Privacy Policy
Last updated: April 2026 · Governed by Swiss DSG / EU GDPR · Jurisdiction: Nidwalden, Switzerland
We built FlowRich for Swiss firms that care about data sovereignty. Your data stays in Switzerland, we never sell it, and you can request deletion at any time.
Contents
1. Who we are
FlowRich is a professional services automation platform operated from Switzerland. We are the data controller for personal data collected through this website and our platform.
Contact: legal@flowrich.ch
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, work email, company name, firm type | You, on signup |
| Usage data | Features used, agent activity logs, session duration | Automatically collected |
| Business data | Invoices, client records, project data, time entries | You, via the platform |
| Communication data | Support emails, feedback, demo requests | You, directly |
| Technical data | IP address, browser type, device type | Automatically collected |
We do not collect sensitive personal data (health, religion, political views) and do not knowingly collect data from individuals under 18.
3. How we use your data
- To provide and operate the FlowRich platform
- To personalise your experience and improve the service
- To send transactional emails (account confirmations, invoices, service updates)
- To respond to support requests and demo inquiries
- To comply with legal obligations under Swiss and EU law
- To analyse usage patterns and improve product quality (using anonymised data)
We do not use your data for advertising, and we never sell your data to third parties.
4. Legal basis
Under GDPR and Swiss DSG, we process your data on the following legal bases:
- Contract performance — to deliver the service you signed up for
- Legitimate interests — to improve the platform and communicate service updates
- Legal obligation — to comply with Swiss and EU law
- Consent — for marketing communications, where you have opted in
5. Data storage & residency
All customer data is stored in Switzerland. We do not transfer your data outside Switzerland or the EU/EEA without appropriate safeguards in place.
Our infrastructure is hosted with Swiss-based or EU-certified providers that meet the requirements of both Swiss DSG and GDPR.
6. Third-party services
We use a limited set of third-party services to operate the platform. Each is bound by appropriate data processing agreements:
| Service | Purpose | Location |
|---|---|---|
| Skribble | E-signature processing | Switzerland |
| Bexio / Xero / DATEV | PSA integration (read/write) | CH / EU |
| Email provider | Transactional email delivery | EU |
| Analytics tool | Anonymised usage analytics | EU |
We do not use Google Analytics, Facebook Pixel, or other advertising trackers.
7. Data retention
We retain your data for as long as your account is active or as needed to provide the service. After account closure:
- You may request a full data export within 30 days of cancellation
- Account and business data is deleted within 90 days of cancellation
- Anonymised usage data may be retained for product improvement purposes
- Legal and financial records are retained for 10 years as required by Swiss law
8. Your rights
Under Swiss DSG and GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to certain processing activities
- Receive your data in a portable format
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact us at legal@flowrich.ch. We will respond within 30 days.
9. Security
We implement industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of it.
11. Contact & complaints
For privacy-related questions or to exercise your rights, contact us at legal@flowrich.ch.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch, or with your local EU supervisory authority if you are based in the EU.
Contents