Ryze WorldsPRIVACY

Privacy policy

Provisional version · under legal review

Translation provided for information. The French version prevails.

  1. Controller. Patrya Gestion Sàrl, chemin des Matines 7, 1007 Lausanne [TO BE CONFIRMED: data protection e-mail]. Swiss FADP, and GDPR for members in the EU.
  2. Data. Account (e-mail, encrypted password, username, display name); profile (bio, world, appearance, GitHub/LinkedIn/website links, proof-based CV); game activity (progress, quests, proofs, missions, messages, guilds, votes); subscription through Stripe (no full card number); audience measurement (pages, journey steps, source, referral code); Builder Card (first name or username, quiz answers, class and world obtained, public link of the card, e-mail if you join the queue); communication (consent, opens, clicks); Telegram if linked. No sensitive data is knowingly collected.
  3. Purposes and legal bases. Providing the service and managing the account (contract); subscription and invoicing (contract, legal obligations); security, anti-fraud, moderation (legitimate interest); measurement and improvement (legitimate interest or consent depending on the law) [TO BE CONFIRMED: tool and banner]; service e-mails (contract), promotional e-mails (consent, which can be withdrawn).
  4. Public. Username, character, level, trophies, public contributions. The proof-based CV is public only if the member turns it on.
  5. Recipients. No sale of data. Sign-ups and requests (account, small business check, Founder Pass, waiting list, e-mails) are also recorded in RyzeOS, the internal CRM of Ryze, operated by Patrya Gestion Sàrl: this is not a transfer to a third party. Supabase [TO BE CONFIRMED: region], Vercel, Stripe, Telegram (if linked), e-mail provider [TO BE CONFIRMED], AI providers [TO BE CONFIRMED: list]. Transfers outside Switzerland/EU are safeguarded (adequacy, standard clauses).
  6. Retention. For as long as the service is used; after deletion, erasure or anonymisation within 30 days, except for legal obligations (accounting, 10 years); security logs 12 months [TO BE CONFIRMED]; audience measurement 13 months at most.
  7. Rights. Access, rectification, erasure, restriction, objection, portability, withdrawal of consent; self-service export and deletion (Profile, “My data” section); other requests [TO BE CONFIRMED: e-mail], answered within 30 days; complaint to the Swiss FDPIC or to the EU authority of the country of residence.
  8. Security. Encrypted exchanges, encrypted passwords, server-side access rules, log of admin actions.
  9. Cookies. Strictly necessary ones; other trackers according to the law [TO BE CONFIRMED].
  10. Changes. Notified to members.

Last updated: 30 September 2026 · version 2026-09-29-provisoire · Patrya Gestion Sàrl, 1007 Lausanne, Suisse