Legal and privacy

Pricing and pilots

The pricing page is the basis for our standard offer. Biber Start has no subscription fee, while the published 5% success fee for mediated and accepted jobs still applies. Handwerk, Betrieb and Unternehmen are paid plans. We confirm the applicable version when you sign; later website changes do not change your agreement.

A pilot offer specifies the plan, dates, expected effort and every included or separately charged service. Twelve free licence months apply only if expressly agreed and do not automatically waive success fees or extras. Under a separately agreed pilot, you may leave at any time without notice or an exit fee; waived base fees are not reclaimed. Services expressly ordered and not waived remain payable. A paid follow-on subscription requires your fresh express acceptance. Feedback and workshops are arranged together; custom development or compensation requires a separate agreement.

Confidentiality and materials already shared

Our NDA also covers documents and conversations shared for the cooperation before signature. Rights to your materials and protected process knowledge remain with their respective owners. General feedback does not authorise publishing confidential data in the marketplace or using it to train general-purpose AI models.

We check the actual case to establish what materials we hold, how they were used and who had access. We do not confirm deletion or non-use without checking. An instructed processing pause covers the affected active use, imports, synchronisation and onward disclosures; necessary secure retention and protective measures are documented separately. A later signature does not retroactively authorise earlier processing.

Employee data and integrations

A DPA and its appendices must be agreed before we process personal data for your company, including during a free pilot or test import. Your company determines lawful purposes and access and informs its employees. A DPA alone does not authorise employee monitoring.

You can use Baubiber without DATEV. Connecting your accounting system is optional and agreed specifically. Your company checks and approves working times before passing them to payroll. Read-only access, visibility and disconnection are checked against the actual integration permissions. Disconnecting an integration does not automatically delete data already stored.

Contracting party and continuity

Baubiber AG in Zug is being incorporated. Before signature, the actual contracting party, address and authorised representative must be identified. The future company does not automatically take over earlier agreements; any required transfer is expressly arranged.

The SaaS agreement provides at least three months’ notice of a planned complete service closure. For an unforeseen closure, we notify you without undue delay and assist as far as still possible. Prepaid fees for services no longer provided are refunded. A complete company export is assisted on request: CSV or JSON with field descriptions and relationships, plus original files. We do not promise an always-available complete self-service export. Deletion confirmation distinguishes completed erasure from statutory retention and remaining provider or backup copies with deadlines.

Your SaaS agreement

You receive one SaaS agreement covering price, scope, term, cancellation and support. A data processing agreement (DPA) has two appendices: security and service providers. Confidentiality, AI use and data return are included in this pack.

Standard support is included in your SaaS plan: Monday to Friday, 09:00–17:00 Europe/Zurich, excluding public holidays in Zug. It does not include 24/7 coverage or guaranteed response times. Premium support and fixed SLA commitments are paid add-ons, including for the Unternehmen plan. Registration alone does not start a paid subscription.

Data locations and GDPR

The API and voice servers are configured for Frankfurt. Our Neon PostgreSQL database is hosted in the AWS Europe Central 1 (eu-central-1) region in Frankfurt, Germany. Files and media use a private Tigris bucket configured for global placement. Email, AI, verification and other services may process data outside Germany. Locations, backups and remote access must be confirmed in the provider appendix for your service. We currently make no blanket Germany-only, EU-only or Switzerland-only commitment.

GDPR and DSGVO refer to the same regulation. Our DPA covers personal data processed on your company’s instructions. The EU recognises Switzerland as providing adequate data protection. Additional recipients in other countries still need a valid transfer basis.

Your data, export and deletion

Rights to your data remain with you and the respective rights holders. The SaaS agreement gives no blanket permission to use customer data for advertising or training general-purpose AI models.

Request access, correction, export or deletion through the privacy contact in our privacy notice. For data processed on behalf of a company, that company decides the request. Legal retention duties and other people’s rights are taken into account.

For company data, we agree the export scope and deletion periods, including providers and backups. Deleting an account does not automatically erase every company or provider record. The complete process must be confirmed before making that commitment.

Security and AI

Baubiber uses passwordless sign-in and role- and project-based permissions. The DPA appendix describes the other security measures. We do not currently present Baubiber as ISO 27001 certified or SOC 2 audited.

Bobo and other AI features use external services described in the privacy notice. Have results checked before using them for construction, cost or safety decisions.