Privacy Policy

Controller

Benjamin Thomet, Walkeweg 34, 4053 Basel, Switzerland. Contact for data protection matters:info@milq.ch.

What data we process

Account data

Name, email address, and an encrypted password hash. This data is necessary to maintain your account and to authenticate you.

Bookkeeping data

All information you enter yourself: company data, entries, receipts, customers, and invoices. This data belongs to you. We do not analyse it, do not pass it on, and do not use it for advertising.

Technical data

When you visit the website, IP address, timestamp, page accessed, and browser identification are recorded server-side. These logs are used for operation and security and are deleted after no more than 30 days.

No trackers

MILQ uses no advertising or analytics cookies and embeds no third-party services on the site. There is therefore also no cookie banner. Only technically necessary cookies are set for your login session.

Data processors

• Hosting: Infomaniak Network SA, Geneva, Switzerland. Server location Switzerland. Storage of the database and receipts.
• Email delivery: Resend (Resend, Inc., USA), exclusively for verification and password emails. Name and email address are transmitted. As Resend is based in the USA, the transfer is based on standard contractual clauses and the Data Privacy Framework.
• Payment processing: Stripe. Credit card and payment data are processed exclusively by Stripe — we do not see or store them.

Retention period

Account data is stored for as long as your account exists. Bookkeeping data is subject to the statutory retention obligation of 10 years under Article 958f of the Swiss Code of Obligations — we are therefore also not permitted to delete it early as long as you have not expressly requested deletion and the period has expired.

Your rights

Under Swiss data protection law, you have the right to:

• Information about the data relating to you that we process
• Rectification of inaccurate data
• Deletion, provided no retention obligation prevents it
• Portability of your data in a common format (data portability)

A complete export as PDF, CSV, and receipt archive can be triggered by you at any time from your account — you do not need to ask us for this.

Security

All transmission is encrypted via HTTPS. Passwords are stored only as hashes. The database is continuously backed up in encrypted form. Changes to entries are logged, as required by the Swiss Ordinance on Commercial Bookkeeping.

Changes

This policy may be amended if processing changes. The version published on this page is authoritative.