Privacy Policy

1. Data Controller

2. Data We Collect

In the course of our services, we collect the following data:

Identification and contact data:

• Name and surname or company name
• Tax ID (NIF/CIF/DNI/NIE)
• Postal and email address
• Phone number

Fiscal and business data:

• Official registry registration data
• Economic activity information
• Invoicing and transaction data

Technical data:

• IP address and browsing data
• Device and browser information
• Platform access and usage logs

3. Processing Purposes

We process your data for the following purposes:

• Service provision: Account management, invoice and budget issuance, and compliance with fiscal obligations
• Communication: Sending service notifications, condition changes, and technical support
• Legal compliance: Obligations derived from fiscal and commercial regulations, including communication with the Tax Agency
• Service improvement: Usage analysis to improve the platform and user experience
• Security: Fraud prevention and platform protection

4. Legal Basis for Processing

The processing of your data is based on:

• Contractual performance: For the provision of contracted services
• Legal obligation compliance: Spanish fiscal and commercial regulations
• Legitimate interest: For the improvement of our services and fraud prevention
• Consent: For sending commercial communications, where applicable

5. Data Recipients

Your data may be communicated to:

• Tax Agency: In compliance with VeriFactu regulations and fiscal obligations
• Service providers: Companies providing technical services (hosting, security, etc.), with appropriate contractual guarantees
• Public authorities: When required by law or court order

We do not sell or share your data with third parties for commercial purposes.

6. International Transfers

Your data is stored on servers located in the European Union. If any international transfer is necessary, it will be carried out with appropriate guarantees in accordance with the GDPR, such as standard contractual clauses or adequacy decisions of the European Commission.

7. Data Retention

We retain your data for the following periods:

• Account data: While your account remains active and, subsequently, during the legal statute of limitations
• Fiscal data and invoices: Minimum 4 years in accordance with tax regulations
• Browsing data: Maximum 12 months

8. Your Rights

Under the GDPR, you have the right to:

• Access: Know what data we process about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request the deletion of your data when legally appropriate
• Restriction: Request the restriction of processing under certain circumstances
• Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interest

To exercise these rights, contact us through the platform's support channels. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD).

9. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. This includes data encryption, access control, backups, and periodic security audits.

10. Modifications

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of any significant changes through the platform or by email.