Privacy Policy

Last updated: 3 May 2026

1. Who we are

Arrenda is a software service based in Geneva, Switzerland, providing IFRS 16 lease accounting tools to finance professionals and organisations.

Data controller: Arrenda — Geneva, Switzerland

Contact: contact@arrenda.io

2. What data we collect

We collect the following categories of personal data:

  • Account data: your name, email address, and company name provided at signup.
  • Lease data: financial information you enter into Arrenda (lease terms, payment amounts, IBR rates, and related figures).
  • Billing data: subscription tier and payment status (payment card details are handled exclusively by Stripe and never stored on our servers).
  • Usage data: server log data including IP address, browser type, and pages visited, collected automatically.
  • PDF documents: lease contracts you upload for AI extraction are processed and then discarded — we do not store your uploaded PDFs.

3. How we use your data

We use your data to:

  • Provide and maintain the Arrenda service.
  • Process your subscription and manage billing.
  • Send transactional emails (account confirmation, password reset).
  • Respond to support requests.
  • Improve and develop the product.
  • Comply with legal obligations.

The legal basis for processing is contractual necessity (to provide the service you signed up for) and legitimate interest (to improve the product and ensure security).

4. Third-party services

We use the following sub-processors to deliver the service:

  • Supabase (West EU — Ireland) — database and authentication, GDPR compliant.
  • Stripe (USA/EU) — payment processing, PCI DSS compliant.
  • Anthropic (USA) — AI contract extraction; PDF content is sent for processing only and not retained.
  • Vercel (USA/EU) — application hosting and deployment.
  • Infomaniak (Switzerland) — email delivery via contact@arrenda.io.

5. Data retention

We retain your account and lease data for as long as your account is active. If you delete your account, your data is deleted within 30 days, except where retention is required by applicable law.

Billing records are retained for 10 years in accordance with Swiss accounting law.

6. Your rights

Under the Swiss Federal Act on Data Protection (FADP) and GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Request erasure of your data.
  • Request restriction of processing.
  • Request portability of your data.
  • Object to processing based on legitimate interest.

To exercise any of these rights, contact us at contact@arrenda.io. We will respond within 30 days.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.

7. Cookies

Arrenda uses only essential session cookies required for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Security

All data is transmitted over HTTPS. Your lease data is stored in an encrypted database hosted in the EU (Ireland). Passwords are hashed and never stored in plain text. We apply industry-standard security measures and regularly review our practices.

9. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email. Continued use of Arrenda after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions, contact us at contact@arrenda.io.