Privacy policy

1. Controller

Saldo Connecta, Silbergasse, 2502, Schweiz. E-mail for privacy requests: hallo@saldoconnecta.com.

2. What data we process

Account: e-mail address, password (only as a hash at our sign-in provider), company name, language, time of registration and, if you provide it, industry, approximate payment volume and whether a fiduciary is involved.

Stripe: through Stripe Connect with read-only access we read payments, fees, refunds, disputes and payouts of your Stripe account, including the customer’s country and currency. We receive no card numbers and no Stripe credentials.

bexio: chart of accounts, tax rates and the entries we create. OAuth tokens are stored encrypted (AES-256-GCM) and used only to book.

Usage: technical logs (IP address, time, function called) for security and troubleshooting; an audit trail of actions in your account (who connected, booked or approved what, and when).

Product analytics: page views and events such as “sign-up completed”, without cookies and without storing the IP address (self-hosted Umami). This data contains no names and no e-mail addresses.

Prospects: if you register interest in an upcoming feature through a form, we store your e-mail address, the feature, the language, the promised discount and the time of your consent.

E-mail: notifications (action needed, errors, connection lost) are delivered through a sending service, which processes the recipient address and delivery status.

3. Purposes

Providing the service (Stripe–bexio connection, creating entries, dry run, history), security and abuse prevention, customer communication, improving the product on the basis of aggregated usage, and compliance with legal obligations.

4. Legal bases

Performance of the contract (your account and the service), legitimate interests (security, product development, communication with prospects) and, where required, your consent (registering interest in features). You can withdraw consent at any time by e-mail.

5. Recipients and processors

Hetzner Online GmbH, Germany (hosting of the application and the analytics).

Supabase, Inc. (database and sign-in service, EU region, Paris).

Stripe Payments Europe Ltd., Ireland (read-only access to your Stripe account through Stripe Connect; Stripe is an independent controller for your Stripe account).

bexio AG, Rapperswil-Jona, Switzerland (write access to your bexio accounting on your behalf).

Resend, Inc., USA (delivery of e-mail notifications; transfer based on standard contractual clauses).

Data processing agreements are in place with processors. We do not sell data and do not share it for advertising.

6. Transfers abroad

Data is processed in Switzerland and the EU. For e-mail delivery to the USA we rely on the standard contractual clauses recognised by the Swiss FDPIC.

7. Retention

Account data until the account is deleted. Booking data and audit trail for as long as the account exists; afterwards they are deleted within 30 days unless a statutory retention duty applies. Technical logs 30 days. Prospect e-mails until the feature notification, at most 24 months.

8. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. Export and deletion of your company are available directly in the account; everything else by e-mail to hallo@saldoconnecta.com. Complaints can be addressed to the Swiss Federal Data Protection and Information Commissioner (FDPIC).

9. Security

Encrypted transport only (TLS), encrypted storage of access tokens, read-only access to Stripe, mandatory two-factor authentication for our administrators, daily backups, logging of administrative access.

10. Cookies

We only set strictly necessary cookies: the sign-in session in the application and a cookie with your language choice on this website. There are no advertising or tracking cookies, hence no cookie banner.

11. Changes

We update this policy when the service changes. The version published at https://saldoconnecta.com applies.