1. Data Controller
Sixia Sàrl, Rue de Fosseau 8C, 1955 Chamoson, Valais, Switzerland.
Contact for all data-related questions: info@sixia.ch
Sixia acts as data controller for its prospects' and users' data, and as data processor for the data that its business clients entrust to it as part of their property management company activity.
2. Data we process
Contact data. Surname, first name, company, job title, email address, telephone number, content of the messages you send us. They originate from website forms, meeting bookings and our exchanges.
Account data. Username, professional email address, role in the organisation, display preferences, connection logs.
Business data entrusted by the client. Emails, call notes, documents, information relating to units, leases, tenants, owners and claims, as imported or connected by the client to the platform.
Technical data. IP address, browser type, pages viewed, timestamps. They are used for security and audience measurement.
3. Gmail connection and use of Google data
When a user connects their Gmail or Google Workspace inbox to Sixia, they explicitly authorize access via the Google consent screen. This authorization can be revoked at any time.
What Sixia accesses. Only the permissions necessary for the service:
• reading messages from the connected inbox, in order to classify them, identify intent and link them to the correct file;
• creating draft replies, subject to validation by a human property manager;
• sending a message only after explicit validation by the user;
• adding labels and categorisation, to reflect the processing carried out within the inbox.
What Sixia does with it. Gmail data is used exclusively to provide the features visible to the user within the platform. It is never used for advertising purposes, nor resold, nor transmitted to data brokers.
Model training. Sixia does not use data from Google APIs, nor Google Workspace data, to develop, train or improve general artificial intelligence models. Artificial intelligence processing is carried out via providers contractually bound not to retain or reuse the transmitted content for training their models.
Human access. No Sixia employee reads the content of your inbox, except in four strictly defined cases: with your express consent, for security reasons, to comply with a legal obligation, or on aggregated and anonymized data.
Retention and deletion. Disconnecting the Google account in the platform, or revoking access from the security page of your Google account, immediately stops any new collection. Google data already processed is deleted from our systems within thirty days.
Limited use. Sixia's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This policy is available at https://developers.google.com/terms/api-services-user-data-policy
4. Why we process this data
• Provide and operate the platform, which is the purpose of the contract between us.
• Respond to your requests and organize meetings, based on your initiative.
• Ensure security, prevent abuse and maintain technical logs, under our legitimate interest.
• Comply with our legal and accounting obligations.
• Send you commercial communications, only with your consent and with an unsubscribe link in each message.
5. Where your data is hosted
Platform data is hosted on infrastructure located in the European Economic Area, with Heroku, a subsidiary of Salesforce, and Amazon Web Services, in European regions. No storage is carried out outside this zone.
These two providers are US-based companies operating European regions. Processing is governed by the European Commission's standard contractual clauses, the EU-US Data Privacy Framework and its extensions applicable to Switzerland, as well as additional technical measures, including encryption.
Certain ad hoc processing, notably that carried out by language models, may involve a provider located outside this zone. In this case, the transfer is governed by the same guarantees and the provider is prohibited from retaining data beyond the processing time.
6. Who we share with
Sixia does not sell any data. We use subcontractors for hosting, sending transactional emails, support and audience analysis. Each is bound by a subcontract and acts only on our instructions. The list of our subcontractors is available upon request to info@sixia.ch
We only transmit data to an authority if required by law.
7. How long we retain data
• Prospecting data: three years after the last contact.
• Account data and business data: for the duration of the contract, then returned in a structured format and deleted within thirty days.
• Google data: see section 3.
• Technical and security logs: twelve months.
• Accounting documents: ten years, in accordance with Swiss law.
8. Security
Encryption of data in transit and at rest, partitioning of environments, restricted and logged access, reinforced authentication for administrative access, regular backups. No action is executed in your tools without prior human validation, and Sixia does not write anything to your management software.
In the event of a data breach presenting a risk, we will inform the Federal Data Protection and Information Commissioner, the competent European authority if applicable, and the data subjects within legal timeframes.
9. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time. Write to info@sixia.ch, we will reply within thirty days.
If you are not satisfied with our response, you can contact the Federal Data Protection and Information Commissioner in Switzerland, or the supervisory authority of your country of residence in the European Union.
When Sixia acts as a subcontractor for a property management company, address your request directly to that company, which remains the data controller. We assist them in responding to it.
10. Cookies
The site uses cookies strictly necessary for its operation, as well as audience measurement cookies placed only after your consent. You can change your choice at any time from the cookie management banner.
11. Minors
The platform is intended for professionals. We do not knowingly collect data concerning individuals under sixteen years of age.
12. Modifications
Any substantial modification to this policy will be announced on this page and, for platform users, via information in the application at least fifteen days before it takes effect. The date of the last update is shown at the top of the page.
The Service may include features for automated analysis, generation of proposals subject to human validation, dashboards, import modules, and associated functions.