Privacy policy

1. Who is responsible

Olivier Bossel, Chemin des Préalpes 18, 1630 Bulle, Switzerland, is responsible for the processing described here. Contact: support@requester.io.

For the documents and answers collected through a request, the requester decides what is collected and why: they are the controller, and Requester processes this data on their behalf. Recipients can contact the requester directly, or us, and we will forward the request.

2. Data we process

• Requesters: email address, subject, message, request settings, language.
• Recipients: email address, language, answer message, files with their names and sizes, delivery and answer status.
• Account holders: email address, name, profile picture, language, time zone, logo and colors, Google account identifier if you sign in with Google.
• Organisations: name, members and their roles, invitations.
• Payments: handled by Stripe. We only keep the customer and subscription identifiers, the plan and its status; we never see your card details.
• Technical data: IP addresses and email addresses in rate-limit counters, to prevent abuse. No access logs with IP addresses are kept.
• Address book (accounts): the email addresses you send requests to, and the names and companies you add. Kept until you delete them or your account. Linked address books (CardDAV, Pro and Team): read live when you use them and never copied; only the address, username and an encrypted app password are kept, until you unlink them.
• How you found Requester: a coarse source (a campaign, a search engine, a referring site or a Requester email) and the first page of the visit, recorded once when you create an account or send your first request. Kept in memory during the visit, without cookies; stored with your account, or with a pseudonymised email for senders.
• Feedback you send (rating, answers, message), kept with your account until you delete it; founders offer: the date you claimed it.

3. Purposes and legal bases

• Providing the service: sending requests, reminders and answers, verification, accounts and billing (performance of a contract).
• Security and abuse prevention: virus scan, rate limits, blocking abusive addresses (legitimate interest).
• Anonymous usage statistics to improve the service (legitimate interest).
• Browser analytics cookies (consent, which you can withdraw at any time).
• Keeping accounting records (legal obligation).

4. Service providers

We only share data with providers needed to run the service, bound by data processing agreements:

• Hostinger: server hosting the application and database, EU datacenter.
• Cloudflare: file storage (R2, EU jurisdiction) and DNS.
• Postmark (ActiveCampaign, United States): email delivery (requests, reminders, notifications, sign-in links and codes).
• Infomaniak: our own mailboxes (replies to support), Switzerland.
• Stripe: payments, paid plans only.
• Google: sign-in, only if you choose it.
• PostHog: anonymous statistics and, with your consent, browser analytics, EU servers.
• Team organisations that set up their own email server: their emails go out through that server, under the organisation's responsibility.

The virus scanner runs on our own server: files are never sent to a third party for scanning.

5. International transfers

The application, its database and the files are stored in the EU. Postmark, Stripe and Google may process data in the United States; these transfers rely on the EU-US and Swiss-US Data Privacy Framework and on standard contractual clauses.

6. How long we keep data

• Answers and files: deleted 7 days after the first download on Free; on Pro and Team, after the period the account chooses (1 day to 1 year after the first download, 30 or 60 days by default). Answers never downloaded: deleted at the latest 30, 90 or 180 days after submission.
• Requests: deleted with their last answer, or at the end of their answer window if unanswered (30, 90 or 180 days depending on the plan).
• Encryption keys of files: destroyed when the file is deleted.
• Verification codes, sign-in links, invitations and rate-limit counters: deleted at the latest 24 hours after they expire.
• Sessions: 30 days, then deleted.
• Accounts: until you delete them.
• Database backups taken before updates: deleted after 30 days. Files are never backed up.
• Administrator actions log and blocked addresses: kept for security as long as needed.
• Statistics: counts and dates of deleted requests, linked to a hashed (pseudonymised) email address so you can see your own statistics, and daily storage totals of paying accounts. Kept until the account is deleted, then anonymous.
• Invoices and payment records: kept by Stripe as long as accounting law requires (10 years in Switzerland).
• Data exports: deleted 7 days after the request.

7. Cookies and local storage

Necessary cookies and local storage keep you signed in, remember your verified email addresses, your language, currency, theme and consent. Analytics cookies are only set with your consent.

You can change your choice at any time:

8. Analytics

Without cookies and without personal data, the server counts anonymous events to improve the service: requests sent, delivered, answered, downloaded or expired, uploads and virus scan results, sign-ups and subscriptions. Requests and accounts are only identified by irreversible hashed identifiers; no email address, subject, message, file name or IP address is sent.

With your consent, PostHog (EU servers) also measures how the site is used: pages, clicks with text masked, page speed and errors, without email addresses, messages, file names or private links. Signed-in accounts are linked to a pseudonymous identifier, never the email address. Session recording is disabled.

9. Business prospects

We may send a short presentation of Requester to businesses whose address is published for business contact (for example info@ on their website or in a public directory). We keep the firm name, that address, the town, the public page where we found it, and the dates the email was sent, opened (approximately, through an image) and clicked.

Legal basis: legitimate interest in presenting our service to businesses. Every email says why it was received and has an unsubscribe link; after unsubscribing, we keep only a pseudonymised trace of the address so that it is never contacted again. You can ask for the data to be deleted at any time.

10. Security

Connections are encrypted (HTTPS), every file is encrypted with its own key, links only open for the owner of the email address, and every file is virus scanned. Details in the FAQ.

11. Your rights

Under the Swiss Federal Act on Data Protection and the GDPR, you can request access to your data, its correction or deletion, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time. Write to support@requester.io; we answer within 30 days. You can also download all your data at any time from your account page, or the organisation data from the organisation page (owners and admins).

You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with the data protection authority of your country of residence in the EU.

12. Children

Requester is not intended for children under 16. We do not knowingly collect their data.

13. Changes

We may update this policy when the service changes. The date at the top shows the last update; material changes are announced by email or in the service.