Privacy Policy

The short version

This website uses no cookies, no analytics and no trackers. The Svalog application runs on your own computers — your business data never reaches us. We process personal data only when you actively give it to us: your email address if you subscribe to the newsletter, and your account details if you create a Svalog account or purchase a module.

Who we are

Svalog is an independent software company based in Slovenia, dedicated to helping micro and small businesses manage their day-to-day operations more efficiently.

We develop Svalog, a modern, modular ERP system that brings everything your business needs into one easy-to-use application. From quotes and sales orders to invoicing, inventory, purchasing, manufacturing, accounting, and more, Svalog helps you run your business from a single place.

Unlike many cloud-based business systems, Svalog is installed on your own computer, giving you full control over your data while allowing your team to securely access the system from any web browser on your local network.

In addition to the software, we operate svalog.com and the Svalog Marketplace, where customers can browse, purchase, install, and update free and premium modules that extend Svalog's functionality as their business grows.

For the purposes of this policy, Svalog ("we") is the data controller for the personal data described below. If you have any questions, you can contact us at hello@svalog.com.

What we collect and why

• Newsletter — your email address, only if you subscribe. Legal basis: consent. We use it solely to send occasional product news. You can unsubscribe at any time via the link in any email or by writing to us, and we will delete your address.
• Svalog account — your email address and password (stored only as a secure hash), your purchase and licence records, and the machine identifiers used to enforce licence activation limits. Legal basis: performance of a contract.
• Payments — paid modules are sold through our payment partner Polar, acting as merchant of record. Polar processes your payment and billing details under its own privacy policy; we never see or store card numbers. We receive confirmation of the purchase and issue the licence.
• Server logs — like almost every web server, ours records standard access logs (IP address, time, requested URL, browser type) for security and troubleshooting. Legal basis: legitimate interest. Logs are kept briefly and then deleted.
• Email you send us — if you contact us, we keep the correspondence for as long as needed to help you.

The desktop application

Svalog is self-hosted: the application and its database run on your own hardware, and your business data (customers, invoices, stock, …) is stored locally and never transmitted to us. The application contacts our servers only to check for updates, browse the module marketplace and validate paid-module licences. Those requests contain technical identifiers (application version, licence and machine identifiers) — never your business data.

Where your data is stored

Our servers are hosted in the European Union (Hetzner, an EU hosting provider). We do not transfer your personal data outside the EU/EEA.

Who we share data with

We do not sell or rent personal data. We share it only with service providers who process it on our behalf: our hosting provider (Hetzner Online GmbH) and, for purchases, our payment partner (Polar). Each processes data only as needed to provide its service.

How long we keep it

• Newsletter address: until you unsubscribe.
• Account and licence records: for as long as your account exists, and afterwards for as long as we are legally required to keep purchase records.
• Server logs: a few weeks at most.

Your rights

Under the GDPR you may request access to your data, correction, deletion, restriction of processing and data portability, and you may object to processing or withdraw consent at any time by writing to hello@svalog.com. You also have the right to lodge a complaint with a supervisory authority — in Slovenia, the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si).

Changes to this policy

If we change this policy, we will publish the new version here with an updated date. Substantial changes affecting account holders will be announced by email.