Privacy Policy – Helvet Bill

1. Data Controller

2. Collected Data

2.1 Data provided directly

• Account data: Name, email address.
• Invoicing data: IBAN, company name, logo, address, clients, invoices.

2.2 Technical / usage data

• IP address and device technical data (for security and operation).
• Notification identifiers (Firebase FCM/APNs) for alerts.
• Crash reports (Sentry) for maintenance (pseudonymized).

3. Roles & Responsibilities

When you enter personal data about your own clients (invoice recipients), you act as the Data Controller for that data. Helvet Bill acts as the Data Processor to provide the service (storage, PDF generation). Access to this data is strictly limited to support and maintenance needs.

4. Purposes & Legal Basis

Marketing communications are sent only with your explicit consent (opt-in).

5. Data Retention

Account deletion: If you delete your account, you have a 30-day recovery window. After this period, your data (invoices, clients) is permanently deleted from our production systems. Backups are retained for a limited time before rotation.

• Important: It is your responsibility to export and keep your invoices for your own accounting obligations before deletion.
• We only retain minimal transaction records necessary for our own accounting.

6. Data Security

We apply appropriate technical and organizational measures:

• HTTPS encryption for all transfers.
• Data access protected by authentication.
• Developer access restricted to maintenance necessities.
• Primary hosting secured in Switzerland.

7. Third Parties & Transfers

Your main data is hosted at Infomaniak (Switzerland). We use the following providers, who may process technical data outside Switzerland (with appropriate safeguards):

• Google Firebase: Push notifications.
• Sentry: Error and crash reports.
• Apple / Google / RevenueCat: Subscription management (we do not see your card numbers).

8. Your Rights

You have the rights of access, rectification, and deletion of your data. You may request portability of data you provided (in a structured format).

Contact us at: contact@helvet-bill.ch. Proof of identity may be required.

9. Automated Decisions

Helvet Bill does not make automated individual decisions within the meaning of Art. 21 FADP. Features like recurring invoice sending are configured and triggered by you.

10. Data Breach

In the event of a breach presenting a high risk, we will notify the FDPIC and affected users if necessary for their protection.

11. Disclaimer & User Obligations

Helvet Bill is a software tool for generating and managing invoices. You are solely responsible for the content, accuracy, and legal compliance of all your data (invoices, reminders, recurring invoices, VAT, etc.). Helvet Bill does not verify your data and does not provide legal, tax, or accounting advice. Please consult a qualified professional if needed. Retention and Archiving: You are solely responsible for retaining your accounting records for the legally required period (generally 10 years in Switzerland, Art. 958f CO). If you delete your account, your service data will be permanently erased after a 30-day recovery window. It is imperative to export and back up your invoices before any deletion to meet your obligations. Limitation of Liability: To the maximum extent permitted by applicable Swiss law, Helvet Bill disclaims all liability for damages resulting from the use of the application, input errors, or failure by the user to comply with legal obligations.

12. Changes

We may update this policy. The current version is the one available on the app/site.

13. Language

In case of discrepancy, the French version prevails.

14. External Links

We are not responsible for linked external sites.

15. Applicable Law

Swiss law. Jurisdiction in Switzerland.