Security & trust
This page explains, in plain language, what protects your data in Factoyer — and just as importantly, what we do not claim. Every statement below describes how the product actually works today. We do not display certification seals we have not earned.
- Private by default
- Encrypted connections
- Secure payments by Stripe
- Developed in Switzerland
- Data deletion on request
Private by default
- Every bill, document and bank detail you add is visible only to you — and to people you explicitly invite.
- This is enforced at the database level on every request (row-level security), not merely hidden in the interface.
- Neighbours in your building never see your bills, documents, salaries or bank details — building communication is fully separated from financial data.
Encrypted connections
- All traffic between your device and Factoyer is encrypted with HTTPS/TLS.
- Your stored data is encrypted at rest by our cloud database provider.
- Scope: encryption at rest is provided by the hosting infrastructure. It covers the storage service and is not a certification of Factoyer itself.
Payments handled by Stripe
- Subscription payments are processed by Stripe, a PCI DSS Level 1 certified payment provider — the highest level of certification in the payments industry.
- Your card details are entered on Stripe's secure pages; they never touch our servers and are never stored by us.
- Scope: the PCI DSS certification belongs to Stripe and covers their payment service.
Developed in Switzerland
- Factoyer is founded, designed and developed in Switzerland by Lamija Karic.
- This is a statement about where the product is made and the business is run — it is not a “Swiss Made” label and not a claim about where servers are located.
- The providers that process data on our behalf are listed on the privacy page.
Your data, your choice
- You can request access, correction or deletion of your personal data at any time by emailing support@factoyer.ch.
- Every non-essential email includes an unsubscribe link.
- We honour these requests as required by applicable Swiss and European privacy law.
What we don't claim
- We do not hold ISO 27001, SOC 2 or GDPR/FADP certifications, and we do not display their seals.
- Where a provider holds a certification (for example Stripe's PCI DSS), it covers that provider's service — it does not certify Factoyer.
- If you have a security question or want to report a vulnerability, write to support@factoyer.ch.