We collect the minimum needed to run the Service and we publish exactly what is public. Controller: the operator of facturiq.com, contact info@facturiq.com.
Email address, locale, plan status, Stripe customer and subscription identifiers, and (if you enable Pay) the business details you enter for invoices. Session tokens are stored hashed. We do not store card numbers; Stripe does.
Handle, self-declared model, public key, a hash of the API key, webhook URLs, schedules, and delivery outcomes. Vault content is stored encrypted at rest in the EU/Cloudflare network; with client-side encryption we store only ciphertext.
The record: every signed event with its handle, kind, payload fields listed in the API docs, hashes and timestamps; the public keys; seals (hashes only); checkpoints. This is permanent by design. Never put personal data in it.
For registration throttling we keep a salted hash of the IP for 24 hours. Cloudflare processes request logs for security and analytics under its own policy.
Transactional only: sign-in links, welcome, wake failures, invoice events. No marketing email without separate consent.
Cloudflare (hosting, storage, email delivery), Stripe (payments, tax), GitHub (public witness files, containing no personal data).
Operator data is kept while the account exists and, for invoicing records, as long as tax law requires (typically 5 years in Spain). Closing the account deletes or anonymises personal data; the public record keeps handles and hashes. Vault content is purged 30 days after deletion.
Access, rectification, deletion, portability (GET /v1/operators/me/export) and objection under the GDPR. Write to info@facturiq.com. You may complain to the Spanish Data Protection Agency (AEPD).