Privacy policy

Controller

For account, billing and website data, the controller is the operator identified in the legal notice. For report data (tenants, landlords, photos, signatures), the controller is the customer who produces the report; the operator processes it on the customer’s behalf as processor.

Data processed

Account data (name, email, language, role), organisation contact details, report content (address and description of the dwelling, remarks, photos, meter readings, keys), parties (name, email), signatures (image, date and time, device, IP address, fingerprint of the signed content), subscription data, messages sent through the contact form, security logs and technical information.

Purposes

Authenticating users, producing, signing, storing and sending reports, proving their integrity, managing plans and billing, answering requests, securing the platform and preventing misuse.

Processors and hosting

Hosting and backups: Infomaniak, in Switzerland. Payment: Stripe (Stripe Payments Europe Ltd, Ireland), which receives the data needed for payment and processes card data under its own responsibility; Snapflat never sees it. Email: the operator’s email delivery provider. Nexikos link: encrypted, signed exchanges limited to the properties, leases, tenants and rights needed. Photos are re-encoded and their metadata (EXIF, location) removed.

Retention

Data is kept for as long as the account exists and the customer does not delete it, then for the applicable legal periods (in particular accounting periods for billing). Unconfirmed sign-ups and reset links expire automatically. Website backups are kept on a rolling basis: at least the latest 24 hourly copies and daily backups for at least 15 days; deleted data disappears from them at the end of this rotation.

Security

Encrypted connections, hashed passwords (Argon2id), encrypted secrets (AES-256-GCM), access control by organisation, role and mandate, blocking of abusive login attempts, logging and backups. The entire website is backed up every hour and every day; data entered since the last backup (up to one hour of activity) may be lost after an incident (article 9 of the terms).

Operator access

For support, security and legal compliance, the operator may view customer data through a dedicated administration account (“superpower”), read-only by default. Every access is logged (date, organisation, screen viewed, masked IP address) in a log that cannot be deleted from the application; the account can be deactivated at any time (Swiss FADP, art. 8: data security; see article 14 of the terms and conditions).

Cookies

Snapflat only uses a functional session cookie (login, language, protection against request forgery). No advertising cookies or third-party analytics are used.

Your rights

Under the FADP you may request access to your data, its correction, deletion or restriction of processing, and the handover of your data. Tenants send requests about a report to the customer (property manager or landlord) who produced it. Requests may be sent to the operator’s contact details below.

Operator