Privacy policy

Key terms used in this policy are defined below to aid understanding of how we handle personal data in the context of software development and professional services.

We collect limited categories of personal data necessary to deliver services, manage client relationships and meet legal obligations. Collection is proportionate to the purpose and access is restricted to staff and partners who require it to perform contractual or regulatory tasks.

We process personal data that you or your organisation provide to enable project delivery, contract administration and communications. This data is used only for stated purposes and is retained in accordance with retention rules.

• Contact information: names, job titles, business email addresses and telephone numbers used for project coordination and support.
• Project and business data: specifications, user stories, business processes and documentation required for design and implementation.
• Credentials and access details: technical account identifiers and permissions necessary to integrate with client systems (handled with elevated protections).
• Contract and billing information: organisation details and invoicing data required to manage commercial relationships.
• Support and operational records: communication logs, incident reports and change requests submitted by client representatives.
• Consents and authorisations: any declarations or consents provided by data subjects to enable specific processing activities.

Certain data is collected automatically during the provision of online services and remote support to help maintain service quality and security.

• Usage data: metrics related to application usage, feature access and performance diagnostics relevant to troubleshooting and optimisation.
• Connection and access logs: timestamps, IP addresses and session identifiers used for security monitoring and audit purposes.
• Device and environment data: browser type, operating system and relevant environment parameters for compatibility and support.
• Error and diagnostic data: crash reports and debug traces collected to identify and remediate issues.
• Analytics aggregates: anonymised statistics compiled to understand trends and improve service delivery without identifying individuals.
• Authentication events: records of login attempts and access control actions to detect and contribute security incidents.

Where necessary for operations, we share personal data with carefully selected external providers that perform services on our behalf. These recipients are engaged under contractual terms that require appropriate data protection measures.

• Cloud infrastructure and hosting providers for application deployment and data storage.
• Payment processors and accounting service providers for invoicing and business administration.
• Analytics and monitoring providers supplying aggregated and operational insights to support reliability.

Personal data is processed only for specific, explicit and legitimate purposes related to our services. Each processing activity is mapped to a business or regulatory need.

• Delivering and operating custom enterprise applications and integration services.
• Managing contractual relationships, billing and professional communications.
• Security monitoring, fraud prevention and incident response.
• Troubleshooting, technical support and service improvement.
• Meeting legal, tax and regulatory obligations applicable in Switzerland and relevant jurisdictions.
• Conducting internal audits and maintaining records required for governance.
• Providing aggregated, anonymised insights to support operational decisions without identifying individuals.
• Exercising rights and responding to inquiries from data subjects or supervisory authorities.

Processing of personal data is based on one or more lawful grounds under applicable data protection legislation. We identify the legal basis relevant to each processing purpose below.

• Performance of a contract: processing necessary to deliver services requested by the client.
• Legal compliance: processing required to comply with statutory obligations such as tax, accounting and regulatory reporting.
• Legitimate interests: processing for security, internal administration, and service improvement where such interests are balanced against data subject rights.
• Consent: where applicable, certain communications or usage of personal data may be conducted on the basis of explicit consent provided by the individual.

Cookies and comparable technologies are used for essential functionality, analytics and optional features. You can control cookie preferences through your browser or provided consent mechanisms.

We use session cookies for authentication and persistent cookies for preferences and analytics. Third-party cookies may be used for embedded services and aggregated performance measurement.

Categories include strictly necessary cookies for service operation, functional cookies for user preferences and analytics cookies to measure and improve service performance. Advertising cookies are not used as part of our B2B service offerings.

Most browsers allow you to manage or block cookies via settings. Blocking certain cookies may affect the functionality of interactive tools and remote support utilities. Preference controls are also available where consent is requested.

Full cookie policy

We limit data sharing to entities that either require the data to perform contracted services or are obligated by law to receive specific information. All sharing is documented and subject to data protection controls.

• Service providers contracted to host and operate applications on behalf of LogicYApps.
• Third-party vendors engaged for analytics, monitoring and technical support under data processing agreements.
• Professional advisors and auditors where disclosure is necessary for compliance or governance.
• Governmental or law enforcement bodies in response to lawful requests or legal obligations.
• Subcontractors involved in project-specific activities who are bound by the same data protection terms.
• Acquirers or counterparties in the event of a merger, sale or corporate reorganisation, subject to appropriate safeguards.

Personal data may be transferred outside Switzerland or the European Economic Area when necessary for hosting, maintenance or to engage service providers. Transfers are conducted only where an adequate level of protection is ensured by law or by contractual safeguards.

When transfers occur to countries without an adequacy decision, we implement appropriate safeguards such as standard contractual clauses, binding contractual provisions or other legally recognised mechanisms to protect personal data.

Data is retained only as long as necessary for the purpose it was collected and for compliance with legal obligations. Retention periods are defined by category of data and purpose.

Account and contract records are typically retained for the duration of the commercial relationship and for the period required by accounting and tax law, normally up to ten years where applicable.

Project communications and support records are retained for an operational period required to support the service and for dispute resolution, generally between two and seven years depending on context.

Access and security logs are retained for a period necessary for security monitoring and incident contribute, typically between six months and three years depending on the sensitivity and regulatory needs.

When retention periods expire, personal data is deleted or anonymised in a manner appropriate to the storage medium and the type of data. Copies may persist in backup systems for a limited additional period until overwritten.

We maintain organisational and technical measures to protect personal data against unauthorised access, disclosure, alteration and destruction. Measures are regularly reviewed and adapted to evolving risks and best practices.

• Access controls and role-based permissions to limit data access to authorised personnel only.
• Encryption of data in transit and at rest where required by the sensitivity of the information.
• Regular security assessments, patching procedures and incident response planning to identify and address vulnerabilities.

Data subjects have a set of rights in relation to their personal data. Requests related to these rights are handled in accordance with applicable law and verified identity checks to prevent unauthorised disclosures.

• Right to access: you may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: in certain circumstances you may request deletion of personal data when retention is no longer necessary or lawful reasons no longer apply.
• Right to restriction of processing: you may request limitation of processing while the accuracy or lawful basis for processing is being verified.
• Right to data portability: where applicable, you may request a machine-readable copy of personal data provided by you for transmission to another controller.
• Right to object: you may object to processing based on legitimate interests or direct marketing; such requests are evaluated consistent with legal requirements.
• Right to withdraw consent: if processing is based on consent, you may withdraw consent at any time, without affecting prior processing lawfulness.
• Right to lodge a complaint: you may contact the relevant supervisory authority if you consider processing to be unlawful; we will cooperate with such authorities as required.

This privacy notice explains how LogicYApps collects, uses and stores personal data in connection with custom enterprise application development services provided to clients in Switzerland and the European Economic Area. It describes the categories of data processed, legal bases for processing, data retention practices, and contacts for privacy-related inquiries. The policy reflects applicable requirements under the General Data Protection Regulation (GDPR) and Swiss data protection law as applicable to our operations.

This GDPR-related section applies to natural persons whose personal data LogicYApps processes in the context of business relationships, project delivery, support, sales enquiries, and website interactions. It covers data controllers and processors engaged by LogicYApps where EU/EEA data protection rules apply. Corporate contact data used solely for B2B communication may be subject to a different legal basis but is included here for transparency.

• Categories of personal data: contact details (name, email, phone), business identifiers, role and organization information, project specifications, usage data from prototypes and deployed applications, and limited business information necessary for billing.
• Legal bases for processing: performance of a contract with the data subject or the data subject's employer, legitimate interests where balanced against data subject rights (for example project administration and fraud prevention), and compliance with legal obligations such as accounting and tax requirements.
• Recipients of personal data: authorized LogicYApps staff, third-party cloud service providers, payment processors, and subcontractors engaged under written agreements that impose appropriate data protection obligations.
• Retention periods: personal data is retained for the duration necessary to provide services, to comply with contractual and legal obligations (including tax and accounting retention periods), and for a reasonable period afterwards to address potential claims or required audits.

If you believe LogicYApps has processed your personal data in breach of applicable data protection law, you may lodge a complaint with your local supervisory authority. You may also contact LogicYApps to raise concerns via the contact details provided in this document so we can review and respond to the issue.

Individuals have rights under applicable data protection laws including access, rectification, restriction of processing, erasure in certain circumstances, portability where technically feasible, and the right to object to processing based on legitimate interests. Requests should specify the right being exercised and provide sufficient information to identify the requester and the relevant processing activity.

[email protected]

LogicYApps responds to valid rights requests within applicable statutory timeframes. We may require additional information to verify identity and the scope of the request. Complex requests may require additional time, and you will be informed if an extension is necessary.

LogicYApps may use contact details to send information about relevant services, events and technical updates. Marketing communications are sent based on consent where required or on a legitimate interest assessment where permitted by law. Communications are limited to topics relevant to enterprise application development, integrations, and support.

Each marketing message contains an option to unsubscribe or manage preferences. Recipients can also contact [email protected] to request cessation of marketing communications. Opt-out requests are processed promptly and recorded to prevent further marketing contact.

LogicYApps does not target services to children and does not knowingly collect personal data from individuals under legal age thresholds applicable in a jurisdiction. If we become aware that we have collected data of a minor without appropriate consent, we will take steps to delete that data as required by law.

Websites and services operated by third parties that are linked from LogicYApps.pro are governed by their own privacy policies. LogicYApps is not responsible for the content or practices of external sites. Users are encouraged to review the privacy notices of third-party services before providing personal data.

We limit data sharing to entities that either require the data to perform contracted services or are obligated by law to receive specific information. All sharing is documented and subject to data protection controls.

Full cookie policy

LogicYApps may update this privacy notice to reflect changes in law, technology, or our processing activities. Material changes will be posted on LogicYApps.pro with an updated effective date. Continued use of services after publication of changes constitutes acceptance of the revised notice.