Privacy policy
Snapflat processes only the data needed to operate, secure and provide the service, in accordance with the Swiss Federal Act on Data Protection (FADP).
Last updated: 7 October 2026.
Controller
For account, billing and website data, the controller is the operator identified in the legal notice. For report data (tenants, landlords, photos, signatures), the controller is the customer who produces the report; the operator processes it on the customer’s behalf as processor.
Data processed
Account data (name, email, language, role), organisation contact details, report content (address and description of the dwelling, remarks, photos, meter readings, keys), parties (name, email), signatures (image, date and time, device, IP address, fingerprint of the signed content), subscription data, messages sent through the contact form, security logs and technical information.
Purposes
Authenticating users, producing, signing, storing and sending reports, proving their integrity, managing plans and billing, answering requests, securing the platform and preventing misuse.
Processors and hosting
Hosting and backups: Infomaniak, in Switzerland. Payment: Stripe (Stripe Payments Europe Ltd, Ireland), which receives the data needed for payment and processes card data under its own responsibility; Snapflat never sees it. Email: the operator’s email delivery provider. Nexikos link: encrypted, signed exchanges limited to the properties, leases, tenants and rights needed. Photos are re-encoded and their metadata (EXIF, location) removed.
Retention
Data is kept for as long as the account exists and the customer does not delete it, then for the applicable legal periods (in particular accounting periods for billing). Unconfirmed sign-ups and reset links expire automatically.
Security
Encrypted connections, hashed passwords (Argon2id), encrypted secrets (AES-256-GCM), access control by organisation, role and mandate, blocking of abusive login attempts, logging and backups.
Cookies
Snapflat only uses a functional session cookie (login, language, protection against request forgery). No advertising cookies or third-party analytics are used.
Your rights
Under the FADP you may request access to your data, its correction, deletion or restriction of processing, and the handover of your data. Tenants send requests about a report to the customer (property manager or landlord) who produced it. Requests may be sent to the operator’s contact details below.
Operator
The operator’s complete details must be entered in the Snapflat Super console before production use.