Skip to content

Procurement and data

Everything your IT department will ask you

Who we are, where the data is, which subprocessors are involved and how to get your content back: all on one page, without unnecessary jargon.

The provider

Controller
Michaël Ambass, Switzerland
Contact
contact form
Support
[Opening hours, response times and availability commitment to be completed]

Hosting

Hosting provider
Infomaniak Network SA, Geneva
Location
Infomaniak data centres in Switzerland: content, media, accounts and statistics.
Backups
[Backup frequency, retention period and location to be completed]
Server logs
[Retention period of technical logs to be completed]

Subprocessors and third-party services

The full list, with what each one receives. No advertising or third-party analytics tools are used.

  • Infomaniak Network SA

    Switzerland

    Hosting for the website, platform, media and backups in its Swiss data centres.

    All data: tour content, studio accounts, pseudonymous statistics and contact requests.

  • OpenRouter

    United States

    Automatic translation, voiceovers and ambient music. OpenRouter sends each request to the model provider.

    The texts you choose to translate or turn into voiceovers, and your music descriptions, when you start generation. No visitor data.

  • Mistral AI (Voxtral)

    France (EU)

    Voiceover synthesis via OpenRouter.

    The texts you have read aloud, when you generate a voice. No visitor data.

  • Google (Lyria)

    United States

    Ambient music composition via OpenRouter.

    The style and description of the requested music. No visitor data.

  • OpenStreetMap

    United Kingdom

    Map backgrounds for GPS tours.

    The visitor’s browser loads the map tiles directly: their servers see the visitor’s IP address and the area displayed.

  • Bunny Fonts

    Slovenia (EU)

    Typeface, only if you choose a different one from the default.

    A technical browser request, with no cookies or tracking.

Legal basis for transfers to the United States: [Transfer basis to be completed (standard contractual clauses, Swiss-US Data Privacy Framework…)] YouTube videos are embedded in privacy-enhanced mode, and only if you add any.

Visitor data

  • No account, no name, no e-mail address.
  • A random identifier (cookie, one year) to count unique visitors, and a visit cookie (30 minutes) to know how they arrived.
  • No IP address recorded in the statistics.
  • The GPS position is calculated on the phone and never sent to the server.
  • Progress and favourites stored in the visitor’s browser.

Accounts and access

  • Three roles per organisation: owner, administrator and editor.
  • Sign-in with e-mail and password; passwords are never stored in plain text.
  • Personal, named and revocable access keys for AI assistants.
  • Two-factor authentication and SSO (Entra ID, SAML): not available yet.

Data portability

  • Statistics exportable as CSV and PDF from the studio.
  • Full export of your content (texts, voices, images) on request, in open formats.
  • [Timeframe and terms for deleting data at the end of the contract to be completed]

Accessibility

  • A full transcript of every narration, highlighted as you listen.
  • Playback speed adjustable from 0.75× to 1.5×, and controls usable with a keyboard.
  • Text colours chosen to meet the WCAG AA minimum contrast.
  • No formal WCAG 2.1 or eCH-0059 audit yet: we are happy to share the current compliance status on request.

Documents available on request

We send them with our offer, for your legal department and your data protection officer.

  • Data processing agreement (art. 9 nFADP)
  • List of subprocessors and countries
  • Terms and conditions
  • Detailed price quote
  • Backup and recovery plan
  • Export and end-of-contract procedure

Details of how data is processed are in our privacy policy.

A question from your IT department?

Send us their list of questions: we answer in writing, with supporting documents.