Privacy policy

1. Controller

Migliore Consulting (brand: Fidevo), Eschenweg 4, 6340 Baar. Contact for data protection enquiries: .

2. What data we process

Contact and application data, financial information and uploaded documents (e.g. ID, payslips, debt collection register extract) for processing and forwarding your credit application. We also store personal details such as your address, date of birth and marital status in your account so that further applications and your tax return can be pre-filled with them. You can change them at any time under “Account”.

3. Disclosure for credit checks

We only forward your loan application for review with your express consent. Recipients are credit brokers and financing institutions. Who they are and how they process your data is set out in the Disclaimer. Without consent, no forwarding is possible.

4. Contact after your request

If you agreed in your request that we may contact you by phone, WhatsApp and email, we will get in touch through these channels. The call may also be made by a digital voice assistant. It clarifies what you need, takes down details for the application and, if needed, sends you the link to the application via WhatsApp. You can also send us documents there.

The call is recorded and transcribed so that we can process your application and ensure quality. We tell you this at the start of the call. If you ask whether you are speaking to a person, you will get an honest answer.

On WhatsApp, our digital assistant answers you first. It answers questions about the process and takes down your request. It only tells you the status of your application if you have confirmed the connection with WhatsApp yourself in your signed-in Fidevo account; you can remove it there at any time. For this it receives your first name, the status of the application, the names of missing documents or documents to be resent with the reason, and the date of the last change, no amounts, addresses or documents.

Documents you send via WhatsApp pass through WhatsApp (Meta) and ElevenLabs. We collect them from WhatsApp and place them in our protected storage in the EU (section 5). Fixed rules based on this confirmed connection decide which account a file belongs to, never an AI; without a connection, we assign it by hand. Before we pass an application on to a lender, we check the documents. Anything not assigned to an application is deleted after 90 days.

The recipients of this data, as processors, are a provider of telephony and voice dialogue (ElevenLabs Inc., USA) and a messaging service (WhatsApp by Meta Platforms Ireland Ltd., Ireland, and Meta Platforms Inc., USA). ElevenLabs generates the assistant's replies with a language model from Anthropic PBC (USA), which acts as a sub-processor for this purpose. We keep the recording, transcript and messages for as long as the other details of your request.

If you no longer want to be called, say so during the call or write to . We will then stop calling you.

If you no longer want WhatsApp messages from us, write “STOP” in the chat or to . After that, we will no longer send you messages there on our own initiative and will no longer call you via WhatsApp.

5. Hosting & data location

The database and documents are hosted by Supabase (Supabase Inc., USA) on servers in the EU, in Frankfurt (Germany). The website and its server functions run on Vercel (Vercel Inc., USA), also in Frankfurt; it is delivered via Vercel’s global network. We send emails via Resend (Resend Inc., USA). Under the Swiss Federal Act on Data Protection (FADP), the EU is considered to provide an adequate level of data protection. Documents are kept in private storage buckets and are only accessible via time-limited, signed links.

5a. Sign-in with Google

You can also open your account with your Google account and sign in with it (“Continue with Google”). This is voluntary. Signing in with your email address and password remains available to you.

If you choose this option, we redirect you to Google. There you sign in to Google and decide whether Google may share your details with us. We never learn your Google password. Google itself is responsible for signing in to Google and for the data in your Google account; for people in Switzerland and the EEA, this is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google learns that you are signing in to Fidevo. How Google processes your data is described in Google's privacy policy.

Google shares with us your name, your email address and whether Google has verified it, an identifier of your Google account and the web address of your profile picture. If your Google account belongs to an organisation (Google Workspace), we also receive its domain. We have no access to your emails, contacts, files, calendar or other content of your Google account.

We use this information to create your account, recognise you when you sign in again and pre-fill your profile. Google sends it again each time you sign in with Google, and it is updated. Anything Google does not provide, such as your first and last name separately or your phone number, we ask you for after your first sign-in. Everything is stored like your other account data with Supabase in Frankfurt (section 5) for as long as your account exists.

We treat a new account created via Google like a registration with an email address. We store which campaign brought you to us and also record your name and email address in our customer management system, and later your phone number if you provide it. If you come to us for a loan, we send you a few emails about it until you submit an application. You can unsubscribe in each of these emails. The entry in our customer management system remains even after you delete your account, until you ask us to delete it (section 10).

With your consent to marketing cookies, we report the new account to our advertising partners Meta, Google and TikTok (section 8). If we already have an account with the same email address, the Google sign-in is linked to that account.

Google may also process data in the USA (Google LLC). According to its own statements, Google LLC is certified under the Swiss-U.S. Data Privacy Framework. Since 15 September 2024, the Federal Council has recognised an adequate level of data protection for companies certified in this way.

You can disconnect Fidevo at any time in your Google account. Your account with us remains. If you want to sign in without Google, set a password via “Forgotten?” on the sign-in page. You can delete your account under “Account”. We will also delete the transmitted information at your request (section 10).

6. Fixed costs calculator

Without an account, your entries in the fixed costs calculator stay in your browser and are not transmitted to us. With an account, we save them in your account; only you can view them, even our staff have no access.

We calculate reports, the plan and the summary (Fixkosten Plus) ourselves using fixed rules. Your figures are not passed on to any third party for this, including any AI service.

7. Automatic reading of receipts

Bookkeeping (fiduciary services): We first read receipts such as invoices and till receipts without AI, via the QR code on the QR-bill, the text of a PDF file or text recognition on our own servers. No receipts are passed on to third parties in the process. Only if you expressly consent in the settings may a receipt that we cannot read reliably without AI also be sent to Anthropic PBC (USA), provider of the AI model Claude. You can withdraw your consent at any time; after that, only our own recognition will read your receipts.

Tax return: documents you upload for it (e.g. your salary statement (Lohnausweis)) are read using the AI model Claude from Anthropic PBC (USA).

Anthropic processes the data as a processor solely to return the result and does not use it for training. Every result is a suggestion: it is checked and posted by you or our specialists.

8. Cookies, audience measurement & advertising

We use technically necessary cookies to operate the website. In addition, exclusively with your consent via our cookie banner, we use marketing and analytics services from our advertising partners to deliver our campaigns and measure their effectiveness:

• Meta Platforms (Facebook & Instagram: Meta Pixel);
• Google (Google Analytics / Google Ads);
• TikTok (TikTok Pixel).

These services may set cookies and process usage data (e.g. pages visited, device, truncated IP address). Consent is voluntary and can be withdrawn at any time with effect for the future via “Cookie settings” in the footer. Without consent, no marketing cookies are set.

Independently of this, we record in our own cookie (fidevo_herkunft, 90 days) which campaign brought you to our site: the campaign details from the address (utm parameters), whether the click came from Meta, Google or TikTok, the first page visited and the referring website. It contains no personal data and is not passed on to anyone. If you create an account, submit an application or send a request, we store this information with the transaction to see which advertising works. For a new account, we also use it to infer why you came (loan, taxes or fixed costs) and arrange your home page accordingly.

If you have consented to marketing cookies, we also report such events directly to Meta (Conversions API) so that Meta can evaluate the advertising even if your browser blocks the pixel. Your email address is only transmitted as an irreversible hash value.

9. Transfer abroad

The providers for hosting and email delivery (Vercel, Supabase, Resend, section 5), the advertising partners named (Meta, Google, TikTok), the providers for telephony, voice dialogue and messaging (ElevenLabs with the language model from Anthropic, WhatsApp by Meta, section 4) and Anthropic (reading tax documents and, only with your consent, accounting receipts, section 7) may process data outside Switzerland/the EU, in particular in the USA. An adequate level of data protection is ensured by an adequacy decision of the Federal Council or by appropriate safeguards (e.g. standard contractual clauses).

10. Your rights

Access, rectification, erasure, restriction and withdrawal of consent given. Contact for data protection enquiries: .