Privacy policy
Controller: LeZo (Andrin Portmann), Usserhus 8, 6023 Rothenburg, Switzerland, lezo.ceo@gmail.com (see Imprint).
The invoice generator
The generator runs entirely in your browser. The names, addresses, IBAN and invoice items you type in are not sent to us or to any third party and are not stored by us. If you tick «Remember my details in this browser», your own details (name, address, IBAN, optional contact line and VAT number) are saved in the local storage of this browser on your device only. You can remove them at any time with the button «Remove saved details» or by clearing your browser data. Invoices you create are not stored; save your PDFs yourself.
The Template Pack pages work the same way: texts you type into the templates stay in your browser.
Payment, order confirmation and contact
Payment through PayPal: When you go to PayPal through the payment button, you leave our site. PayPal's privacy policy applies there (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). PayPal may process data abroad as well.
What we receive and what for: From PayPal we receive the details needed for the payment: name, e-mail address, amount, time, transaction number and your note (for example the product code). We use them to match the payment, to send you an order confirmation by e-mail (sent through Google Mail, where data may be processed abroad), to answer your questions and to meet our bookkeeping duties. The basis is performing the purchase and our legal obligations (Art. 6(1)(b) and (c) GDPR where applicable; under the Swiss FADP: proportionality and purpose limitation). We do not pass the data on for advertising and we do not send you a newsletter without your consent.
AI assistance: When we process and answer your e-mails, we use AI-supported services from third-party providers, which may process data abroad (for example in the USA). Please do not send confidential information. Replies are checked before they are sent; there are no purely automated decisions.
Retention: We keep payment and order data as accounting records for ten years from the end of the financial year (Art. 958f of the Swiss Code of Obligations). We delete other e-mails at the latest 12 months after receipt, or within 30 days on request, unless a legal retention duty applies.
Hosting and technical processing when you visit this website
This website is delivered through the service Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare forwards your request over an encrypted connection (HTTPS) to our server in Switzerland and operates the domain name system (DNS) for our domain. In doing so, Cloudflare processes technically necessary data, in particular your IP address, date and time of the visit, the requested address and browser details (for example browser type). Cloudflare acts as our processor under a data processing addendum.
Purpose and basis: We use Cloudflare so that the website is available and protected against misuse and attacks. This is our legitimate interest (Art. 6(1)(f) GDPR where applicable; under the Swiss FADP: proportionality and purpose limitation).
Transfers to the USA: Cloudflare may process data in the USA and other countries. Cloudflare states that it participates in the Data Privacy Framework (EU–US, UK extension and Swiss–US). In addition, the data processing addendum provides for the EU Standard Contractual Clauses, with the necessary adjustments for Swiss data.
What we do not do: We do not use tracking cookies or third-party advertising or analytics services.
Anonymous page counter: On our own server in Switzerland we count page views to see which pages are read. Per day we store only the requested page, the type of visit (visitor, crawler or own visit), the referring domain (the website you came from, without path) and the number. We do not store IP addresses, cookies or browser identifiers and we do not try to recognise individual persons. We keep these figures for a maximum of 24 months. The basis is our legitimate interest in improving our offer.
Counting of pages not found: If someone opens an address on lezo.ch that does not exist (error 404), we count that address so that we can find and fix broken or outdated links. Per day we store only the path of the address (without anything after a “?”) and the number. We do not store IP addresses, cookies, browser identifiers or referring pages, and we do not try to identify individuals. We delete these figures after 30 days. The basis is our legitimate interest in a working website.
Cloudflare may keep its own short-term technical logs for operation and security. We have no access to individual visitor data there and do not evaluate it. To protect against automated access (bots), Cloudflare may set technically necessary cookies, for example “__cf_bm” (valid for 30 minutes according to Cloudflare; Cloudflare states it does not use it to track visitors from site to site). These cookies are not used for advertising or audience measurement. You can block or delete cookies in your browser; access may then be limited in individual cases.
Your rights (access, correction, deletion, objection) and questions: lezo.ceo@gmail.com. Complaints in Switzerland: FDPIC (edoeb.admin.ch); for visitors from the EU: the competent supervisory authority.
Transition period (former technical address): Links we sent earlier may still contain an older technical address ending in “.ts.net”. It redirects to lezo.ch. This address runs through the tunnel service Tailscale (Tailscale Inc., stated to be based in Canada; its relay servers may be located in various countries). If you open such a link, Tailscale may process technically necessary connection data such as your IP address and the time of access. The connection is encrypted with HTTPS; the encryption ends on our computer in Switzerland. We will switch this address off on 3 February 2027 at the latest; please use lezo.ch.