Last updated: 7 September 2026.
1. Who we are
Starise is operated by VectAI SA, Rolle, Switzerland, with operations in Switzerland and Qatar. You can contact us about personal data at contact@starise.ai.
This notice covers the Starise marketing website and review platform. For website enquiries and business account administration, Starise is responsible for deciding how personal data is used. When a business uses Starise to collect its customers' feedback, that business generally decides the purpose of collection and Starise processes the information on its behalf. The business's own privacy notice also applies to that relationship.
2. Information we process
Website visitors. Our hosting services receive technical information needed to deliver and secure the website, such as IP address, requested resource and browser information. Optional measurement is described in section 5.
Business accounts. We process registration and contact details, business and location information, account settings, subscription and transaction records, and communications with our team. Connected review profiles and account permissions are used to provide the features you request. Payment processing is handled by a payment provider; do not send payment card details to our support team.
Customer feedback. A review flow may process ratings, selected answers, written comments, a voice recording and its transcript, and a generated review draft. The business can receive feedback and associated review collection information through its dashboard. A voice transcript may be stored with the feedback record; speaking instead of typing does not make your contribution anonymous.
Public reviews and responses. We process review content and associated public profile information from supported review platforms to provide the review inbox, analysis and response features.
Avoid including sensitive or unnecessary personal information in feedback. In particular, do not include health records, diagnoses, financial account details or information about another person that you are not authorised to share.
3. Why we use information
We use information to provide and administer the service, prepare requested review drafts and proposed business responses, analyse feedback for the business, manage subscriptions, answer support requests, secure the service and meet legal obligations.
Where applicable data protection law requires a legal basis, account and service administration may be necessary to perform a contract; billing and regulatory records may be required by law; security and responding to business enquiries may rely on legitimate interests. Optional website measurement relies on your consent. Where a business is the controller of customer feedback, it is responsible for identifying and communicating the appropriate legal basis.
AI assists with transcription, drafting and analysis. A generated draft is not automatically a public review. Customers decide whether to post and do so from their own account. Do not include private details in text you intend to publish.
4. Service providers and other recipients
Delivering the service requires providers for hosting, storage, payments, AI processing and analytics. We use Microsoft Azure services, Stripe for payments, OpenAI for AI processing including voice transcription, and PostHog for optional website analytics. These providers receive the information needed for their respective functions; this is different from selling customer data or sharing it for another company's marketing.
A business using the review flow receives the feedback collected for it. When you choose to publish a review, the selected review platform processes it under its own terms and privacy policy, and the review may become public. Opening a booking link takes you to Calendly, whose own privacy notice applies.
Information may also be disclosed when required by law, to protect legal rights, or as part of a business reorganisation subject to applicable data protection requirements. We do not sell personal data.
5. Website privacy choices
Optional analytics and campaign attribution start off. Accept enables both; Reject disables both. Cookie settings lets you allow analytics and campaign attribution separately. Closing the settings dialog without saving does not change your choice. Use Privacy choices in the footer to reopen the settings at any time. You can use the site with both optional settings off.
When enabled, PostHog receives page and interaction events, browser and device information, and network information such as your IP address. This helps us understand site use; it should not be understood as anonymous collection. On this marketing website, session recording and automatic form or click capture are disabled. Events are sent for selected interactions, and page-view measurement uses the page path rather than the full query string.
When campaign attribution is enabled, the st_attr cookie remembers the campaign that brought you to Starise, including campaign or advertising click identifiers, entry page, referring website and time of visit. It lasts up to ninety days and may be shared with the Starise app during signup. Turning campaign attribution off removes the cookie and stops this website from adding saved campaign details to app links. Turning analytics off stops subsequent PostHog events. Reject does both.
We store your choices in local browser storage under starise_privacy_choice for 180 days, together with a settings version, save time and expiry time. The choice applies across the pages and regional editions on the same website address and is shared with other tabs on that address. It is not saved to your account or synchronised across devices or different website addresses.
Your theme preference may also be stored to remember the appearance you selected. PostHog analytics identifiers on this marketing site use memory rather than persistent analytics cookies; its SDK may store a separate opt-in or opt-out preference flag in local storage. Analytics does not automatically save campaign parameters or referrer information. Browser controls can remove stored information, which may cause the site to ask for your choice again. If settings cannot be saved, optional tracking stays off for that visit.
These controls apply to this marketing website. The signed-in app and third-party websites have their own storage and privacy controls. Withdrawing consent stops future optional collection; it does not automatically delete events already received. You can contact us to request deletion where applicable.
6. Retention
Retention depends on the purpose of the record: account information supports the active service relationship; feedback supports the business's use of the service; billing records may need to be kept for statutory accounting obligations; and security or dispute records may need to be kept while an issue is investigated or resolved. Legal obligations can require retention after an account closes.
The marketing website's local retention periods are stated above. For the retention applicable to your business account, customer feedback or provider-held records, contact us with the relevant account or business name. If a business collected your feedback, contact that business about its retention instructions as well.
7. International processing
Starise operates in Switzerland and Qatar and uses service providers that may process information in other countries. Applicable data protection laws may require safeguards for international transfers. Contact us for information about the processing locations and transfer arrangements relevant to your account before providing data that is subject to a localisation or transfer restriction.
8. Security
We use access controls and technical safeguards to protect the service and restrict access to people who need it for their work. No system can guarantee absolute security. Contact us promptly if you believe an account or personal information has been compromised. We handle breach notifications in accordance with applicable law and our contractual obligations.
9. Your rights
Depending on the law that applies, you may have rights to access, correct or delete information, restrict or object to processing, receive a portable copy, or withdraw consent where consent is the basis for processing. Some requests are subject to legal exceptions. You may also complain to the data protection authority responsible for your jurisdiction.
Email contact@starise.ai to make a request. Tell us which business or service is involved so we can locate the relevant records. We may need proportionate information to verify your identity; do not send identity documents unless requested through an appropriate channel. We respond within the time required by applicable law and explain any lawful extension.
Where a business controls the feedback you provided, we may need to refer your request to that business or assist it in responding. Removing information from Starise does not necessarily remove a review you have published on Google, TripAdvisor or another platform; use that platform's controls for the public review.
10. Children and changes to this notice
Business accounts are intended for people authorised to act for a business. Review flows are not directed at children. Do not submit a child's personal information through a review flow without a lawful basis and any necessary permission.
We update this notice when our practices change and show the revision date above. Where required, we provide additional notice or request a new consent. A policy update does not itself constitute consent to optional tracking or a new use of personal data.