Last updated: DATE

1. Who we are

MIHOS is operated by RAISON SOCIALE, FORME JURIDIQUE, registered office ADRESSE COMPLETE, Switzerland, registered in the commercial register under CHE-xxx.xxx.xxx.

For anything in this policy, write to EMAIL PRIVACY.

Si un DPO ou un representant UE (art. 27 RGPD) est designe, ses coordonnees vont ici. Un representant UE est requis si vous ciblez l'UE sans etablissement dans l'UE.

2. What this policy covers

Two different things, with two different roles.

This website. We decide why and how the data collected here is processed. We are the controller.

The MIHOS application. Our customers deploy MIHOS across their sales teams. They decide what is recorded, analysed and written back. They are the controller and we act as their processor, under a data processing agreement. If you are a sales rep or a client of one of our customers, address your request to that company first. We will help them answer you.

3. What we collect

On this website

• What you type in the contact form: name, company, professional email address
• Technical data generated by serving the page: IP address, browser and device information, request logs, kept by our hosting provider
• Essential cookies set by Webflow to serve and secure the page

We run no analytics, no advertising and no tracking on this website. If you book a call, the booking happens on Cal.com and is governed by Cal.com's own privacy policy, not this one.

In the MIHOS application

• Account data: name, professional email, company, role, authentication data
• Audio recordings of field sales meetings, and their transcripts
• Analyses produced from those recordings: summaries, scores against the customer's playbook, coaching notes, recommended next actions
• Data read from and written to the customer's CRM, calendar and email, limited to the fields their administrator has approved
• Technical and security logs: access, writes performed, errors

Recording requires the explicit and prior consent of every participant in the meeting, including the customer's own client. Consent can be withdrawn at any time. The recording is then deleted, unless a legal retention obligation applies.

4. Why we process it, and on what basis

Under Swiss law (nLPD), the same processing is justified by the contractual relationship, by your consent where it is required, and by our overriding legitimate interest for security.

5. Automated processing

MIHOS scores meetings and produces recommendations. These are indicative. On their own they produce no decision with legal or similarly significant effect on a person. Any decision a manager takes about a rep involves human judgement, and the customer company remains responsible for how it uses the analyses.

Une AIPD (DPIA) est tres probablement obligatoire ici: enregistrement systematique de conversations et evaluation de salaries (art. 35 RGPD, art. 22 nLPD). Si elle est faite, l'indiquer et preciser qu'elle est disponible sur demande.

6. How long we keep it

• Contact form submissions: DUREE
• Account data: duration of the contract, then DUREE
• Recordings, transcripts and analyses: DUREE, definie contractuellement avec le client
• Security logs: DUREE

At the end of the contract, customer data is deleted or anonymised within DUREE, unless a legal obligation requires otherwise.

7. Who else touches the data

We do not sell or rent personal data. We share it only with the providers above, with the customer company you work for, and where a competent authority legally requires it.

8. Transfers outside Switzerland and the EU

Where a provider sits outside Switzerland or the EEA, transfers rely on the European Commission's Standard Contractual Clauses together with the Swiss addendum recognised by the FDPIC, on encryption in transit and at rest, and on an assessment of the destination country.

Si les donnees produit sont hebergees exclusivement en Suisse ou dans l'UE, l'ecrire ici: c'est un argument commercial fort.

9. Security

Encryption in transit and at rest, access restricted to the people who need it, logging of every write the product performs, regular review of access, and separation between customer environments. If a breach is likely to result in a high risk, we notify the FDPIC and the affected controllers without undue delay, and within 72 hours where the GDPR applies.

10. Your rights

You can ask for access to your data, its correction, its deletion, a restriction of processing, a copy in a portable format, and you can object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it at any time, without affecting what was done before.

Write to EMAIL PRIVACY. We answer within 30 days. If our answer does not satisfy you, you can complain to the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or to the supervisory authority of your country of residence in the EEA.

11. Recording people at work

Where MIHOS is deployed over a sales team, the employer must inform its employees before any recording, and consult employee representatives where local law requires it. That obligation sits with the customer company, not with us. We provide the documentation needed to do it properly.

12. Minors

MIHOS is a business tool. We do not knowingly collect data about anyone under 16. Anything collected by mistake is deleted.

13. Cookies

This website sets only the cookies Webflow needs to serve and secure the page. There is no analytics cookie and no advertising cookie, so no consent banner is required. If that changes, this page changes first and a banner appears.

14. Changes

If this policy changes materially, we update the date above and notify customers at least 30 days in advance.