Privacy Policy - Facturo

Overview

At Facturo, we are committed to protecting your privacy and being transparent about how we collect, use, and share your information.

1. Information We Collect

1.1 Personal Information

• Name and email: To create and manage your account
• Contact information: Phone number, address, and other contact details you enter for your profile, business, or customers
• Billing and financial information: Customers, invoices, estimates, expenses, products, services, amounts, taxes, and related documents
• User content: Receipts, photos, logos, signatures, files, notes, and data extracted through scanning when you use those features
• Payment and subscription information: Subscription status, purchase history, and data needed to activate your plan. Payments are processed by Apple, Google Play, or Paddle; we do not store full card numbers
• Business information: Company name, address, phone, website, tax information, and data used to generate documents

1.2 Technical Information

• Device data: Device type, operating system, app version, and technical signals needed to operate the service
• Usage data: Screens visited, feature interactions, and usage events to understand and improve the product
• Diagnostics: Crash, performance, and technical error data
• Notifications: Push notification tokens and preferences needed to send service alerts
• Identifiers: User ID, installation/device identifiers, authentication tokens, and session tokens

1.3 Analytics and App Tracking Transparency

We use Firebase Analytics to measure app usage, detect issues, and improve features. We do not use this information to track you across third-party apps or websites, we do not sell your data, and we do not use the iOS advertising identifier (IDFA) unless we state that in the future and request the required permission.

2. How We Use Your Information

2.1 To Provide the Service

• Create and manage invoices
• Store customer information
• Process and validate subscriptions through Apple, Google Play, or Paddle
• Process receipts or documents through scanning when you request it
• Send service notifications and account-related alerts

2.2 To Improve the Service

• Analyze usage patterns with analytics tools
• Identify technical issues, crashes, and performance problems
• Develop new features
• Optimize performance

3. Sharing Information

3.2 Service Providers

We share information only with:

• Apple: For payment processing and authentication
• Google Play: For Android payment processing when applicable
• Paddle: For web payments, billing, and subscription portal when applicable
• Supabase: For authentication, database, file storage, and backend functions
• Firebase / Google: For analytics, push notifications, installation identifiers, messaging, and technical diagnostics
• Google Gemini / ML Kit: For document scanning and data extraction when you use capture features
• Email providers: For service notifications, support, or transactional messages

3.3 No Data Sale or Advertising Tracking

We do not sell personal data. We do not use your data for third-party advertising or to track you across apps or websites owned by other companies. If we add advertising, remarketing, or IDFA use in the future, we will update this policy and request the required permissions.

4. Data Security

4.1 Security Measures

• Encryption: We use HTTPS/TLS for data in transit and infrastructure-provided encryption at rest
• Access control: Data is protected by authentication, access policies, and user-level controls
• Secure local storage: Sensitive tokens and credentials are stored using platform-secure mechanisms where appropriate
• Signed URLs: Private files are served through temporary access links where applicable
• Best practices: We follow reasonable security practices for mobile apps and web services

4.2 Data Retention

• Account data: Until you request deletion or while needed to provide the service
• Billing, purchase, and document data: For as long as needed to operate the service and meet legal, tax, accounting, security, or fraud-prevention obligations
• Technical, analytics, and diagnostics data: For the period needed for analysis, security, troubleshooting, and service improvement
• Deleted data: We process deletion requests within 30 days, except for information we must retain by law or legitimate reasons

5. Your Privacy Rights

5.2 Exercising Your Rights

To exercise your rights:

1. Log in to the app
2. Go to Profile > Account > Delete Account
3. Follow the instructions
4. Or contact us: facturohn@gmail.com

5.3 Account Deletion

• Process: Profile > Account > Delete Account
• Deleted data: All your personal information
• Timeline: Permanent deletion within 30 days
• Exceptions: Legally required data

6. Changes to This Policy

6.1 Updates

We may update this policy to:

• Reflect practice changes
• Comply with new laws
• Improve transparency
• Add new services

7. Contact and Questions

7.2 Complaints and Claims

If you have privacy complaints:

1. Contact us first
2. We'll respond within 30 days
3. You can contact data protection authorities
4. We seek to resolve all concerns