How swissCFO collects, uses, and protects your personal data.
The data controller responsible for processing personal data on this platform is:
swissCFO
Switzerland
Email: contact@swisscfo.ch
This Privacy Policy is governed by the Swiss Federal Act on Data Protection (nDSG / revFADP), in force since 1 September 2023. If you are located in the European Economic Area, the EU General Data Protection Regulation (GDPR) may also apply, and this policy is designed to be compatible with both frameworks.
When you use the PAIN.001 Generator or other file-processing tools, your invoice PDFs are processed entirely within your browser using JavaScript. No invoice file or extracted payment data is transmitted to or stored on swissCFO servers.
If you create an account, we collect:
Free uses for anonymous users are tracked via browser localStorage on your device only. No personal identifiers are sent to our servers for anonymous usage.
Like most websites, our hosting provider (Netlify) may log standard server access data including IP addresses, browser type, pages visited, and timestamps. This data is used for security and operational purposes and is governed by Netlify's privacy policy.
Payment card details are handled exclusively by Stripe. swissCFO never receives or stores your full card number. We only receive a Stripe customer ID and confirmation of successful transactions.
| Purpose | Data used | Legal basis |
|---|---|---|
| Providing account-based tool access | Email, usage counts, credits | Contract performance |
| Processing credit purchases | Email, Stripe transaction ID | Contract performance |
| Sending transactional emails (receipts, account notices) | Contract performance | |
| Platform security and fraud prevention | IP address, usage patterns | Legitimate interest |
| Improving the service | Aggregated, anonymised usage metrics | Legitimate interest |
We do not use your data for automated decision-making, profiling, or targeted advertising.
We share data only with the following trusted third-party providers, strictly necessary to operate the service:
| Provider | Purpose | Location |
|---|---|---|
| Xano | Backend database: accounts, credits, usage | USA (SCCs apply) |
| Stripe | Payment processing | USA / EU (SCCs apply) |
| Netlify | Website hosting and CDN | USA / EU (SCCs apply) |
We do not sell, rent, or trade your personal data to any third party for their own commercial purposes.
swissCFO uses no third-party tracking cookies and no advertising pixels. We use:
No consent banner is required as we do not use non-essential cookies.
Under the Swiss nDSG (and GDPR where applicable), you have the following rights:
To exercise any of these rights, email us at contact@swisscfo.ch. We will respond within 30 days.
You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.
We implement technical and organisational measures to protect your data, including:
No method of transmission over the Internet is 100% secure. In the event of a data breach affecting your rights, we will notify you and the FDPIC as required by the nDSG.
The Service is intended for business use by adults. We do not knowingly collect personal data from individuals under 18 years of age.
We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance.
For any privacy-related questions or to exercise your rights:
contact@swisscfo.ch