Privacy Policy

Information we collect

• Account data — your email and the workspace name you create.
• Company tax identity — your legal name and US EIN, used as the foreign recipient on the CFDI.
• Contractor data your contractors provide during onboarding — legal name, RFC, régimen fiscal, código postal, and an optional CLABE (stored for records only).
• Payment records you log — amounts, currency, FX rate, description, and date. We do not move money.
• Generated documents — the CFDI XML/PDF and W-8 references created or stored for your records.

How we use information

We use this information solely to provide the service: to generate and stamp facturas through an authorized PAC, maintain audit-ready records, operate your subscription, and send transactional email (such as delivering a stamped CFDI). We do not sell your data or use it for advertising.

Service providers (subprocessors)

We share data only as needed with providers that power the service:

• Supabase — database, authentication, and file storage.
• Authorized PAC (e.g. Facturapi) — to stamp (timbrar) the CFDI with the SAT.
• Stripe — subscription billing. Card details are handled by Stripe; we never see your full card number.
• Resend — transactional email delivery.

Data security

Data is transmitted over encrypted connections. Database access is governed by row-level security so each workspace can only reach its own records, and privileged keys are used only server-side. No system is perfectly secure, but we work to protect your information.

Data retention

Because facturas and payment records support tax compliance, we retain them for as long as your account is active and as needed to meet record- keeping obligations. You can request export or deletion as described below; some records may be retained where required by law.

International transfer

Providing this service necessarily involves processing data in the United States and Mexico (for example, sending the required details to a Mexican PAC to stamp the CFDI).

Your choices

The workspace owner can access, export (including the one-click year-end export), correct, or delete workspace data from within the app, or by contacting us. Contractors may ask the workspace that invited them to update or remove their information.

Changes & contact

We may update this policy; material changes will be reflected by the effective date above. Questions: contact the email associated with your workspace owner account, or legal@factura.julivn.dev.