Privacy Policy
This privacy policy explains how InSoft Online processes personal data when you use an InSoft account: on insoftonline.de, in the InSoft customer app, and in InSoft Rev, our online booking service at insoft-booking.com. The InSoft POS tablet app has its own privacy policy.
Version 1.0 · Last updated 23 September 2026
1. Controller
The controller responsible for the processing described here is InSoft Online, Karlstraße 18, 72336 Balingen, Germany · info@insoftonline.de · +49 151 16908778. Further company details are listed in the Impressum.
2. What this policy covers
One InSoft account signs you in to insoftonline.de, the InSoft customer app and InSoft Rev. This policy covers that account, the website, orders placed with us, and the InSoft Rev booking service.
It does not cover the InSoft POS tablet app, which is described in the separate "InSoft POS Privacy" policy.
3. Your InSoft account
When you register we store your company name, your name, email address, phone number, country and preferred language, and your password in protected form. We use this data to create and run your account, to confirm your email address, to let you sign in, and to contact you about your account, orders and subscriptions.
We record sign-in times and failed sign-in attempts to protect your account against misuse.
4. Sign in with Google or Apple
You can sign in with your Google or Apple account. The sign-in window is run by Google Firebase Authentication. If you choose this, we receive from Google or Apple only your name, your email address and a technical account identifier. We do not receive your Google or Apple password.
We use this data only to create your InSoft account or sign you in to it, and to link it to an existing InSoft account with the same email address. We do not use it for advertising, we do not sell it, and we do not share it with third parties except the service providers that run the sign-in for us.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Orders, subscriptions and payments
When you order products or subscriptions we process your order details, billing and delivery address, VAT number if given, and the payment status. Subscriptions are recorded with their start date, end date and the modules they unlock.
Payments are handled by payment providers such as PayPal, Klarna and Stripe. We do not receive or store your full card or bank details; we only receive the confirmation that a payment was made.
6. InSoft Rev (online booking)
Businesses use InSoft Rev to take appointments online. For the business owner we process the account data described above and the business details they enter (name, address, phone, services, staff and opening hours).
When a customer books an appointment with a business, we process the customer's name, phone number, the booked service and time, and any details the business asks for. For this booking data the business is the controller; InSoft Online processes it on the business's behalf. Questions about a booking should be sent to the business first.
Booking confirmations and reminders may be sent by WhatsApp to the phone number given with the booking.
7. Service providers
We use carefully selected service providers who process data on our behalf: hosting providers for our servers, Google Firebase for sign-in and app notifications, email providers for account and order emails, WhatsApp messaging for booking notifications, and the payment providers named above.
Some of these providers may process data outside the European Union. Where this happens, the transfer is based on an adequacy decision of the European Commission or on standard contractual clauses.
9. Legal bases
We process personal data to perform our contract with you and the steps before it (Art. 6(1)(b) GDPR), to meet legal obligations such as tax record keeping (Art. 6(1)(c) GDPR), and for our legitimate interest in running and securing our services (Art. 6(1)(f) GDPR). Where we ask for your consent, we process data on that basis (Art. 6(1)(a) GDPR), and you can withdraw it at any time.
10. How long we keep data
We keep account data for as long as your account exists. When you delete your account we delete or anonymise your data, except where the law requires us to keep it longer — for example invoices and order records, which we keep for up to ten years under German commercial and tax law.
Booking data in InSoft Rev is kept as long as the business keeps its account, or until the business deletes it.
11. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on legitimate interests. To use these rights, or to delete your account, email info@insoftonline.de.
You also have the right to complain to a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
12. Security
All connections to our services are encrypted (HTTPS). Access to personal data is limited to the staff who need it for their work, and sign-in is protected against repeated guessing.
13. Changes
We may update this policy when our services change. The current version is always available on this page, with its date at the top.
14. Contact
For any question about your data: InSoft Online, Karlstraße 18, 72336 Balingen, Germany · info@insoftonline.de · +49 151 16908778.