Privacy Policy

This privacy policy describes how HS-Soft AG processes personal data when you visit runmyhub.com, use a RunMyHub customer account or contact our support. It applies under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

HS-Soft AG, Hinterbergstrasse 16, 6312 Steinhausen, Switzerland Email: info@hssoft.com UID CHE-113.971.155

[Open: data protection contact, e.g. datenschutz@hssoft.com, and, for customers in the EU, a representative under Art. 27 GDPR.]

2. Two roles: controller and processor

• As controller, we process the data of visitors to our website, the account data of the people who use RunMyHub for a business, and contract, billing and support data.
• As processor, we process the data our customers record in RunMyHub, for example sales, the customers of their business, employees and orders. Each customer is the controller of that data. Our Data Processing Agreement applies to this processing. If you order as a guest in a shop that uses RunMyHub, please contact that shop with questions about your data.

3. What data we process and why

Area	Data	Purpose	Legal basis (GDPR)
Website	IP address, browser, pages viewed, time	Operating and securing the website	Legitimate interest (Art. 6(1)(f))
Customer account	Name, email, role, company, sign-in times	Providing RunMyHub, access control	Contract (Art. 6(1)(b))
Contract and billing	Company, address, contact person, payment data via Stripe	Performing the contract, invoicing	Contract; legal obligation (c)
Support	Requests, tickets, chat and WhatsApp messages, call notes	Handling your requests	Contract; legitimate interest
Session recording	Page structure, navigation and clicks in the web application (text and input masked), email of the signed-in person	Support and error analysis	Contract; legitimate interest
AI features	Your input to the AI assistant and its answers	Answering your questions	Contract

Session recording. The web application records the structure of the pages used, not images or sound. Displayed text and entered values are masked in the browser. Areas such as payroll, personnel, time tracking and banking are not recorded. Only authorised HS-Soft AG staff can view recordings, and only to resolve a support case or analyse an error. They are never used to assess employees’ work or behaviour. Every viewing is logged.

AI assistant. Conversations with the AI assistant are stored so you can return to them, and HS-Soft AG staff can view them for quality assurance and in a support case. Our AI providers do not use your data to train their models.

4. Recipients and processors

We share personal data only as far as needed for these purposes: with our processors, with integrations you switch on, and with authorities where the law requires it. The current list of our sub-processors, with purpose and location, is under Sub-processors.

5. Data location and transfers abroad

We store customer data in the customer’s jurisdiction: in Zurich for customers in Switzerland, in Frankfurt for customers in the EU. Some services process data in other countries, in particular the USA (e.g. AI providers). For this we rely on adequacy decisions, the Swiss-U.S. or EU-U.S. Data Privacy Framework, or the European Commission’s standard contractual clauses with the Swiss addendum.

6. Retention

We keep personal data only as long as the purpose requires or the law demands.

Data	Retention
Session recordings	12 months
AI assistant conversations	12 months after the last activity
Account data	For the term of the contract, then deleted or anonymised
Accounting and contract records	10 years (Art. 958f Swiss Code of Obligations)
Website server logs	[open: e.g. 30 days]

7. Cookies and tracking

The web application sets no cookies of its own and loads no third-party tracking services. It uses only technically necessary browser storage (sign-in, preferences) and our own session recording (section 3). [Open: advertising or analytics cookies on runmyhub.com; if any, a consent banner is required.]

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw consent at any time. Write to info@hssoft.com. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a supervisory authority in the EU.

9. Security

We protect data with encryption in transit and at rest, separate databases per jurisdiction, role-based access rights and logged access by our staff.

10. Changes

We update this policy when our processing changes. The version published on this page, with the date shown above, applies.