, US company.

Google: sign-in with Google, Google Maps reviews and information.

Apple: sign-in with Apple.

Infomaniak: email, in Switzerland.

When data is processed outside Switzerland and the European Union, especially in the United States, it is protected by the safeguards required by law, such as standard contractual clauses or the Data Privacy Framework.

We only share data with authorities when the law requires us to.

7. Cookies and storage on your device

We only use what the site needs to work: a cookie that keeps you signed in, a cookie that remembers your language for one year, and, on your device, a note that you closed the “Ganacsato in your pocket” window (so it doesn’t show again for 30 days) and a copy of pages so they open offline.

We use no advertising cookies and no audience measurement tools. If this changes, we will ask for your consent first.

8. How long we keep it

Your account and content: as long as your account exists. If you delete it, we erase your data and reviews within 30 days.

Proof submitted to claim a listing: no more than 90 days after our decision.

Technical logs: a few weeks at most.

Some data may be kept longer if the law requires it, for example invoices for the Pro plan.

9. Your rights

You can ask to see your data, correct it, delete it, receive a copy, restrict or object to its use, and withdraw your consent at any time.

Write to contact@ganacsato.com. We reply within 30 days.

You can also file a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the data protection authority in your country.

10. Minimum age

You must be at least 16 to create an account. Anyone can browse the site without an account.

11. Changes

If we change this policy, we publish the new version on this page with its date. For an important change, we let you know by email or on the site.