Justesse Justesse The accuracy of your numbers

Privacy policy

This English translation is provided for convenience only. The French version prevails.

Last updated: 6 August 2026

This policy describes how Justesse processes your personal data, in accordance with the revised Swiss Federal Act on Data Protection (FADP), in force since 1 September 2023. In short: we collect the bare minimum, we sell nothing to anyone, and your accounting data remains yours.

Controller

Jaurès Adjamonsi (sole proprietorship), Le Cosson 9, 1326 Juriens, Switzerland.

For any question relating to data protection: contact@justesse.ch.

Data we process

We process only the following data:

  • Account data: your e-mail address and your password, provided at sign-up. The password is hashed immediately ; we never know it in plain text and cannot read it. At sign-up you may also tell us — optionally — which plan you are looking for (accounting + tax, accounting only, or tax only) ; this answer is linked to your account and can be changed at any time in Settings.
  • Accounting data and submitted documents: photos and files of invoices or receipts that you import into the application or forward to your intake address (including the sender address and the subject of the message), the data extracted from them (supplier, amounts, VAT, dates), and the resulting entries, accounts and financial statements. These documents are analysed automatically by an artificial-intelligence model in order to suggest a journal entry, which you approve or reject.
  • Technical logs: connection and error logs generated automatically by our hosting providers (IP address, timestamp, browser type).

We collect no other data. No profiling, no resale of data, no advertising.

Purposes of processing

  • creating and managing your user account ;
  • providing the application’s features: extraction of accounting documents and suggested entries (with your approval), keeping the journal and the financial statements, VAT returns, invoicing and exports ;
  • ensuring the security, maintenance and proper operation of the service ;
  • guiding product development — in particular the priority given to the future tax module — according to the plan you may have indicated to us ;
  • answering the requests you send us.

Legal basis of processing

The processing of account data and accounting data is necessary for the performance of the usage contract entered into at sign-up. Indicating the plan you are looking for is optional and based on your consent: you may choose not to answer (“I don’t know yet”) and change or withdraw your answer at any time in Settings. The processing of technical logs is based on our overriding interest in operating a service that is secure, stable and protected against abuse. We inform you of this processing through this policy, in accordance with art. 19 FADP.

Processors

We use the following providers, bound by contractual data-protection obligations (art. 9 FADP):

  • Supabase, Inc.: hosting of the database and management of authentication (account data and accounting data), on infrastructure located in the European Union ;
  • Infomaniak Network SA, rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), Switzerland: hosting of the website, the domain name and the contact@justesse.ch mailbox ;
  • Vercel, Inc.: hosting of the application’s processing interface (API) ;
  • Anthropic, PBC: automated analysis of the accounting documents you submit (extraction of invoice data by artificial intelligence). Documents are transmitted for this purpose and are not used to train models ;
  • Stripe, Inc.: processing of subscription payments. When you take out a subscription, your name, e-mail address and card details are entered directly on Stripe’s secure payment page — we never have access to your card number ; we receive only the confirmation of the subscription and its status.

Apart from these providers, no data is disclosed to third parties, except where required by a legal obligation or a decision of a competent Swiss authority.

Cookies and tracking

The website uses no advertising cookies, no audience-measurement cookies and no tracking tools. The application uses only the technical elements strictly necessary for your authentication (a session token stored in your browser). That is all.

Cross-border data transfers

The website, the domain and the e-mail service are hosted in Switzerland. Application data is hosted by Supabase on servers located in the European Union, whose member states provide a level of data protection recognised as adequate by the Swiss Federal Council (art. 16 para. 1 FADP). As Supabase, Vercel, Anthropic and Stripe are companies incorporated under US law, some processing or access takes place from the United States — in particular the analysis of accounting documents by the artificial-intelligence model. These transfers are covered by appropriate safeguards within the meaning of art. 16 para. 2 FADP, in particular the standard contractual clauses included in these providers’ data-processing agreements and recognised by the Federal Commissioner, or Swiss-U.S. Data Privacy Framework certification where the provider holds it.

Retention periods

  • Account data and accounting data: kept for as long as your account exists. If your account is deleted or you request erasure, they are deleted within 30 days.
  • Technical logs: kept for a maximum of 12 months, then deleted or anonymised.
  • E-mail correspondence: kept for as long as is needed to handle your request.
  • Billing records for your subscription (name, e-mail address, billing address, amounts and payment dates): kept for 10 years from the end of the financial year, including after your account is deleted. These are our own accounting records: art. 958f of the Swiss Code of Obligations requires us to keep them, and they are the only way to link a payment to an account in the event of a dispute or an audit. They serve no other purpose.

Other statutory retention obligations remain reserved.

Security

We take appropriate technical and organisational measures to protect your data:

  • encryption of all communications in transit (TLS/HTTPS) ;
  • passwords stored exclusively in hashed form ;
  • strict per-user data isolation (row-level security): each user can only access their own data ;
  • access to production systems limited to what is strictly necessary.

Your rights

Under the FADP, you may at any time:

  • request access to the data we hold about you (art. 25 FADP) ;
  • request the correction of inaccurate data (art. 32 FADP) ;
  • request the erasure of your data and the deletion of your account ;
  • request delivery of your data in a common electronic format (art. 28 FADP) — the CSV export built into the application already covers your accounting data.

To exercise these rights, write to us at contact@justesse.ch stating the e-mail address linked to your account. We normally reply within 30 days. You may also contact the Federal Data Protection and Information Commissioner (FDPIC) if you believe your rights have not been respected.

Changes to this policy

We may adapt this policy, in particular when the application evolves (for example when the iOS version launches) or when the legal framework changes. The applicable version is the one published on this page, with its update date. In the event of a substantial change, we will inform you in the application or by e-mail.