Privacy Policy

The short version

This website uses no cookies, no analytics and no trackers. The Svalog application runs on your own computers - your business data never reaches us. We process personal data mainly when you give it to us: your email address if you subscribe to the newsletter, and your account details if you create a Svalog account or purchase a module. The one exception is a small, personal outreach to accounting firms, using business contact details they publish themselves - see Business contacts from public sources.

Who we are

Svalog is an independent software company based in Slovenia, dedicated to helping micro and small businesses manage their day-to-day operations more efficiently.

We develop Svalog, a modern, modular ERP system that brings everything your business needs into one easy-to-use application. From quotes and sales orders to invoicing, inventory, purchasing, manufacturing, accounting, and more, Svalog helps you run your business from a single place.

Unlike many cloud-based business systems, Svalog is installed on your own computer, giving you full control over your data while allowing your team to securely access the system from any web browser on your local network.

In addition to the software, we operate svalog.com and the Svalog Marketplace, where customers can browse, purchase, install, and update free and premium modules that extend Svalog's functionality as their business grows.

For the purposes of this policy, Svalog ("we") is the data controller for the personal data described below. If you have any questions, you can contact us at hello@svalog.com.

What we collect and why

• Newsletter - your email address, only if you subscribe. Legal basis: consent. We use it solely to send occasional product news. You can unsubscribe at any time via the link in any email or by writing to us, and we will delete your address.
• Svalog account - your email address and password (stored only as a secure hash), your purchase and licence records, and the machine identifiers used to enforce licence activation limits. Legal basis: performance of a contract.
• Payments - paid modules are sold through our payment partner Polar, acting as merchant of record. Polar processes your payment and billing details under its own privacy policy; we never see or store card numbers. We receive confirmation of the purchase and issue the licence.
• Server logs - like almost every web server, ours records standard access logs (IP address, time, requested URL, browser type) for security and troubleshooting. Legal basis: legitimate interest. Logs are kept briefly and then deleted.
• Email you send us - if you contact us, we keep the correspondence for as long as needed to help you.

Business contacts from public sources

We contact a small number of accounting firms in Slovenia directly, by personal email or phone, to ask for their professional opinion on Svalog's export for accountants and to offer cooperation. For this we use business contact details that the firms publish themselves.

• What we collect - the firm's name and town, the name of a contact person where the firm publishes one, their business email address and phone number, the firm's website, and short notes on our correspondence (for example whether you replied and, if you tell us, which accounting software you use).
• Where it comes from - public business registers (AJPES and business directories such as bizi.si), the firm's own website and its public business listings (for example on Google Maps). We do not buy contact lists.
• Purpose - a single, personal message about Svalog for accounting firms and, if you are interested, our further correspondence or a call. We do not add you to our newsletter and do not use the data for anything else.
• Legal basis - legitimate interest (Article 6(1)(f) GDPR): presenting our software to businesses it is relevant to and learning what accountants need from it. We keep this proportionate: only published business contact data, few firms, one message and at most one reminder, and an easy way to say no.
• How long we keep it - if you tell us you are not interested, we delete your details and keep only the firm's name with a note not to contact it again, so that we respect your wish. If you do not reply, we delete your details within three months of our last message. If we start working together, we keep the correspondence for as long as the cooperation lasts.
• Your right to object - you can object at any time, simply by replying to our message or writing to hello@svalog.com, and we will stop contacting you. You also have all the other rights listed under Your rights.

The desktop application

Svalog is self-hosted: the application and its database run on your own hardware, and your business data (customers, invoices, stock, …) is stored locally and never transmitted to us. The application contacts our servers only to check for updates, browse the module marketplace and validate paid-module licences. Those requests contain technical identifiers (application version, licence and machine identifiers) - never your business data.

Where your data is stored

Our servers are hosted in the European Union (Hetzner, an EU hosting provider). We do not transfer your personal data outside the EU/EEA.

Who we share data with

We do not sell or rent personal data. We share it only with service providers who process it on our behalf: our hosting provider (Hetzner Online GmbH), our email provider for the svalog.com mailboxes (Zoho, with data held in its EU data centre) and, for purchases, our payment partner (Polar). Each processes data only as needed to provide its service.

How long we keep it

• Newsletter address: until you unsubscribe.
• Account and licence records: for as long as your account exists, and afterwards for as long as we are legally required to keep purchase records.
• Server logs: a few weeks at most.
• Business contacts from public sources: deleted within three months of our last message if you do not reply; if you decline, only the firm's name and a do-not-contact note are kept.

Your rights

Under the GDPR you may request access to your data, correction, deletion, restriction of processing and data portability, and you may object to processing or withdraw consent at any time by writing to hello@svalog.com. You also have the right to lodge a complaint with a supervisory authority - in Slovenia, the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si).

Changes to this policy

If we change this policy, we will publish the new version here with an updated date. Substantial changes affecting account holders will be announced by email.