Privacy policy

As of 7 October 2026

This privacy policy describes how Saldira AG processes personal data when you visit saldira.ch, sign up for news, open a Saldira account or use Saldira. It follows the Swiss Federal Act on Data Protection (FADP). This is a translation; if it differs from the German version, the German version prevails.

1. Controller

For any data protection matter, contact us at this address.

2. Visiting the website

When you open saldira.ch, our web server automatically records: IP address, date and time of the request, the page requested, the previously visited page (referrer), browser and operating system (user agent), status code and amount of data transferred.

We process this information to run and secure the website, analyse errors and prevent abuse. It is deleted after 2 months.

The website uses no cookies and no analytics or tracking services. It embeds no third-party content; fonts are also served from our own server.

3. News by e-mail

When you sign up for news on the home page ("Keep me posted"), we store your e-mail address together with the time, IP address and user agent of the sign-up. The additional details serve as proof of your consent.

We use your address only to send you news about Saldira by e-mail. You can unsubscribe at any time, through the link in every e-mail or by writing to hello@saldira.ch. We keep your details until you unsubscribe.

We send these e-mails through Amazon Simple Email Service (see section 7).

4. Opening a Saldira account

To open an account, we collect your first name, last name, business e-mail address, company name, mobile number and preferred language. We only check the invitation code; we do not store it.

To confirm your mobile number, we send you a code by SMS through Twilio, which receives your mobile number for this purpose. Once the number is confirmed, we pass your details to the Saldira application, which creates your account and your login identity at ZITADEL and sends you an activation link by e-mail. To prevent abuse (limiting the number of requests), we also pass your IP address to the Saldira application.

We keep a technical log of the sign-up process containing your IP address, a shortened mobile number (only the first and last three characters), the domain of your e-mail address, and the time and outcome of each step. We do not log your full e-mail address or the SMS code. The log is used to analyse errors and prevent abuse. It is deleted after 2 months.

5. Using Saldira

5.1 User account

For your user account we process your name, e-mail address, mobile number, company and language, as well as the login and security data required to sign in with a second factor. Saldira also records which user entered, changed or approved which entry. This information is part of the accounting records and is kept with them.

5.2 Data in your books

Your books often contain personal data of third parties, such as customers, suppliers or employees. Your company is the controller for this data. Saldira AG processes it as a processor (Art. 9 FADP) on your behalf and only to provide Saldira to you.

5.3 AI features

When you have Saldira read scanned bills or receipts, or ask the agent in the application a question, we send the content needed for this, for example the content of the document or the relevant accounting data, to Amazon Bedrock (AWS) in Europe, where it is processed with AI models from Anthropic to produce the proposal or the answer.

6. Retention

After an account ends, you can export your data for 30 days. The account is then closed; the accounting data remains archived for the period stated above.

7. Recipients and service providers

We pass personal data only to the following service providers, and only as far as they need it for their task. Beyond that, we disclose personal data only where the law requires us to.

8. Disclosure abroad

The providers in Europe process personal data in countries whose data protection the Swiss Federal Council recognises as adequate.

9. Data security

We protect personal data with appropriate technical and organisational measures. The connection to saldira.ch is encrypted (HTTPS). We store details from the forms outside the publicly reachable part of the web server, and access is limited to the people who need it for their work.

10. Your rights

You can request information about your personal data, have incorrect data corrected or data deleted, object to processing, request that your data be handed over or transferred, and withdraw your consent at any time. Write to hello@saldira.ch. We may ask you to prove your identity. Statutory retention obligations may prevent deletion.

You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.

11. Changes

We may update this privacy policy. The version published on this page, with the date shown above, applies.