Legal information

Privacy policy

Last updated: 1 October 2026

This text is a translation of the original French version. In case of any discrepancy, the French version prevails.

In short: we only process the data needed to run Facturation. We do not sell it and show no advertising. We measure the use of the site only if you agree, and never record what you type. You can view, correct, export or have your data deleted at any time.

This policy explains how we process your personal data when you visit this website and use the Facturation application, in accordance with the Swiss Federal Act on Data Protection (FADP) and, to the extent it applies, the European Union’s General Data Protection Regulation (GDPR).

1. Controller

Nathan Küpfer
Avenue de la Gare 22, 2013 Colombier, Switzerland
Email: kuepfer.nathan17@gmail.com

For any question about your data, write to us at this address.

2. The data we process

When you visit the site

Our hosting provider records technical logs on each visit: IP address, date and time, page viewed, browser and operating system. They are used solely to keep the site running and secure, and are kept for a limited period.

When you create an account

your name, your email address and the language chosen for the interface and your emails;
your password, which we do not know: it is stored in an irreversibly encrypted form (hash);
the date on which you accepted the terms of use.

When you use the application

information about your business: name, address, email, phone, website, IBAN, VAT number;
your clients’ data (name, contact person, address, email, language) and your documents: invoices, credit notes, payments, reminders, services and subscriptions.

For your clients’ data, you are the controller: we process it solely on your behalf, to provide you with the service, as set out in our terms of use.

When you accept visit measurement

To understand how the site and the application are used and to improve them, we use the PostHog tool. Nothing is recorded until you have accepted, and you can decline with no consequence for the service. If you accept, we record:

the pages viewed, clicks, where the visit came from, the language of the interface, the type of device and browser, and the country derived from the IP address;
the actions performed in the application (for example “invoice issued”), without their content: no names, amounts or text;
a replay of the screen during the visit, in which everything you type is masked and, once signed in, only the application’s own texts (menus, buttons, titles) remain readable: your data is masked;
technical errors and loading times;
once signed in, your account number, without your name or email address.

This data is kept for at most one year, screen replays for at most 30 days. Your current choice: you have not chosen yet. Change my choice

Emails sent

The application sends emails on your behalf to your clients (invoices, reminders, credit notes), as well as emails to you (verification of your address, password reset, important information about the service).

3. Why we process it

to provide you with the application and its features;
to secure your account and prevent abuse;
to inform you of important changes, for example the announcement of prices after the beta;
to answer your questions and requests;
if you agree, to understand how the service is used in order to improve it.

We do not sell or rent your data, and do not use it for any advertising purpose.

4. Cookies and local storage

Strictly necessary for the service to work:

a session cookie, which keeps you signed in; it expires after two hours of inactivity;
a security cookie (XSRF-TOKEN), which protects your actions against fraudulent requests;
your browser’s local storage, for your display preferences (light or dark theme, collapsed menu, selected period, language). This information stays on your device.

If you accept visit measurement, PostHog also stores a cookie and information in your browser’s local storage, to recognise your successive visits. If you decline, only your refusal is remembered. No advertising or social media cookies are used.

The font is hosted with the application: no data is sent to a third party when it loads.

5. Who has access to your data

Your data is only disclosed to the providers essential to the service, bound by contract and by confidentiality:

hosting of the application and data: Infomaniak Network SA, Geneva (Switzerland);
visit measurement, only if you have accepted it: PostHog Inc. (data hosted in Germany, European Union);
sending emails: Brevo (Sendinblue SAS) (France, European Union).

We may also be required to disclose data to the authorities when the law so requires.

6. Transfers abroad

If a provider processes data outside Switzerland, this is only to a country offering an adequate level of protection according to the Federal Council or, failing that, with appropriate safeguards, in particular standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).

7. How long we keep it

We keep your data for as long as your account exists. When you delete your account or ask us to, we delete it within 30 days, unless the law requires us to keep it longer.

Important: the law requires you to keep your invoices and accounting records for ten years (art. 958f of the Swiss Code of Obligations). Remember to download your invoices as PDF and to export your data before deleting your account.

8. Security

We take appropriate technical and organisational measures to protect your data: encrypted connection, hashed passwords, restricted access to data, protection against fraudulent requests. As no system is infallible, we will inform you if a security breach posed a high risk to you.

9. Your rights

You can at any time:

find out what data we process about you (right of access);
have inaccurate data corrected;
have your data deleted, subject to legal retention obligations;
receive your data in a common format (CSV and PDF exports available in the application);
object to processing.

Write to us at kuepfer.nathan17@gmail.com. We may ask you to prove your identity. You also have the right to contact the Federal Data Protection and Information Commissioner (FDPIC) and, if you live in the European Union, the data protection authority of your country.

If you are a client of one of our users and wish to exercise your rights over the data they have entered, please contact them first: they are the controller of that data. We will help them respond to your request.

10. Changes

We may adapt this policy, for example when adding a feature or changing provider. The version in force is always the one published on this page; in the event of a significant change, we will inform you by email.