1. Introduction
At SwissOps Ltd, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use SwissTracker ("the Service"). By using SwissTracker, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you register for SwissTracker, we collect:
- Name
- Email address
- Password (encrypted and hashed)
- Account preferences and settings
2.2 Financial Data
You voluntarily provide financial information including:
- Bank account details and balances
- Transaction records
- Investment portfolio information
- Asset holdings and valuations
- Financial documents (stored encrypted)
2.3 Usage Data
We automatically collect:
- IP address
- Browser type and version
- Pages visited and time spent
- Device information
- Access times and dates
3. How We Use Your Information
We use collected information for the following purposes:
- Service Provision: To provide, operate, and maintain SwissTracker's features
- Account Management: To manage your account and provide customer support
- Communication: To send you updates, security alerts, and support messages
- Improvement: To understand usage patterns and improve our Service
- Security: To detect, prevent, and address security issues and fraud
- Legal Compliance: To comply with legal obligations and enforce our Terms of Service
4. Data Security
We implement robust security measures to protect your data:
Security Measures:
- Document Encryption: AES-256-CBC encryption for all uploaded documents
- IBAN Masking: Automatic masking of IBANs in server logs for GDPR compliance
- Secure Transmission: HTTPS/TLS encryption for data in transit
- Password Security: Bcrypt hashing for password storage
- Two-Factor Authentication: Optional 2FA for enhanced account security
- Session Management: Secure session handling with automatic timeouts
- Access Controls: Strict user data isolation and authorization checks
Note: While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5. Data Sharing and Disclosure
We do NOT sell your personal or financial data to third parties.
We may share your information only in the following circumstances:
- With Your Consent: When you explicitly authorize us to share information
- Service Providers: With third-party service providers who assist in operating our Service (e.g., hosting, email delivery)
- Legal Requirements: When required by law, court order, or government regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
- Protection of Rights: To protect the rights, property, or safety of SwissOps Ltd, our users, or the public
6. Your Data Rights (GDPR & Swiss DPA)
Under GDPR and Swiss Data Protection Act, you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Data Portability: Export your data in a machine-readable format (we provide encrypted export functionality)
- Right to Restriction: Restrict processing of your data
- Right to Object: Object to processing of your data
- Right to Withdraw Consent: Withdraw consent at any time
To exercise these rights, please contact us at contact@swisstracker.ch
7. Data Retention
Active Accounts: We retain your data as long as your account is active or as needed to provide you services.
Account Deletion: Upon account deletion request, we will delete your data within 30 days, except where retention is required by law.
Backup Retention: Deleted data may persist in backups for up to 90 days before permanent deletion.
8. Cookies and Tracking
We use cookies and similar tracking technologies to:
- Maintain your session and keep you logged in
- Remember your preferences and settings
- Understand how you use our Service
- Improve user experience and Service functionality
You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.
9. Third-Party Services
SwissTracker may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
10. Children's Privacy
SwissTracker is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Data Storage and International Transfers
Your data is processed and stored on servers located in Germany. Germany is part of the European Economic Area (EEA) and provides adequate data protection under GDPR. If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
12. Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance.
13. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact:
SwissOps Ltd
Address:
Sur-la-Croix 147
1020 Renens
Switzerland
Email: contact@swisstracker.ch
Website: https://swisstracker.ch
Company Website: https://swissops.ch
Data Protection Officer:
SwissOps Ltd
14. Supervisory Authority
If you have concerns about our data processing practices, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.
By using SwissTracker, you acknowledge that you have read and understood this Privacy Policy.