Privacy policy

This policy explains how Wetrack, a product of Polychrome Sàrl (“we”, “us”), handles personal data when you visit this website, use the Wetrack platform, install our Shopify app, use the free readiness check or connect through the REST API.

1. Who we are

Polychrome Sàrl, 20 rue Joseph Girard, 1227 Carouge, Switzerland, is the data controller. Contact: info@polychrome.ch.

2. Data we collect

On this website. The website is static and sets no cookies by default. If we enable analytics, we use a privacy-friendly, cookieless service that records aggregate page views without personal identifiers. Forms (contact, demo, pilot) collect the details you type: name, work email, company, website and your message. We keep them to answer you.

Free readiness check. You provide your brand website and a work email. We verify the email, read one public product page, build a preview passport and a readiness report, and email you the links. We keep the lead record and the generated preview for a limited time and may contact you once about it. Data is limited to what is public on your website plus what you gave us.

Wetrack platform, Shopify app and REST API. Account data (name, work email, company, billing status), the product, material, supplier, facility and certificate data you enter or import, usage logs for performance and error tracking, and support conversations. If you connect Shopify, we read product data; we do not read customer or order data and we never write to your store. Payment card details are handled by Stripe or Shopify; we never store them.

3. How we use data

To provide and improve the Services, answer you, run readiness reports and Life Cycle Assessments, publish the passports you choose to publish, send you service messages you have asked for, and meet legal obligations. We do not sell personal data.

4. AI suppliers

Some features send text or documents you submit to OpenAI to produce suggestions (for example, turning a supplier sheet into structured material entries). Only data needed for the feature you use is sent, and nothing is saved to your account without your approval. See the terms for details.

5. Legal bases

Performance of a contract (providing the Services), your consent (forms, readiness check), and our legitimate interest in running, securing and improving the Services.

6. Sharing

With processors that host and run the Services (cloud infrastructure, email delivery, payments, AI suppliers, error tracking) under contracts that bind them to confidentiality; with authorities when the law requires it. Passport pages you publish are public by design; you choose what they show.

7. International transfers

Some processors store data outside Switzerland or the EU. We rely on adequacy decisions or standard contractual clauses and equivalent safeguards.

8. Retention

Website form data: as long as needed to answer and follow up, then deleted. Readiness check leads and previews: a limited period after generation. Platform data: while your account is active and for a short period after, then deleted or anonymised, unless the law requires longer. Published passports remain online for the duration of an active plan.

9. Your rights

You can ask for access, correction, deletion or export of your personal data, object to processing, or withdraw consent, by writing to info@polychrome.ch. You can also complain to the Swiss Federal Data Protection and Information Commissioner or your local authority.

10. Security

Encrypted connections, restricted and authenticated access, monitored cloud infrastructure and regular backups.

11. Changes

We update this policy when the Services or the law change and post the new version here with a new date.