Privacy policy

Leologic Sàrl, CP 225, 2740 Moutier, Switzerland, UID CHE-115.804.108, info@leologic.ch, operates Fiducio. Data is hosted in Switzerland (Infomaniak).

Roles For accounts and subscription billing, Leologic is the controller. For the firm’s client data (files, documents, messages), the firm is the controller and Leologic acts as processor (art. 9 nFADP and, where it applies, art. 28 GDPR).

Data processed Identity and access (name, username, email, hashed password, role), subscription billing data (via Stripe), security logs, client files, document lists, uploaded files, messages and notifications.

Purposes and bases Performance of the contract, service security, legal obligations (accounting, ten years for subscription records), legitimate interest in security and abuse prevention. No advertising, no profiling, no sale of data.

Cookies A session cookie is required to sign in. A theme cookie stores the display choice. No advertising cookies and no trackers.

Sub-processors Infomaniak (hosting and backups, Switzerland), Stripe (payment), the configured SMTP server (email), Cloudflare Turnstile if enabled (anti-bot). A new sub-processor is announced; a client who refuses it may cancel.

Retention Account data: for the contract, then a 14-day grace period, then deletion. Daily backups: 7 days. Subscription accounting records: 10 years. Security logs: limited period, then deletion.

Rights Access, rectification, erasure, restriction, objection, portability. In the app: Account → export my data, or request deletion. Contact: info@leologic.ch. Complaint: FDPIC (Switzerland) and, where applicable, your country’s data protection authority.

Privacy policy

Roles For accounts and subscription billing, Leologic is the controller. For the firm’s client data (files, documents, messages), the firm is the controller and Leologic acts as processor (art. 9 nFADP and, where it applies, art. 28 GDPR).

Data processed Identity and access (name, username, email, hashed password, role), subscription billing data (via Stripe), security logs, client files, document lists, uploaded files, messages and notifications.

Purposes and bases Performance of the contract, service security, legal obligations (accounting, ten years for subscription records), legitimate interest in security and abuse prevention. No advertising, no profiling, no sale of data.

Cookies A session cookie is required to sign in. A theme cookie stores the display choice. No advertising cookies and no trackers.

Sub-processors Infomaniak (hosting and backups, Switzerland), Stripe (payment), the configured SMTP server (email), Cloudflare Turnstile if enabled (anti-bot). A new sub-processor is announced; a client who refuses it may cancel.

Retention Account data: for the contract, then a 14-day grace period, then deletion. Daily backups: 7 days. Subscription accounting records: 10 years. Security logs: limited period, then deletion.

Rights Access, rectification, erasure, restriction, objection, portability. In the app: Account → export my data, or request deletion. Contact: info@leologic.ch. Complaint: FDPIC (Switzerland) and, where applicable, your country’s data protection authority.

Security Encrypted connections, hashed passwords, strict separation of firms, backups encrypted by default, logging of sensitive access.