Privacy policy
Version of October 21, 2026
Provisional version undergoing legal review. It will become final when the platform opens to the public.
This English version is provided for convenience. In case of discrepancy, the French version prevails. Revitalize Sàrl complies with the Federal Act on Data Protection (FADP). This statement explains what data we process, why, and what your rights are.
1. Data controller
Revitalize Sàrl, Route de Courroux 21, 2824 Vicques (JU), Switzerland. Contact: info@revikolo.ch.
2. Data processed
Account: name, email address, password (stored in irreversibly encrypted form), registration date.
Seller profile: type of seller, company name, UID number and public data from the UID register, address, telephone, website, description. The street is never published; the telephone number only if the seller chooses (shown on click on their listings).
Listings: descriptions, specifications, price, location (postcode and town), photos and documents. Photo metadata (GPS position, device) is removed automatically on upload.
Messages exchanged between buyers and sellers, favourites and search alerts.
Account security: type of device used to log in (browser and operating system, without a unique identifier), so that we can notify you of a login from a new device.
Technical data: IP address and log of sensitive actions (security, abuse prevention), listing view statistics without profiling.
3. Purposes
Providing the platform (accounts, listings, messages, alerts), verifying professional sellers, ensuring security and preventing abuse, sending you the emails required for the service (confirmation, notifications) and, if you have requested it, the weekly digest of new machines (one-click unsubscribe). No data is sold or used for targeted advertising.
Scam prevention: messages are analysed automatically, on our servers in Switzerland and without any external service, to detect signs of fraud (IBANs, links, high-risk payment requests). Depending on the result, a safety tip is shown to the recipient or, at the start of an exchange, the message is held back and read by a team member before being delivered or rejected. Messages in a reported conversation may also be read by the team. No final decision is taken automatically: an account suspension is always decided by a person.
4. Hosting and processors
The platform and its data are hosted in Switzerland (Infomaniak, Geneva).
Automatic translation: the title and description of listings are sent to Anthropic PBC (United States) to be translated by an artificial intelligence model; no personal data is intentionally included. [Safeguards for the transfer to the United States and retention period at Anthropic: to be validated by the lawyer.]
Assisted listing entry (optional): if a seller photographs a machine's nameplate to fill in their listing, this photo is sent to Anthropic PBC (United States) to be read by an artificial intelligence model. It is used solely to suggest the make, model, year and serial number; we do not keep it and it is not published. Photograph only the nameplate, without any people or documents. [Safeguards for the transfer to the United States and retention period at Anthropic: to be validated by the lawyer.]
Maps: base maps are provided by swisstopo (Swiss Confederation); your IP address is sent to swisstopo when a map is displayed.
Videos: YouTube or Vimeo videos embedded by sellers only load if you start them (cookie-free mode for YouTube).
Payment for listings: Stripe Payments Europe Ltd (Ireland) processes card and TWINT payments. We neither see nor store your card or TWINT account details; we only receive the result of the payment.
[Transactional email provider to be completed once chosen]
6. Retention period
Data is kept for as long as your account exists and is then deleted, unless there is a legal retention obligation (for example, accounting records relating to payments). Security logs are kept for a maximum of 12 months.
7. Your rights
You can request access to your data, its rectification, its erasure or its delivery in a commonly used format by writing to info@revikolo.ch. You can also contact the Federal Data Protection and Information Commissioner (FDPIC).
8. Security
Encrypted connections (HTTPS), hashed passwords, access control on every action, log of sensitive operations, encrypted backups that are tested regularly.