Download →
bilanzo.ch

Privacy Policy

Last updated: 31 October 2026

This privacy policy explains how we process personal data on bilanzo.ch. It is governed by the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the European General Data Protection Regulation (GDPR).

1. Controller

Mediaquotes Jones Schibli
Blegistrasse 11A
6340 Baar
Switzerland
UID/MWST: CHE-143.058.451 MWST
E-mail: [email protected]

Bilanzo is a brand of the company named above. Further details are available in the legal notice. As we have no establishment in the EU, no representative under Art. 27 GDPR has been appointed.

2. Data we process

2.1 Server log files

When you access the website we automatically record your IP address, date and time, the URL requested, the referrer and browser and operating system details. Purpose: operation, security and error analysis. Basis: our overriding legitimate interest in secure operation (Art. 31 para. 1 revFADP, Art. 6 para. 1 lit. f GDPR). Retention: normally 14 days, security logs up to 30 days.

2.2 User account and licences

To operate the customer account, provide downloads and manage licence keys we process your name, e-mail address, company details, password hash, licence and activation data and download logs. Purpose and basis: performance of the contract (Art. 31 para. 2 lit. a revFADP, Art. 6 para. 1 lit. b GDPR).

2.3 Orders and payments

When you place an order we process billing and contact details, the services ordered, subscription status and payment status. Card details are collected and processed exclusively by the payment service provider; we never receive full card numbers. Retention: ten years under Swiss commercial and tax law (Art. 958f CO).

2.4 Contact, support and tickets

We process enquiries submitted via forms, e-mail or the support portal in order to answer and document them. This involves your name, e-mail address, the content of the enquiry and technical details. Retention: up to two years after the matter is closed.

2.5 Support chat

A support chat is available on selected pages. It is not an AI assistant and does not answer anything by itself. Your input is recorded as a support request and created as a ticket in our support system (Atlassian Jira Service Management, see section 4), where a person on our team reads and answers it. No transmission to an AI provider takes place. We process your name, your e-mail address and the content of your request. Purpose and basis: handling your request, overriding legitimate interest in operating support (Art. 31 para. 1 revFADP). Retention as in section 2.4. Please do not enter sensitive personal data or client data into the chat.

2.6 E-mails and product information

We send transactional e-mails (order confirmations, licence and security notices, support replies). We send informational or promotional e-mails only within an existing business relationship or with your consent. You may object to receiving such messages at any time at no cost other than transmission costs.

3. Cookies and consent

We use strictly necessary cookies: for the session (__Host-sess), the shopping cart (woocommerce_*, wp_woocommerce_session_*), the language setting (pll_language, 365 days), Cloudflare’s security check (cf_clearance, 365 days) and storing your consent (cmplz_*, 365 days). Only with your explicit consent do we also set cookies for statistics (Google Analytics 4: _ga to distinguish visitors and _ga_JZNRFVFMQM for the session state, up to 2 years each, measured in Chrome at 400 days) and for marketing (WooCommerce order attribution: sbjs_*, at most until the end of the browser session, to see through which channel an order came about). We currently set no cookies in the preferences category. The cookie policy lists every cookie, its purpose and its storage period. You may withdraw your consent at any time with effect for the future:

4. Service providers and processors

We use the following providers. Data processing agreements are in place with all processors; Payrexx and Google are controllers in their own right for payment processing. Transfers abroad are based on the list of countries with adequate data protection (Annex 1 to the Swiss Data Protection Ordinance), the Swiss-U.S. Data Privacy Framework or the EU standard contractual clauses with the adaptations for Switzerland and supplementary safeguards (Art. 16 revFADP).

  • MediaVault (mediavault.ch), Switzerland: our own web hosting and agentic hosting offering, running on our own server in Gossau SG, Switzerland. Operation of the website, databases and backups.
  • Cloudflare, Inc. (USA / EU): content delivery network, DNS and web application firewall in front of the website, plus object storage (R2, storage region Western Europe) for delivering software downloads. Processes IP addresses and connection data. A data processing agreement is in place with Cloudflare (Cloudflare Data Processing Addendum); in addition to the revFADP, the GDPR applies to this processing. Transfer basis: Swiss-U.S. Data Privacy Framework and EU standard contractual clauses.
  • Hostpoint AG, Switzerland: delivery of our e-mails via its SMTP service.
  • Provider of remote support software, Germany: remote assistance on screen, exclusively at your express invitation. A session is established only if you start the program yourself, give us your number and confirm the request. You can end the session at any time. Without this step there is no remote access.
  • Payrexx AG, Thun, Switzerland: processing of card and other payments. Payrexx receives the data required for the payment and is a controller in its own right for that processing.
  • Google Ireland Limited, Dublin, Ireland, and Google LLC, USA (Google Pay): on the cart and checkout pages a script from Google (pay.google.com) loads to check whether your device supports Google Pay, even if you do not choose Google Pay. Google receives your IP address and technical details about your browser and device. If you pay with Google Pay, Google processes the payment via your Google account together with Payrexx and is a controller in its own right for that processing. Data may be transferred to the USA.
  • Google Ireland Ltd. / Google LLC (Google Analytics 4): audience measurement with IP anonymisation. Loaded only after you consent to the statistics category. Withdrawal at any time via section 3.
  • Atlassian Pty Ltd, Sydney, Australia (Jira Service Management): handling and documentation of support requests, including requests from the support chat under section 2.5. Your name, your e-mail address and the content of your request are transmitted. The data is held in Atlassian data centres at Amazon Web Services; Atlassian also processes it in Australia and the USA and engages further sub-processors. Transfer basis: EU standard contractual clauses with the adaptations for Switzerland and, for Atlassian’s US entities, the Data Privacy Framework (Atlassian Data Processing Addendum). In addition to the revFADP, the GDPR applies to this processing.
  • bexio AG, Rapperswil, Switzerland: only if you actively connect Bilanzo to your bexio account. The connection uses OAuth; we store only the access tokens, never your bexio password.
  • Wordfence (Defiant, Inc., USA): protection against attacks and abuse. Processes IP addresses and access patterns.
  • cdnjs (Cloudflare): delivery of individual programming libraries used to render the website. Your IP address is transmitted to Cloudflare in the process.
  • Complianz: consent management on our own server. Your choice is stored in cookies in your browser (cmplz_*, 365 days) and logged with an identifier on our server as proof of your consent. Nothing is passed to third parties.

5. Data inside the Bilanzo software

The Bilanzo application is normally installed and operated on your own infrastructure. If you book temporary cloud operation on a MediaVault instance via mediavault.ch, Bilanzo runs on a rented graphics card (GPU). We obtain the computing power through the marketplace of Vast.ai Inc., Los Angeles, USA; the graphics cards are hosted by data centre operators in the countries our broker allows: EU and EEA states, Switzerland, United Kingdom, Canada, Argentina, Israel, New Zealand, Uruguay, Andorra, Guernsey, Isle of Man, Jersey, Faroe Islands, Japan and South Korea. The receipts and data you have processed in this operation are processed there. In addition to the revFADP, the GDPR applies to this processing. Transfers are based on the list of countries with adequate data protection (Annex 1 to the Data Protection Ordinance); for the USA, Japan and South Korea, which are not listed there or only for certified companies, Vast.ai states that it relies on the EU standard contractual clauses. When the job is completed or the booking ends, the instance is destroyed at the provider. Accounting documents and client data you process in the application are not stored on this website. Any transmissions the application makes to third parties are governed by the product documentation and the data processing agreement for the software. This privacy policy covers the bilanzo.ch website and the customer account only.

6. Disclosure to third parties

We disclose data only to the processors listed in section 4, to authorities where legally required, and to our fiduciary and auditing bodies in the context of statutory bookkeeping duties. We do not sell personal data.

7. Data security

We apply appropriate technical and organisational measures: end-to-end TLS encryption, a web application firewall, least-privilege access control, two-factor authentication for administrative access and regular encrypted backups.

8. Your rights

Within the limits of applicable law you have the right to access, rectification, erasure and restriction of processing, the right to receive or transfer your data, and the right to withdraw consent and to object to processing at any time. Please send your request to [email protected]. We may request additional details in order to verify your identity.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. Individuals in the EU may contact their competent supervisory authority.

9. No automated individual decision-making

No automated individual decision-making within the meaning of Art. 21 revFADP or Art. 22 GDPR takes place on this website.

10. Changes

We may amend this privacy policy at any time. The version published on this page applies.

The German version is authoritative.

Privacy & security

Your data belongs to you.
Not to us. Not to the cloud.

01
Your accounting does not come to us
Receipt recognition and booking suggestions run on your own device, and your bookings, receipts and client data never come to us. We hold no copy of your accounting and cannot request one. Only these connections leave your device: the licence check and the update query to us, support requests you send yourself, the official daily exchange rates and legal sources from estv.admin.ch, bazg.admin.ch and fedlex.admin.ch, and the services you connect yourself, such as bexio, ePost, GetMyInvoices or Amnis. Data from the services you connect yourself goes to your own account with that provider and never through us. What the licence check transmits is set out in the tile on the device-bound licence: the licence key, two hash values of your device and three plain counts, never bookings or receipts. You decide whether and which connection to set up, and you can disconnect at any time.
02
Local AI model
Receipt recognition and posting suggestions are computed on your own machine. Your corrections improve the suggestions locally, inside your installation. No receipt and no correction is transmitted to us for training.
03
Encrypted key storage
Credentials for bexio and ePost as well as the model weights are held in a local vault, encrypted with AES-256-GCM and a key bound to this specific machine. On any other computer the vault cannot be opened.
04
Device-bound licence
Your licence key is bound to a device fingerprint and confirmed every 15 minutes over a signed check connection to our own licence server. What is transmitted is the licence key, two hash values of your device and three counters: how many receipts have been processed, how many clients are managed and how many bank reconciliations have been carried out. These are plain counts. Never transmitted: bookings, receipts, client names or amounts.
05
Remote assistance only at your invitation
Bilanzo has no remote access to your installation. If you would like help on screen, we use a remote maintenance tool that only starts once you have explicitly approved it. You install it, give us your number and confirm every single request. You end the session at any time.
06
Signed updates
Every update ships with an Ed25519-signed manifest and a SHA-256 checksum per file. Bilanzo rejects any update whose signature does not match the embedded key. The installer itself is not yet Authenticode-signed; Windows therefore shows a SmartScreen warning on first launch.
Bilanzo is a bookkeeping tool, not a fiduciary and not an auditor.
Bilanzo supports you in keeping your books, saves time and provides AI insights, but it does not replace fiduciary or audit responsibility. Postings and financial statements must be reviewed and signed off by you or your fiduciary.