Privacy

1. Controller and contact

Loya Labs Inc
169 Madison Ave STE 15796 New York, NY 10016 United States
Personal data enquiries: hello@ristou.com.

2. When you visit this website

The website introduces Ristou and lets you request a demo. Fonts and illustrations are hosted with the site. It loads no advertising pixels, audience analytics or chat widgets, and sets no tracking cookies. Click events used by the page are neither stored nor sent to an analytics service.

Vercel hosts and delivers the pages. Technical data, including IP address, request time, browser and requested page, may be processed to deliver and secure the website. The exact technical-log retention period depends on the Vercel services and settings in use and still needs verification before publication.

3. When you email us

Email links open your own email application. Messages received through Google Workspace may contain your email address, name, store details, availability and enquiry content. We use this data to respond, prepare a demo and follow up on your enquiry.

4. Booking a demo

The Cal.com calendar loads when you view the booking section. You can also open it directly on its website. Cal.com receives connection data and the information you enter, such as your name, email address, selected time and booking-question answers. This data is used to arrange the demo and send appointment-related messages.

Cal.com privacy policy

5. Providers and international processing

• Vercel : website hosting, delivery and security. Data processing terms .
• Google Workspace : receiving, storing and managing email correspondence. Data processing terms .
• Cal.com : availability, booking and appointment-message management. Data processing terms .

Loya Labs Inc is established in the United States. Data may be processed in the United States and other countries where these providers and their subprocessors operate. Exact locations depend in part on account settings and enabled services. Before publication, the applicable countries, subprocessors and international-transfer safeguards must be verified for our configuration. The links above describe the providers' arrangements; they do not by themselves confirm which arrangements are active for our accounts.

6. Proposed retention periods

• Routine enquiries without an ongoing business relationship: 12 months after the last meaningful contact.
• Booking records: 12 months after the meeting or its cancellation, unless follow-up requires continued retention.
• Contractual, accounting or dispute-related records: according to applicable legal obligations and the period necessary for their purpose. The periods above do not automatically apply to these records.

A quarterly review is planned to delete or anonymise data that is no longer needed. The actual deletion process and backup retention periods must be verified before publication.

7. Shopify application data

The Shopify application's processing of store, order and customer-account data will be covered separately. Stored data, database providers, regions, retention periods and deletion after uninstall still need confirmation before the application launches. The enquiry and booking periods above do not set store-credit expiry or application-data retention.

8. Your rights

You may request information about your data, its correction or deletion, subject to applicable law. Contact hello@ristou.com. In Switzerland, you can consult guidance from the Federal Data Protection and Information Commissioner .

9. Updates

Draft dated 27 October 2026. This policy will be finalised before publication after the stated items have been verified.