Privacy policy

1. Who we are

Bilto is published by Shams & Cie SNC (CHE-201.626.522), whose full details appear in the legal notice. This policy describes what data we collect when you use Bilto (web and mobile application), why, and what your rights are.

2. What data we collect

• Account: email address, password (hashed, never stored in plain text).
• Company profile: business name, address, logo, preferences (currency, language, VAT rates, default quote texts).
• Data you enter: your clients (name, address, contact, notes), your quotes, your catalogue of services, signatures and attached images.
• AI-assisted dictation (optional feature, subject to your prior consent in the app): the audio recording or dictated text, together with your clients' NAMES and your service catalogue with its prices — needed so the resulting quote picks the right client and your own rates. All of it is sent to Infomaniak AI Services (Switzerland) for transcription and structuring into a quote, and is not used to train the model.
• Sign-in via Google or Apple (if you choose this method): name and email address provided by those services.

3. Why we use this data

• Performance of the contract: providing the service (creating quotes, managing clients, etc.).
• Legitimate interest: security, fraud prevention, improving the service.
• Consent: only for features you activate voluntarily (AI dictation, social sign-in).

4. Where your data is hosted

The entire infrastructure (database, authentication, files) is self-hosted on an Infomaniak server located in Switzerland. AI dictation is processed by Infomaniak AI Services, also in Switzerland. Your data leaves Swiss territory only if you use Google or Apple sign-in, in which case those providers' privacy terms apply to the exchange of credentials.

5. Who has access

• You, and the people in your company who have an account.
• Us, for maintenance, support and security of the service.
• Infomaniak, as hosting provider (processor).
• Google or Apple, only if you choose those sign-in methods.

We do not sell or share your data for advertising purposes.

6. How long we keep it

Your data is kept for as long as your account is active. Security backups are kept for 14 days. You can delete your account and all your data at any time, on your own, from the Profile page of the application (“Delete my account” section) — deletion is immediate and final.

7. Your rights

Under the Swiss Federal Act on Data Protection (FADP), you have the right to access, rectify, delete and object to the processing of your data. To exercise these rights, contact us below. You may also contact the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.

8. Cookies

Bilto uses only a cookie strictly necessary for the operation of the service (keeping your sign-in session). No advertising or analytics cookies are used.

9. Changes

This policy may be updated; the date at the top of the page indicates the last change.

10. Contact

For any question or request regarding your data: contact@bilto.ch.