Delete account and data

Last updated: September 2026

HREasy is HR software for companies. Your access belongs to your employment relationship — which is why the app deliberately has no button that deletes the account on the spot. This page explains who can trigger a deletion, how to request one, and which data must be retained for legal reasons.

1. Why there is no delete button

Your account was not opened by you but created by your employer. They decide about the personnel data it contains and are the controller under data protection law. We operate the software on their behalf (processing on behalf of, Art. 9 revFADP, Art. 28 GDPR).

If the app deleted an account at the push of a button, it would also remove working hours, holiday entitlements and payroll records your employer is required to keep. As long as the employment relationship exists, the access is part of it.

2. How to request deletion

With your employer. Contact your HR department. They can block your account, withdraw access and order your data to be deleted, unless a retention obligation stands in the way.
Directly with us. Write to info@hreasy.ch with the subject "Deletion". We forward your request to your employer and confirm this to you. Without their instruction we may not delete personnel data — not even at your request, because we would otherwise be disposing of data that is not ours.
After leaving. When the employment relationship ends, access is blocked. The data is deleted once the retention periods have expired (see section 4).

3. What is deleted immediately

On your employer's instruction we delete without delay and in full:

credentials (password hash, sign-in sessions)
uploaded receipts and documents, unless they form part of the accounts
free-text notes and messages
device and session data from the app

Blocking access takes effect immediately: an existing sign-in becomes invalid within one minute, including on a device that is currently open.

4. What must be retained — and for how long

These periods are set by law, not by us. Your employer commits an offence by falling short of them:

Payroll and accounting records: 10 years from the end of the financial year (Art. 958f CO).
Time records and working-hours registers: 5 years (Art. 46 LA in conjunction with Art. 73 OLA 1).
Social insurance data: according to the periods in the AHVG, UVG and BVG, as a rule up to ten years after contributions end.
Records relating to pending legal proceedings: until these have been finally concluded.

Such data is no longer shown in the portal after blocking and is retained solely for the statutory purpose. It is deleted once the period expires.

5. Your other rights

Regardless of deletion, you have the right to information about the data processed about you, to rectification of incorrect entries and to release in a common format (Art. 25 ff. revFADP; Art. 15 ff. GDPR where applicable). You assert these rights against your employer; we support them in doing so.

If you disagree with the answer, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

6. Contact

We answer questions about deletion at info@hreasy.ch. We reply within 30 days. If we need longer, we tell you beforehand why.