Legal
Privacy Policy
Last updated 24 October 2026 · DemyTix, an Appogee product
1. Data controller and contact
This privacy policy describes how DemyTix (hereinafter DemyTix or we) collects, uses and protects the personal data of users of the DemyTix service (hereinafter the Service). DemyTix is a product published by Appogée Sàrl (a limited liability company under Swiss law), whose registered office is located at Chemin de Paudex 5, 1132 Lully, Switzerland, which acts as data controller within the meaning of this policy. Appogée Sàrl acts as data controller for the data relating to account management and to the contractual relationship, and as data processor for the data that the Client processes by means of the Service in the course of its business (for example the supporting documents of its own clients). For the latter, the Client remains the data controller and DemyTix makes available to it, on request, a Data Processing Agreement compliant with Article 28 of the GDPR and Article 9 of the nFADP.
The Service is aimed primarily at a professional clientele in Switzerland and processes data in accordance with the Swiss Federal Act on Data Protection (FADP, also referred to as nFADP or LPD) and, where it applies, the European Union's General Data Protection Regulation (GDPR) for persons located in the European Union.
For any question relating to this policy or to the exercise of your rights, you may contact the data controller, Appogée Sàrl, by post at the address Chemin de Paudex 5, 1132 Lully, Switzerland, or by email at the address contact@demytix.com, as well as from the Contact page of the site.
2. Data collected
We collect the account data that you provide to us upon registration and use of the Service: last name and first name, email address, name of the company or workspace, as well as the subscription and billing information necessary to process payments. The payment itself is processed by Appogee Pay or, for a subscription taken out in the iOS application, by Apple (Article 6), and DemyTix does not receive the complete data of your means of payment.
We also process the supporting documents that you upload (receipts, tickets, invoices) as well as the data extracted therefrom (amount, date, supplier, VAT, category and other accounting fields). This content belongs to you and is processed on your behalf within the framework of your workspaces.
When you import bank statements (CAMT files), the Service processes the data of the account concerned (IBAN, currency, the name of the account or of its holder as shown on the statement, the statement period and balances, and the name of the imported file) as well as its transactions: booking and value dates, amount and currency (including, where applicable, the original amount, the exchange rate and the charges), the name and account (IBAN) of the counterparty, the remittance information (payment purpose), the references (structured payment reference, end-to-end reference and the reference assigned by the bank), the transaction type code and, for a card payment, the last four digits of the card. This data is processed on your behalf within the framework of your workspaces, under the conditions described in Article 5.
When you write to us via the contact form, we collect the information you enter there (name, email address, company where applicable and the content of your message) and forward it by email to our team so that we can reply to you.
We also keep a security log: sign-ins and security events linked to your account (for example successful or failed sign-ins, session renewals and two-factor authentication events) are recorded in it with their date and time and, where the application declares them, the application used and its version. This log serves to ensure the security of the Service and to detect attempts at unauthorized access; its retention period is set out in Article 8.
When the Service encounters an error, we collect technical diagnostics: the error message and its technical trace, the page concerned, the application version, the browser and device type, and the date and time. A reduced sample of performance measurements is collected in the same way. These diagnostics include no recording of your screen or of your session; they are processed by Sentry (Functional Software Inc.) for the sole purposes of correcting defects and ensuring the security of the Service (Articles 5, 6 and 11).
3. Purposes and legal bases
We process the account data and the uploaded content in order to provide the Service (digitization, extraction and synchronization to Bexio), to manage your subscription, your access and your workspaces, and to provide support. The legal basis for this processing is the performance of the contract between us, as well as compliance with our legal obligations, in particular accounting and tax obligations.
We process certain data on the basis of our legitimate interest, in particular to ensure the security of the Service, to prevent fraud and abuse and to improve our features. This interest is balanced against your rights and freedoms, and you may object to processing based on this ground under the conditions of Article 9.
Where the law requires it, certain processing operations are based on your consent, which you may withdraw at any time without such withdrawal affecting the lawfulness of prior processing. The processing of contact-form data is based on your voluntary decision to contact us and on our legitimate interest in responding to it.
4. Extraction by artificial intelligence (Claude, Anthropic)
In order to automatically extract information from a supporting document, the image of that document is transmitted to the Claude artificial intelligence model, provided by the company Anthropic, via its application programming interface (API). This processing is strictly limited to the extraction of the relevant fields (amount, date, supplier, VAT and other accounting data) and constitutes the only case in which your supporting documents leave DemyTix's Swiss infrastructure; the other data that leaves it (technical diagnostics, address search, measurement of advertising campaigns) is described in Articles 5 to 7. The bank statements you import and the transactions they contain are never transmitted to Anthropic (Article 5). This extraction does not constitute an automated individual decision producing legal effects within the meaning of Article 22 of the GDPR or Article 21 of the nFADP: it assists data entry, and the Client checks and validates the data before its use.
Under the terms applicable to Anthropic's API, the data transmitted by this means is not used to train Anthropic's models and is deleted by Anthropic within thirty (30) days of receipt; only a request flagged by Anthropic's automated abuse detection may be retained longer. Anthropic acts in this respect as DemyTix's data processor for this extraction operation.
We are keen to be transparent about the limits of our guarantee: the protection we offer you stops where Anthropic's stops. DemyTix cannot be held liable for any improper use of the data by Anthropic, nor for any data breach that would result from Anthropic's fault. We select Anthropic precisely because its commitments regarding the API (no training and no retention) are suited to the processing of professional data.
5. Hosting in Switzerland and absence of sharing
All the data of the Service (accounts, supporting documents, extracted data, contact data) is hosted in Switzerland, with the Swiss host Infomaniak (https://www.infomaniak.com). DemyTix has chosen hosting in Switzerland in order to retain control of the infrastructure and to limit to the strict minimum the intermediaries having access to the data. The only data processed outside Switzerland is the images sent for extraction (Article 4), the technical diagnostics (error and crash reports), processed in the European Union, which Switzerland recognizes as providing an adequate level of protection, and the data of address search and of the measurement of advertising campaigns, sent to Google (Articles 6 and 7).
We share no data with third parties for commercial or profiling purposes, and we do not sell your data or transfer it to data brokers. The only information communicated for advertising purposes is described in Article 7: when your visit came from a Google ad, the identifier of that click, without your name or your email address.
The bank data from the statements you import (accounts and transactions, Article 2) is stored and processed only on DemyTix's Swiss infrastructure, with the Swiss host Infomaniak. It is never transmitted to Anthropic or to any other provider outside Switzerland. It is used only to reconcile your transactions with your supporting documents and, at your request, to record the corresponding entries in your own Bexio account (Article 6), as well as for the technical monitoring of the proper functioning of imports. It is never used for profiling, marketing or resale purposes, nor to train artificial intelligence models. Error diagnostics from our servers are filtered to mask bank account numbers (IBANs) appearing in error messages and in the technical events that precede them, before they leave the infrastructure.
6. Data sharing and processors
We use a limited number of processors, selected for their security and confidentiality guarantees and contractually bound to process the data only on our instructions and for the purposes described in this policy: the Swiss host Infomaniak (https://www.infomaniak.com) for hosting the infrastructure and the data in Switzerland, Anthropic for extraction by artificial intelligence (Article 4), and Sentry (Functional Software Inc.) for error and crash diagnostics (Article 5).
Subscriptions taken out on the website are paid through Appogee Pay, our payment platform, provided under a white label by the Swiss payment provider Payrexx AG (Thun). You enter your payment details directly on the Appogee Pay payment page: DemyTix receives the result of the payment, never the complete data of your means of payment. A subscription taken out in the iOS application is sold and collected by Apple through the App Store, under Apple's terms (Article 12 of the General Terms and Conditions of Sale).
To help you enter a supplier's address, address search uses Google Maps Platform, from Google. The text searched in the address field, the language of the interface and the address chosen are sent to Google, together with the technical data that any connection carries (IP address, browser or device type). On the website, Google's script is loaded only when you open the form for adding a supplier, and a map of the chosen address is displayed from Google. Google processes this data as an independent controller, under its own privacy policy (https://policies.google.com/privacy).
When your visit came from a Google ad, the identifier of that click is communicated to Google Ads under the conditions described in Article 7.
Synchronization to Bexio takes place only at your request and to your own Bexio account: the data transmitted to Bexio is transmitted under your responsibility and according to Bexio's terms.
We may be required to disclose data where the law obliges us to do so or in response to a valid request from a competent authority, within the strict limits of that obligation.
8. Retention periods
The account data and the content that you upload are retained for as long as your account is active. The length of time during which your data history remains viewable depends on your subscription plan: entry-level plans offer a limited history (for example three months), while higher plans offer an extended history or unlimited retention. The applicable window is indicated on the subscription page.
In the event of cancellation of a paid subscription, your account reverts to the free plan and your data remains accessible within the limits of that plan; it is not automatically deleted as a result of the cancellation. You may at any time export your data or delete it from your space, and permanent deletion occurs at your request or upon the closure of your account. Appogée Sàrl nonetheless remains obliged to retain the billing documents that have been sent to you for the statutory accounting retention period (ten years, Article 958f of the Code of Obligations); your supporting documents and the data extracted therefrom, which pertain to your own accounting, are not subject to this obligation on our part and are deleted at your request. Temporary technical backups are purged within a reasonable time.
Security log events (Article 2) remain linked to your account for twelve (12) months. After that period they are detached from it: their links to the user account, the company and the workspace are removed, as is any email address and any free-text failure reason in their details, and only the type of event, its date, the application and its version and technical details (for example the operation concerned or the number of attempts) remain, kept solely for aggregate statistics. When a workspace is deleted, or anonymized upon the deletion of its owner's account, its bank data is stripped of everything that designates a person or an account (counterparty names and IBANs, remittance information, payment and bank references, last four digits of cards, notes and labels entered, account IBANs and names, names of imported files), as is the link to the persons who imported the statements or processed the transactions; only figures and technical data remain, such as amounts, balances, dates, currencies, transaction types and statuses.
The data transmitted via the contact form is retained for a period not exceeding two (2) years after the processing of your request. We retain personal data only for as long as necessary for the purposes for which it was collected or for the legal obligations incumbent upon us.
9. Rights of data subjects
In accordance with the Swiss FADP and, where it applies, the GDPR, you have a right of access to your data, a right to rectify inaccurate data, a right of deletion (right to be forgotten), a right to the restriction of and objection to certain processing operations, as well as a right to the portability of your data in a structured and machine-readable format.
You may exercise these rights at any time from your space (export and account management) or by contacting us via the Contact page. We respond to your request within the time limits provided for by applicable law and may ask you to prove your identity in order to prevent any unauthorized access.
If you consider that the processing of your data is not compliant, you may refer the matter to the competent authority: in Switzerland, you may report the facts to the Federal Data Protection and Information Commissioner (FDPIC), your civil claims being otherwise exercised before the courts; in the European Union, you may lodge a complaint with the supervisory authority of your country of residence.
10. Data security
We implement appropriate technical and organizational measures to protect the data against loss, unauthorized access, alteration or disclosure. These measures include in particular the encryption of communications, access control, the logical separation of workspaces (multi-tenant) and regular backups.
No system, however, offers absolute security. In the event of a data breach likely to result in a high risk to your rights, we will inform you and notify the competent authority in accordance with the applicable legal obligations.
11. Transfers outside Switzerland and the EU
In principle, your data remains hosted in Switzerland. The transfers likely to occur outside Switzerland and the European Economic Area are the occasional and limited transfer of the images of supporting documents to Anthropic's infrastructure (Anthropic PBC, United States) for the purpose of extraction by artificial intelligence (Article 4), and the transmission to Google (Google LLC, United States) of the data of address search and of the measurement of advertising campaigns (Articles 6 and 7).
The transfer to Anthropic, to a country that does not in itself offer a level of protection recognized as adequate, is governed by appropriate safeguards, in particular the standard contractual clauses and the Data Processing Agreement applicable to the processing by Anthropic, in accordance with the FADP and the GDPR. We endeavour to limit these transfers to what is strictly necessary for the provision of the Service.
Google LLC is certified under the Swiss-U.S. Data Privacy Framework. Since 15 September 2024, Switzerland has recognized an adequate level of protection for U.S. companies so certified (Annex 1 of the Data Protection Ordinance), so the transmission to Google requires no additional safeguards.
The technical diagnostics described in Article 2 are also communicated to Sentry (Functional Software Inc.) and processed in the European Union, which forms part of the European Economic Area. This communication constitutes a disclosure of personal data abroad within the meaning of Article 16 FADP; it requires no additional safeguards, since Switzerland recognizes the States of the European Union as providing an adequate level of protection.
12. Updates to the policy
We may update this policy in order to reflect changes to the Service, to our practices or to the legal framework. The date of the last update appears at the top of the page.
In the event of a substantial change, we will inform you by an appropriate means (email or notification in the application) before it takes effect. We invite you to consult this page regularly.
13. Jurisdiction and compliance
This policy and the processing operations it describes are governed by Swiss law, in particular the FADP, and by the GDPR where the latter applies by reason of the location of the data subjects in the European Union.
Any dispute relating to data protection that cannot be resolved amicably falls within the jurisdiction of the courts of the Canton of Vaud, Switzerland, subject to the remedies available before the data protection authorities.