Privacy policy

This privacy policy explains how Zitli ("we", "us") processes personal data when you visit zitli.ch, contact us, or use our scheduling application at app.zitli.ch.

We are committed to Swiss and European data protection standards. We collect only what we need to operate, improve, and secure our services.

The data controller responsible for the processing described in this policy is Otternative Marketing GmbH, Holeestrasse 108, 4054 Basel, Switzerland (company number CHE-183.618.132), which operates Zitli.

For privacy-related requests, contact us at privacy@zitli.ch or via the contact form on this website.

On this marketing website we may process technical data (IP address, browser type, device information), usage data (pages visited, referrers), and information you submit voluntarily (e.g. contact form: name, email, message, topic).

In the Zitli application we process account data (name, email, organisation), scheduling data (availability, bookings, participant details you or your clients provide), and configuration you choose (integrations, branding, team settings).

We do not sell personal data to advertisers or data brokers.

If you connect a Google account to Zitli, we access your Google data only with your consent and only within the permissions you grant on Google's consent screen. These are: your basic profile information (name, email address and profile picture), to identify the connected account; read access to your calendars and the events in them, to work out when you are busy; and permission to create, change and delete calendar events, to add bookings made through Zitli and keep them up to date when they are rescheduled or cancelled.

We use this data solely to provide the scheduling features you see in the app: showing your availability correctly, preventing double bookings, and writing bookings to the calendar you choose. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalised artificial intelligence or machine learning models.

We store the access tokens issued by Google so that the connection keeps working, together with the identifiers of the calendars you select. Event details are read when your availability is calculated and may be cached for performance reasons while the connection is active; this cache is deleted when you disconnect. Bookings made through Zitli are stored as part of your scheduling data.

Google user data is disclosed only to the service providers that host and operate Zitli on our behalf (see "Processors & sharing") and where the law requires it. Our staff do not read your calendar content unless you ask us to for support, it is necessary for security purposes, or we are legally obliged to.

You can disconnect Google at any time in the Zitli app settings, or revoke access in your Google account at myaccount.google.com/permissions. When you disconnect or close your Zitli account, we delete the stored tokens. Events already created in your Google Calendar remain there.

Zitli's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We process data to provide and improve our scheduling service, respond to inquiries, secure our infrastructure, comply with legal obligations, and understand how our website is used.

Where required, we rely on contractual necessity, legitimate interests (e.g. security, product improvement, essential analytics), or your consent.

This website uses essential cookies and storage required for basic operation. We also use analytics (PostHog, hosted in the EU) to understand page performance and improve the product. Analytics run unless you decline them, which you can do in the cookie notice or at any time via "Cookie settings" in the footer.

For live support we use the Crisp chat widget (Crisp IM SAS, France). It loads on every page of this website and in the Zitli application, and stores a cookie so your conversation continues across visits. Messages you send in the chat are processed by Crisp so that we can answer you. Unless you opt out of analytics, we link the conversation to your PostHog analytics profile and record that a chat was opened or a message was sent or received, never the content of the messages.

Advertising tags from Meta (Meta Pixel), Google (Google Ads) and LinkedIn (Insight Tag) are loaded only where we have enabled them and only after you agree to marketing in the cookie notice. Once loaded, these providers receive usage data such as your IP address, the pages you visit and clicks on sign-up buttons, may set their own cookies, and may process this data outside Switzerland and the EU.

If you arrive through a campaign link, we keep its campaign parameters (such as utm_source or an ad click ID) in your browser's session storage and pass them to the sign-up page when you click a sign-up button, so that we can tell which campaign led to a registration.

Inside the Zitli application we use the same EU-hosted PostHog service to understand how account holders use the product and to send them account and product emails, such as onboarding tips and trial reminders. For this we store the account holder's email address, first name and language in PostHog. Visitors to public booking pages are not tracked. Every such email contains an unsubscribe link.

On the sign-up, login, account setup and billing pages we also record how the page is used (session recording). Anything typed into a form field is always hidden; only Zitli's own wording and your own account details are visible. On the sign-up and setup pages we also record clicks, such as repeated clicks on a button that does not respond, and failed requests to our servers, so that we can find errors. Your clients' data is never part of a recording or of these events.

You can change your choices at any time via "Cookie settings" in the footer, and control cookies through your browser settings. Declining analytics or marketing does not affect essential site functionality.

We use carefully selected service providers (e.g. hosting, email delivery, analytics, support chat) who process data on our instructions and under appropriate agreements.

We may disclose data if required by law, to protect rights and safety, or in connection with a merger or acquisition subject to continued protection of your data.

We retain personal data only as long as needed for the purposes described above, unless a longer period is required by law.

Application account data is retained while your account is active and deleted or anonymised within a reasonable period after closure, subject to legal retention duties.

We take appropriate technical and organisational measures to protect personal data. However, no transmission over the internet and no storage system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login details confidential and for the security of the devices and accounts you use to access Zitli.

Zitli connects to services operated by third parties, such as Google Calendar, video conferencing tools and other services you choose to connect, and this website may link to external sites. Those providers process data under their own terms and privacy policies. We have no control over them and, to the extent permitted by law, accept no responsibility or liability for their content, availability, security or data processing practices.

If you use Zitli to schedule appointments with your own clients, you decide which data is collected through your booking pages, and you remain responsible for that data under data protection law. This includes informing your clients and, where applicable, complying with your professional secrecy obligations. We process that data on your behalf and according to your settings.

To the extent permitted by law, we are not liable for damage arising from circumstances outside our reasonable control, including unauthorised access to your account caused by lost or shared login details, failures of third-party services, or incorrect or unlawful data entered by users. The limitation of liability in our Terms & conditions applies in addition. Nothing in this policy limits rights or liability that cannot be excluded under mandatory law, in particular liability for intent or gross negligence.

Depending on applicable law (including the Swiss Federal Act on Data Protection and, where relevant, the EU GDPR), you may have rights to access, rectify, erase, restrict, or port your data, and to object to certain processing.

You may lodge a complaint with a supervisory authority. For requests, email privacy@zitli.ch. We respond within applicable statutory timeframes.

We may update this policy to reflect legal, technical, or business changes. We will post the revised version on this page with an updated date.

Material changes will be communicated where appropriate before they take effect.

Questions about this privacy policy or your personal data: privacy@zitli.ch.