Privacy policy

Version 2 of 28.10.2026. Draft based on an initial expert assessment, not yet reviewed by a lawyer.

This is a translation for information only. The German version is binding.

This policy explains which personal data VereinsOps processes, for what purpose, who receives it and how long it is kept.

1. Who is responsible

VereinsOps is operated by Vorname Name (see the legal notice). Contact for all data protection questions: hello@vereinsops.ch.

There are two roles:

Accounts and running the platform: VereinsOps itself is responsible for the data of your account, the login, security, the subscription and support. This policy is about these.
An association’s data: The association is responsible for its member lists, board, meetings, minutes, tasks, documents and finances. VereinsOps processes them only on its behalf, under the data processing agreement. How the association handles this data, it explains to its members itself.

2. Which data we process for accounts and operation

Account: name, email address, password (only as an irreversible hash), second factor and recovery codes (both stored encrypted).
Logins and sessions: time, IP address and browser of your sessions, so that you can see and end them under «Mein Konto».
Security notices: which security emails were sent to you and whether they were delivered.
Access: which association you have access to, and with which rights.
Agreements: when you accepted which version of the terms of use, and the confirmation that you are at least 18 years old.
Feedback: what you send us via «Rückmeldung», with page and time; a screenshot only if you include it, and the texts in it are made unreadable.
Subscription: plan, state, invoices and payments of an association, and who is its billing contact.
Support access: when an association gave support access, who gave it, and which pages support opened and what it changed.

VereinsOps uses no analytics or advertising trackers. The app only needs technically necessary cookies: for the login, for protecting forms and for the chosen appearance (light or dark).

The home page vereinsops.ch sets no cookies and loads nothing from other providers. If you write to us via «Get in touch», you send us an ordinary email; we use it only to reply.

3. Why

So that you can log in safely and work in your association; to detect misuse and recover accounts; to fix errors and answer feedback; for the subscription and its invoices; as evidence of who accepted which terms.

4. Who receives the data

We do not pass on or sell personal data. We work with these service providers to run the platform:

Infomaniak Network SA, Geneva (Switzerland): server, database and the encrypted backups. According to Infomaniak, the data is stored exclusively in data centres in Switzerland.
Brevo SAS, Paris (France): sending the emails. Brevo receives the recipient’s address and the text of the email. According to Brevo’s list of sub-processors, its servers are in France and Belgium. For customer service and maintenance, Brevo may involve companies of its own group, including in India and the USA, as well as other service providers in the USA. For these disclosures abroad, Brevo names standard contractual clauses and, for the USA, the EU-US Data Privacy Framework.

The details are in annex 1 of the data processing agreement.

5. How long

Account: until you delete it. We then delete the login, email address, second factor and all access. Your name stays in the associations’ records («Name (Konto gelöscht)»), so that it remains clear who did what; the association concerned decides about that.
Sessions: until they end or you end them.
Backups: we back up every hour and keep the backups for at most 90 days. Deleted data may remain in a backup for that long. If a backup is restored, the app first repeats all deletions.
Subscription invoices and payments: as long as bookkeeping obligations require.
Agreements: as evidence for as long as the contract exists, and after that together with the subscription records.

6. Your rights

You can request information about your data, correct wrong data and delete your account yourself at any time (Mein Konto → Konto löschen). Write to us at hello@vereinsops.ch; we check that the request really comes from you.

If it is about data that an association has recorded about you (for example in its member list), the association is responsible. If such a request reaches us, we forward it to the association quickly and help it to answer.

7. Changes

If this policy changes, the new version with its date is shown at the top.