Privacy policy

01The essentials, in plain words

Three things matter most, so we say them first.

• Your data is yours. The clients you enter, your agenda and your invoices belong to you — not to us.
• We process this data only to run the service for you. We never sell it, never rent it, and never use it for advertising.
• You can export everything at any time, in open formats — even without an active subscription.

02Who is responsible for what

When you use Vonto — Miguel Moor, sole proprietorship ("vonto"), you are the controller of your own clients' personal data — their names, addresses, appointments and amounts. You decide why and how that data is used.

vonto (Vonto — Miguel Moor, Avenue Victor-Ruffy 54, 1012 Lausanne) acts as your processor: we handle that data only on your instructions, to provide the service. Under the Swiss Federal Act on Data Protection (FADP), a data processing agreement (DPA) is available on request at contact@vonto.ch.

03What data we process

• Account data: your email address, name, password (stored only as a secure hash), language and settings.
• Business data: your IBAN, logo, address and VAT number, used to produce your documents.
• Data you enter: clients, sessions and appointments, rates and services, invoices and quotes, expenses and receipts, and documents you upload.
• Subscription data: handled through Stripe (see below). We never see or store your full card number.
• Assistant data: your conversations with the assistant and the voice notes you dictate.
• Technical logs: the basic records needed to run and secure the service, such as sign-in events and errors.

04Why we process it

We process your data only to provide and run the service: to create and send your invoices and quotes, keep your clients and agenda, read your receipts, answer through the assistant, take payment for your subscription, give you support, and keep everything secure. We do not profile you and we do not use your data for advertising.

05The assistant, receipt reading and dictation

Some features rely on an external AI gateway. When you chat with the assistant, scan a receipt or an invoice, or dictate a voice note, the relevant text, image or audio is sent to OpenRouter, which forwards it to the model provider selected for that task (for example Anthropic, Google or OpenAI) so it can produce the answer, the extraction or the transcript.

This data is sent only to produce that result. vonto does not use your data to train AI models, and does not send your data through the gateway for any other purpose.

How OpenRouter and the model providers retain request data is governed by their API terms.

06Admin and support access

In normal operation, vonto does not look at the content of your account. The admin panel shows aggregated usage statistics and, for each account, only the email, name, subscription status and a short activity summary — when you signed up, when you last used the service, and what kind of thing was created (for example "created an invoice"), never its content, its amounts or your clients' names. This activity log is kept for 12 months. Your real data is opened only when you ask us for help, and only to solve your problem.

07Hosting and sub-processors

Your data is hosted in Switzerland. To run the service we rely on a small number of carefully chosen sub-processors, listed below. Providers located in the United States are engaged under the Swiss–U.S. Data Privacy Framework and, where applicable, the European Commission's Standard Contractual Clauses, so your data keeps an adequate level of protection.

Web fonts are loaded when a page opens, which means the font provider receives the request, including the IP address, needed to deliver them.

08How long we keep your data, and deletion

We keep your data for as long as your account exists. You can export everything at any time — your documents as PDF and your records (clients, sessions, expenses, invoices and quotes) as CSV files — even without an active subscription.

When you ask us to delete your account, we delete your data within 30 days. Copies may remain in encrypted backups for a short, limited period before they expire.

Swiss law requires you to keep your own accounting documents for 10 years. That legal duty rests with you as the business owner, which is why the export stays available to you.

09Your rights

You have the right to access your data, to have it corrected, to receive it in a portable format, and to have it deleted. To exercise any of these, write to contact@vonto.ch.

Where vonto only acts as processor, your own clients exercise their rights directly with you, the controller of their data. We help you meet those requests.

10If you are bound by professional secrecy

vonto is built for administrative data — appointments, contact details and amounts. It is not a place for clinical notes, case files or other content covered by professional secrecy. If your profession is bound by such secrecy, keep protected content out of the free-text fields. A data processing agreement is available on request at contact@vonto.ch.

11How we protect your data

Each account is isolated at the database level, so one account can never read another's data. All traffic is encrypted in transit over HTTPS, data is encrypted at rest by our hosting provider, and backups are taken regularly. Passwords are never stored in clear text — only as a secure hash. No system is perfectly secure, but we work to keep the risk low.

12If something goes wrong

If a data breach affects your data, we will inform you without undue delay and describe what happened and what we are doing about it. As the controller of your clients' data, you decide whether and how to notify the Federal Data Protection and Information Commissioner and the people concerned; we give you the information you need to do so.

13Audience measurement

We measure how the landing pages are used so we can improve them. This measurement is first-party and cookieless: it sets no cookie and stores nothing at all on your device — no cookies, no local storage, no fingerprinting. It cannot recognise you across visits and is not linked to any account.

Each page load is given a random identifier that lives only in your browser's memory for that visit and is never written to your device.

We collect, in anonymous and aggregated form:

• how you arrived (the search engine, social network or website that referred you, and any campaign tags in the link);
• an approximate city and country, derived momentarily from your IP address by our host — the IP address itself is never stored;
• your device type and browser family (for example "mobile", "Chrome"), not a detailed fingerprint;
• which sections of the page you saw, how far you scrolled, and clicks on our own links and buttons — never anything you type;
• how long the page stayed open;
• the number of sign-ups per source, counted anonymously with nothing linking a sign-up to your identity.

Purpose: to understand what works and improve the site.

Legal basis: our legitimate interest in maintaining and improving the service (Art. 6(1)(f) GDPR; Art. 31 nFADP).

We keep this data for 13 months, then delete it.

We honour the Global Privacy Control and Do Not Track browser signals: when either is set, we measure nothing.

This data is never sold or shared, and it is hosted in Switzerland (Supabase).

14Cookies

The service uses no advertising, analytics or tracking cookies, and shows no cookie banner because none is needed. When you sign in to the application, a small number of strictly necessary cookies keep you signed in and remember your language; the public landing pages set no cookies at all. See "Audience measurement" for how we measure the site without cookies.

15Contact and applicable law

This policy is published by Vonto — Miguel Moor, sole proprietorship, Avenue Victor-Ruffy 54, 1012 Lausanne, Switzerland. For any question about your data, write to contact@vonto.ch.

This policy is governed by Swiss law.