Privacy notice

Who is responsible

The operator of this website is responsible for processing your personal data. Full contact details are given in the legal notice.

Contact form

When you write to us through the contact form, we receive your company name, your name, your business email address, the product your message is about (if you choose one) and your message. We use them only to answer you.

If you are signed in when you write to us, your message is linked to your client account.

Client accounts

For a client account we store your email address, your company name and your name. You sign in with a one-time link that we send to your email address; there is no password. After you sign in, a cookie keeps you signed in for 30 days. We record when your account was last active.

Documents and results

Invoices and other documents that you upload, and the results extracted from them, are stored so that you can download the results again.

To read the documents, we send their content to the API of Anthropic PBC (USA). According to Anthropic’s commercial terms, Anthropic may not use this content to train its models. According to Anthropic’s privacy information, inputs and outputs sent through its API are deleted within 30 days, unless they must be kept longer to comply with the law or to enforce Anthropic’s usage policy.

Supplier VAT numbers

When an uploaded invoice shows the VAT number (UID) of a supplier, we look it up in the public UID register of the Federal Statistical Office (FSO), to see whether the supplier is registered for VAT. Only the number is sent, never the invoice. The answer is kept for 30 days so that the same number is not looked up again.

Receipt inbox for fiduciaries

A fiduciary can create a folder for each of its clients and send the client a private upload link. For the documents uploaded this way, the fiduciary is responsible for the processing of its clients’ data; we process them on its behalf and only to provide the service.

A client who uploads through such a link needs no account. We store the uploaded files, the time of upload and the results of the checks, which only the fiduciary sees. The fiduciary can renew or revoke the link at any time.

Payments

Payments are processed by Stripe. You enter your card details on Stripe’s payment page; they never reach our server. From Stripe we receive the payment status, the amount and currency, the email address entered at Stripe and Stripe’s reference numbers for the payment and the subscription; we keep them to credit the payment to your account and to handle refunds and questions.

Questions and suggestions

When you send us a question or suggestion, we receive your message, your email address if you give one for a reply, the page you sent it from and the language of that page. If you are signed in, the message is linked to your client account. Only we read these messages; they are never published.

Visitor statistics

Visits are counted on our server without cookies or scripts. To count each visitor only once per day, the IP address and browser identifier are combined with a random value that changes every day, is kept only in memory and is never stored; only daily totals are saved.

Cookies

We use only cookies that are necessary for the website to work: a cookie that protects our forms against misuse and, if you sign in, the sign-in cookie described above. We use no tracking or advertising cookies. The website itself loads no scripts and no content from other providers.

Hosting

This website and the data described here are stored on servers in Switzerland, operated by our hosting provider Infomaniak Network SA.

Recipients and countries

We pass personal data only to the following providers, and only as far as necessary:

• Anthropic PBC, USA: reading uploaded documents
• Stripe, Ireland and USA: processing payments
• Federal Statistical Office (FSO), Switzerland: looking up supplier VAT numbers in the public UID register (only the number is sent)
• Infomaniak Network SA, Switzerland: hosting

How long we keep data

• Messages sent through the contact form or the questions and suggestions form are kept as long as we need them to handle them, and are then deleted.
• Uploaded files are deleted 90 days after processing. A file that could not be read yet because the plan was used up is kept for at most one year, so that it can be read once more is bought, and is then deleted. The results extracted from the files stay in your client area so that you can download them again.
• Your client account and your results are kept until you ask us to delete them. You can ask us at any time to delete your documents and results earlier.

Your rights

You can ask us which personal data we hold about you, have incorrect data corrected, have your data deleted and object to its processing. Write to us at info@klyrenta.ch.

You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).