Privacy Policy

1. Data We Collect

• Account data: name, email, company details, address
• Billing data: payment method tokens (via Stripe), billing address, VAT number (if applicable)
• Invoice data: invoice contents, customer details you provide to generate invoices/QR-bills
• Usage data: technical logs (IP address, browser/OS, timestamps) for security and diagnostics
• Support data: messages you send to us (e.g., via email)

2. Legal Bases for Processing

• Contract performance: to provide and operate SwissInvoice
• Legal obligations: Swiss commercial, tax and accounting retention duties
• Legitimate interests: service security, fraud prevention, product improvement
• Consent: where required (e.g., optional communications)

3. How We Use Data

• Provide invoice and Swiss QR-Bill functionality
• Process payments and manage subscriptions via Stripe
• Send transactional emails (e.g., verifications, receipts) via Mailgun
• Ensure security, prevent abuse and troubleshoot issues
• Comply with Swiss legal retention and audit requirements

4. Sharing and Processors

We do not sell personal data. We share data only as necessary to provide the service:

• Stripe (payments): tokenized payment processing
• Mailgun (email): transactional email delivery
• Hosting and infrastructure providers located primarily in Switzerland or the EEA
• Authorities where required by applicable Swiss law

5. International Transfers

Our primary processing and storage are in Switzerland. If data is transferred outside Switzerland/EEA by a processor, we require appropriate safeguards (e.g., SCCs or adequacy).

6. Data Retention

• Account and subscription records: for the duration of the relationship plus statutory periods
• Technical logs: typically up to 24 months, unless needed for security or legal claims
• Support communications: typically up to 36 months

7. Security

We apply appropriate technical and organizational measures, including encryption in transit, access controls, and monitoring. No method is 100% secure, but we continually improve our safeguards. We do not provide insurance coverage or compensation in case of security incidents, data breaches, or losses, except where required by mandatory Swiss law.

8. Your Rights (revFADP)

• Access and information
• Rectification
• Erasure where legally permissible
• Objection to processing in specific cases
• Portability where technically feasible

To exercise your rights, contact privacy@billio.ch. We may need to verify your identity.

9. Cookies

We use essential cookies for authentication and security, a language preference cookie, and Stripe cookies for payment processing. Analytics (Google Analytics 4) is used only if enabled and, where required, with your consent under Google Consent Mode v2. Before consent, only cookieless pings (without cookies) are sent. See the Cookie Policy for details and how to manage preferences.

10. Children

The service is not directed to children under 16. We do not knowingly collect personal data from children.

11. Changes

We may update this policy to reflect legal or technical changes. Material changes will be communicated via the service.

12. Disclaimer

By using our service, you acknowledge and accept that we do not provide insurance, refunds, or damage compensation unless required by law. At this time, we do not store accounting/bookkeeping documents; such documents are kept by the user in accordance with Swiss law. A document storage service may be introduced and, if provided, will be available on a case-by-case basis pursuant to Swiss law (including up to 10 years). We reserve the right to decline a storage request without specifying reasons.

13. Contact

DaniLov Services, Route de Moncor 33, 1752 Villars-sur-Glâne, Switzerland — privacy@billio.ch