Your data, explained plainly.

01Data controller

D-SLS SRL — Via Bocchetto 6, 20123 Milano (MI), Italia · P.IVA IT14260650966 · REA MI-2770247 · sa@d-sls.it

02Data we process

• Account: e-mail address, name, company name, password (stored only as an irreversible hash), Face ID / Touch ID / Windows Hello public keys if you turn them on.
• Business data you enter: customers, suppliers, products, quotes, invoices, accounting, stock, employees, attachments. It is yours; we process it only to provide the service.
• Vault: documents encrypted end-to-end on your device. We cannot read their content (see the Security page).
• Technical log: sign-in dates, device, IP address, important actions (audit log), for security and accounting traceability.

03Why we process it

• To provide the service and sync your devices (performance of contract).
• To secure accounts: e-mail codes, new-device alerts, abuse prevention (legitimate interest).
• To meet legal obligations (invoicing, accounting).

We do not sell your data, show ads, or track you across other apps or websites.

04Local and Cloud mode

In Local mode, data stays in your browser or device. In Cloud mode, it travels over an encrypted connection (HTTPS) and is stored on the D-SLS Cloud Infrastructure, isolated per company and protected by roles.

05AI assistant

The AI assistant is optional. When you use it, the text of your question and the context it needs (for example the lines of a document you show it) are sent to our AI model provider, Anthropic (Claude), only to produce the answer. The assistant never has access to the vault. Do not use it for information you do not want to share.

06Camera, photos and Face ID

The app asks for the camera and photos only when you scan a document or QR code, or attach an image. Face ID / Touch ID is handled by iOS: we never receive biometric data.

07Cookies

A single technical cookie, needed to keep your session securely signed in. No advertising or third-party analytics cookies.

08Retention

• Account and business data: for as long as the account exists.
• After a company or the account is deleted: technical copy kept for 30 days at most, then erased.
• Audit log of a company that continues: kept with that company's accounting records, as the law requires.

09Deleting your account

Right in the app: Settings → Supprimer mon compte (or My profile). You first see what will be deleted, then confirm with a code sent by e-mail. If another administrator exists, they become the company owner; otherwise the company and its data are deleted.

10Your rights

You can request access, rectification, erasure, restriction, portability (export built into the app) or object to processing by writing to sa@d-sls.it. You may also lodge a complaint with the supervisory authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).

11Children

The service is meant for businesses and not for anyone under 16.

12Changes

Any change will be published here with its date. For significant changes we will notify you in the app or by e-mail.