Privacy policy
Last updated: 23 October 2026
This policy explains how RLGH AG, Blegistrasse 23, 6340 Baar, Switzerland, operating under the brand Peakora (“Peakora”, “we”), processes personal data in GTM OS, our go-to-market platform at gtm-os.peakora.io. It applies under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
For the data we need to run GTM OS (user accounts, logins, account administration), Peakora is the controller. Contact: joel@peakora.io.
For data that client companies process in GTM OS products (for example call analyses or campaign data), the client is the controller and Peakora processes that data on the client’s behalf under a data processing agreement.
2. What data we process
- Account data: name, work email address, company (account), role.
- Login data: sign-in method (Google or email link), session information, time of sign-in.
- Technical data: IP address, browser and device information in server logs, kept for security and troubleshooting.
- Product data: data the client company uses in its activated products, such as meeting analyses or campaign statistics.
3. Why we process it
- to provide GTM OS and the products your company has access to (contract);
- to secure the platform and keep each company’s data separate (legitimate interest, security);
- to send service emails such as invitations and sign-in links (contract).
We do not sell personal data and do not use it for advertising.
4. Cookies
GTM OS only uses cookies that are strictly necessary: to keep you signed in and to remember which company account you are working in. We use no analytics or tracking cookies.
5. Service providers (sub-processors)
- Supabase — sign-in and database; data stored in the EU (Frankfurt, Germany).
- Vercel — hosting of the web application.
- Google — “Continue with Google” sign-in, if you use it.
- Resend — sending service emails.
Some providers are based in the USA. Where data is transferred outside Switzerland or the EU/EEA, we rely on the Swiss-US / EU-US Data Privacy Framework or standard contractual clauses, as offered by each provider.
6. How long we keep data
Account data is kept while you have access to GTM OS and deleted within 30 days after your access or your company’s contract ends, unless the law requires us to keep it longer. Server logs are kept for up to 30 days.
7. Your rights
You can request access to, correction or deletion of your personal data, and object to or restrict its processing. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, your local supervisory authority. Contact us at joel@peakora.io.
8. Changes
We may update this policy. The current version is always available on this page.