Privacy policy
Last updated: 9 October 2026
SwissDoc is committed to protecting the privacy of its users in accordance with the Federal Act on Data Protection (FADP / nLPD) and, where it applies, the EU General Data Protection Regulation (GDPR).
Controller
Bompard DigitalRue du Pays-d'Enhaut 80, 1630 Bulle
Canton of Fribourg, Switzerland
E-mail: contact@bompard-digital.ch
Legal basis
We process your data on the following bases:
• Performance of a contract (art. 31 para. 2 let. a FADP / art. 6(1)(b) GDPR): to provide the service, manage your account and process payments.
• Legitimate interests (art. 31 para. 1 FADP / art. 6(1)(f) GDPR): to improve the service and prevent abuse.
• Legal obligation (art. 31 para. 2 let. b FADP / art. 6(1)(c) GDPR): to retain billing data.
• Consent (art. 31 para. 1 FADP / art. 6(1)(a) GDPR): for deadline reminders by e-mail, which you switch on yourself for each checklist and can switch off at any time.
Data collected
- Account data: e-mail address, name (optional), preferred language, default canton
- Authentication data: Firebase credentials (e-mail/password or Google account), session tokens
- Documents and checklists: content of the documents you create, related metadata (date, template, canton), your checklist answers (without addresses) and the steps marked as done or not applicable, as well as your choice to receive e-mail reminders and the reminders already sent. If you share a checklist, the people you share it with see your answers and your steps and can change them
- Payment data: processed exclusively by Stripe. We do not store any bank details or card numbers. Only the Stripe customer ID and the subscription status are kept
- Usage and technical data: number of documents generated (to apply the limits of your plan), the host's technical logs (IP address, date, page requested) and technical error reports
- “Your feedback” messages: the message type, its content, the page concerned, the language and, if you provide it, your e-mail address so we can reply. If you are logged in, the message is linked to your account
Purposes of processing
We use your data to:
• Provide and improve the document generation service
• Manage your account and your subscription
• Process payments via Stripe
• Handle authentication via Firebase
• Store your documents securely
• Send you, if you have asked for it, an e-mail reminder 3 days before the deadlines of a checklist
• Read your “Your feedback” messages to improve the service and reply to you if you left us your e-mail address
• Provide technical support via contact@bompard-digital.ch
Processors and disclosure abroad
We use the following processors, which are needed to run the service. They process your data only on our behalf and for the purposes described above:
• Vercel — hosting of the web application and anonymous audience measurement (United States)
• Neon — PostgreSQL database (United States)
• Google Firebase — authentication and account management (United States)
• Stripe — payments and subscription management (United States / Ireland)
• Sentry — technical error tracking (United States)
• Resend — sending of transactional e-mails (United States)
• Google (Gmail) — receipt of “Your feedback” messages forwarded by e-mail to the operator (United States)
Disclosure abroad (art. 16 and 19 FADP): these providers may process your data in the United States. These transfers are based on the Swiss-U.S. Data Privacy Framework where the provider is certified under it and, otherwise, on standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC / PFPDT). Ireland is one of the countries whose legislation ensures an adequate level of protection according to the Federal Council.
No data is sold or used for advertising purposes.
Storage and security
Your data is stored with our hosting providers and encrypted in transit (TLS) and at rest. Only the operator of the service can access it, and only when this is necessary for maintenance or support. The documents generated are linked to your account and are accessible only to you.
Retention period
Account data: kept as long as your account is active, then deleted within 30 days of the account being deleted.
Documents: deleted with the account, or immediately on individual request.
Billing data: kept for 10 years in accordance with Swiss commercial law.
Authentication data: deleted with the Firebase account.
Technical logs: anonymised after 90 days.
“Your feedback” messages: kept for as long as needed to handle them. If you delete your account, they are kept without any link to it; you can ask for them to be deleted at contact@bompard-digital.ch.
Your rights
Under the FADP (and the GDPR where it applies), you have the following rights:
• Right of access: obtain a copy of your personal data.
• Right to rectification: correct inaccurate data, in particular from your account settings.
• Right to erasure: delete your account yourself from Settings › Delete my account, or request it by e-mail.
• Right to data portability: receive your data in a structured format.
• Right to object: object to the processing of your data.
To exercise these rights, write to contact@bompard-digital.ch. You can also contact the supervisory authority, the Federal Data Protection and Information Commissioner (FDPIC / PFPDT), www.edoeb.admin.ch.
Account deletion
You can delete your account yourself from the settings of your personal area by entering your e-mail address to confirm. For your security, a recent login is required. Deletion is immediate: any subscription is cancelled, and your account and all associated data are permanently deleted, except for data that must be kept by law (in particular billing data, kept for 10 years in accordance with Swiss commercial law). You can also request deletion by e-mail at contact@bompard-digital.ch. Messages sent via “Your feedback” are kept but are no longer linked to your account; you can ask for them to be deleted at contact@bompard-digital.ch.
Cookies
SwissDoc only uses cookies and local storage that are strictly necessary for the service to work (session, authentication, preferences). To understand which pages are useful and at which step visitors give up creating a document, we measure audience anonymously, without cookies: Vercel Web Analytics counts page views, and we record the main steps of the process (template page, sign-up, opening the assistant, creation, download) with a random identifier specific to the browser tab, erased when the tab is closed. None of these measurements contain your name, your e-mail, your IP address or the content of your documents, and they are never used for advertising purposes. Technical errors are reported to Sentry. See our Cookie policy for more details.
Changes
We reserve the right to change this policy. In the event of a substantial change, users will be informed by e-mail at least 30 days before the changes take effect.
Contact
For any question about the protection of your data:
E-mail: contact@bompard-digital.ch