Privacy Policy

1. Controller

Paul Pietzko (Aspecs)
9470 Buchs SG, Switzerland
E-Mail: info@aspecs.ch

We have not appointed a data protection officer, as we are not required to do so. For all privacy matters, please contact the address above.

2. Processing in the Logier desktop application

Logier is designed to be local-first. Log files you open or stream in the Logier desktop application are processed locally on your device. We do not receive, store or analyze the content of your log files. If you connect your own cloud storage (see section 5), your files are transferred directly between your device and your storage provider — not through our servers.

You remain solely responsible (as controller within the meaning of the FADP/GDPR) for any personal data contained in log files that you process with Logier.

3. Data we process, purposes and legal bases

We process the following categories of personal data:

• Account data: e-mail address and authentication data when you create an account (managed via Supabase). Purpose: providing your account and licenses. Legal basis: performance of a contract (Art. 6 para. 1 lit. b GDPR).
• Purchase and license data: name, e-mail address, billing information and license keys when you purchase a license. Payments are processed by Stripe; we never receive your full payment card details. Purpose: order processing, license delivery, accounting. Legal basis: performance of a contract (Art. 6 para. 1 lit. b GDPR) and legal obligations (Art. 6 para. 1 lit. c GDPR).
• Transactional e-mails: your e-mail address for sending license keys and account-related messages (via Resend). Legal basis: performance of a contract (Art. 6 para. 1 lit. b GDPR).
• Server log data: IP address, browser type, date/time and requested pages when you visit the website, processed by our hosting provider for operation and security. Legal basis: legitimate interest in a secure and stable service (Art. 6 para. 1 lit. f GDPR).
• Feedback and support data: the information you submit through feedback, bug report or survey forms, and e-mails you send us. Legal basis: legitimate interest in improving the product and answering your request (Art. 6 para. 1 lit. f GDPR).
• Affiliate attribution: if you reach us via an affiliate link, a pseudonymous referral ID is stored in your browser (localStorage) and linked to a purchase so the referrer can be credited (via AffiliateBase). Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).

4. Analytics and bot protection

We use Vercel Analytics to measure aggregate website usage. Vercel Analytics does not use cookies and does not track individual visitors across websites; data is collected in anonymized, aggregated form.

We use Cloudflare Turnstile to protect forms against bots and abuse. Turnstile may process technical information about your device and browser to verify that you are human. See the Turnstile Privacy Policy. Legal basis: legitimate interest in protecting our services (Art. 6 para. 1 lit. f GDPR).

5. Cloud storage connections

If you connect a third-party storage provider (e.g. Dropbox, Google Drive, OneDrive) to Logier, the authorization is brokered through our servers: we store the OAuth tokens required to maintain the connection in encrypted form and use them solely to issue access credentials to your app. The content of your files is transferred directly between your device and your storage provider. The processing of your data by the storage provider is governed by that provider's own privacy policy. Legal basis: performance of a contract (Art. 6 para. 1 lit. b GDPR).

6. Recipients and processors

We share personal data only with service providers (processors) that we need to operate our services, under data processing agreements:

• Vercel Inc. (hosting, analytics)
• Supabase Inc. (authentication, database)
• Stripe, Inc. (payment processing)
• Cloudflare, Inc. (bot protection)
• Resend (transactional e-mail)
• Sanity AS (content management)
• AffiliateBase (affiliate program)

We do not sell personal data and do not share it with third parties for their own advertising purposes.

7. International data transfers

Some of the providers listed above process data in the United States or other countries outside Switzerland and the EEA. Where this is the case, we rely on adequacy decisions (including the Swiss–U.S. and EU–U.S. Data Privacy Framework, where the provider is certified) or the European Commission's Standard Contractual Clauses, supplemented for Swiss law as recognized by the Federal Data Protection and Information Commissioner (FDPIC).

8. Retention

We keep personal data only as long as necessary for the purposes described above: account data for the lifetime of your account, purchase and billing records for the statutory retention period of 10 years (Art. 958f of the Swiss Code of Obligations), and support correspondence as long as needed to handle your request. Data is then deleted or anonymized.

9. Your rights

Under the FADP and, where applicable, the GDPR, you have the right to:

• request access to the personal data we hold about you;
• have inaccurate data corrected;
• request deletion of your data;
• receive your data in a portable format;
• object to processing based on legitimate interests, and restrict processing;
• withdraw consent at any time with effect for the future, where processing is based on consent.

To exercise these rights, contact paul.pietzko@icloud.ch. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC/EDÖB) or, if you are in the EEA, with your local supervisory authority.

10. Data security

We use appropriate technical and organizational measures to protect your data, including TLS encryption in transit, encryption of stored cloud tokens, and access controls limited to what is necessary.

11. No automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

12. Changes to this policy

We may update this privacy policy from time to time, for example when our services or legal requirements change. The version published on this page applies.