Draft from September 2026, pending review by a lawyer.
Controller: Unai España (Plentia). Contact: PENDING. The address is not published until we have checked that it actually receives mail.
Email, name and password (encrypted by Supabase Auth) or Google account, to create and protect your account. Tax ID, legal name, registered address and logo, to issue your invoices and work out your taxes. Your tax situation, to prepare your returns. Your subscription details, to bill it. Orders, products and fees from your stores once you connect them, and your customers’ details included in orders and invoices, to invoice and classify each sale. Expenses and receipt photos, to deduct them. Ad spend once you connect Meta Ads. Only what each feature strictly needs. We do not profile you or sell data.
Supabase (database, authentication and files, in the European Union), Cloudflare (hosting), Stripe (payments; we never see your full card), Resend (emails), the service that sends the Verifactu records to the AEAT, if one is used, once it is live, and Shopify, WooCommerce and Meta only to read what you authorise when connecting.
Account data, for as long as you have an account. Invoices, ledgers and invoicing records, for the legal retention periods. That is why deleting an account archives rather than destroys: the account stops being accessible, the data is locked solely to meet legal obligations and is deleted when those periods end. Everything else is deleted within 30 days.
Access, rectification, erasure (within the legal retention limits), objection, restriction and portability, by writing to the contact address in the previous section (PENDING domain registration). You can also complain to the Spanish Data Protection Agency.
Sign-in by account and password or Google, data isolated per account (each account can only read its own), encrypted platform tokens, secrets kept out of the code and encrypted connections.