Privacy notice
Draft under the revised Swiss Data Protection Act (FADP, in force since 1 September 2023).
Controller
Andrea Andreoni, Bärengasse 2, 8134 Adliswil, Switzerland, hallo@mahnly.ch. Mahnly is operated as a sole proprietorship.
What we process
Account: name, email, password as a scrypt hash, session cookie, language. Pro: recipients, amounts, due dates, letter language, reminder history, sender IBAN. Payments: Stripe customer id and plan status. We do not store card numbers. Generator: invoice content stays in the browser unless you voluntarily send an email for the list.
Purposes and bases
We process data to run the generator, the account, sending, and the plan (contract), to keep the list if you subscribe (consent), and to protect the service (overriding interest).
Processors
Vercel (hosting), Neon or Supabase (Postgres), Resend (email), Stripe (payments, including TWINT), ActiveCampaign (list «Mahnly Anmeldungen», list 4). Several providers are in the United States. We rely on their contracts, in particular standard contractual clauses, unless an adequate legal regime is established.
Retention and rights
Accounts and invoices remain while the account exists and afterwards for as long as retention duties run. You can ask for access, surrender, correction, and deletion. Complaints go to the FDPIC.
Cookies
We set an httpOnly session cookie and a cookie for the last chosen language. There is no advertising tracking.