Last updated: 1 November 2026
Data processing agreement
This agreement under Art. 9 FADP (and, where applicable, Art. 28 GDPR) forms part of the terms of service and applies between the customer as controller and Saldo Connecta as processor.
1. Subject matter and duration
The subject matter is the processing of personal data arising from reading the Stripe account and creating entries in bexio. The duration corresponds to the use of the service.
2. Types of data and data subjects
Data: payment references, amounts, currencies, fees, customer country, payment descriptions, chart of accounts and entries. No card numbers. Data subjects: the customer’s customers and payers, the customer’s staff with access to the account.
3. Instructions
We process the data only to provide the service and according to the settings the customer makes in the application. Further instructions are given in writing. If we consider an instruction unlawful, we inform the customer.
4. Confidentiality
Persons with access to the data are bound to confidentiality. Administrative access is limited to what is necessary, requires a second factor and is logged.
5. Security
Technical and organisational measures: encryption in transit (TLS) and of access tokens (AES-256-GCM), read-only access to Stripe, separation of data per company, daily backups with limited retention, abuse protection (rate limiting), availability monitoring, audit trail of all booking-relevant actions.
6. Sub-processors
Hetzner Online GmbH (Germany, hosting), Supabase, Inc. (EU Paris, database and sign-in), Resend, Inc. (USA, e-mail delivery). Stripe and bexio are services engaged by the customer. We give at least 30 days’ notice of changes; the customer may object for good cause and terminate the agreement.
7. Assistance
We assist the customer with data subject requests and security assessments as far as the data in our service is concerned. Export and deletion are available to the customer at any time.
8. Breach notification
We notify the customer of data security breaches without undue delay, at the latest 72 hours after becoming aware, with the known details on nature, scope and measures taken.
9. Deletion and return
After the end of use or on request we delete the data within 30 days unless a statutory retention duty applies. The customer may export the data in full beforehand.
10. Evidence
On request we provide the information necessary to verify compliance with this agreement. On-site audits take place after notice and to a reasonable extent.
11. Final provisions
In case of conflict this agreement prevails over the terms of service as far as data protection is concerned. Swiss law applies; jurisdiction as in the terms of service.