Depono
Privacy
Updated: 26 September 2026
Who is responsible?
Squibble GmbH, Rossbergstrasse 30, 8310 Kemptthal, Switzerland, is responsible for this website. For privacy questions or to exercise your rights, contact us at hello@squibble.ch.
Scope
This notice applies to the Depono marketing website. The application at its separate app address has its own data processing context: there we process the documents and details you upload in accordance with the information in the application.
Contact form and email
Through the contact form, we process your email address and message and, optionally, your name and company so we can respond. Before sending, you confirm the displayed consent; we also transmit the consent text and its version so your agreement remains traceable. Our Site Services stores the form contents and email address encrypted and sends them to hello@squibble.ch; your email address automatically receives a confirmation in the selected language. It also stores the language, origin, a daily rotating hash of the IP address and a browser identifier truncated to 256 characters. An empty trap field and timing details prevent spam. Deletion follows the retention configured in the service. Form data is not included in web analytics. You can email us directly instead. This website has no registration and sets no cookies.
Web analytics
When enabled, we use self-hosted Umami through /insights.js and /insights/api/send on this domain. We measure page views and clicks on links to the application. Events contain the page language and link position, not personal data. Our integration removes URL parameters, fragments and referrers from analytics data. Umami sets no cookies. Your browser nevertheless sends technical connection data to the proxy and analytics service.
Moving to the application
The “Sign in”, “Try Depono” and other app links lead to the Depono application. Sign-in there uses the authentication service WorkOS. The application stores original documents with Amazon Web Services in the Zurich region (eu-central-2). Google Vertex AI in the EU is intended for the planned AI processing of document text; this is distinct from the storage location of originals. This website itself transfers no documents or sign-in credentials.
Technical operation
Requests pass through the hosting and reverse proxy infrastructure. It processes connection data such as IP address, time and response status for delivery and troubleshooting. This website’s web server does not write access logs. Upstream infrastructure keeps its own operational logs.
Legal bases
Processing for operation, security and data-minimising audience measurement of this website is based on our legitimate interest (GDPR Article 6(1)(f)). Swiss data protection law applies; the GDPR applies where its territorial scope is met.
Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction or a portable copy of your personal data and object to processing based on legitimate interests. You may complain to the Swiss Federal Data Protection and Information Commissioner or your competent supervisory authority. Write to hello@squibble.ch so that we can handle your request and verify your identity proportionately.