Privacy Policy

This Privacy Policy explains how IQ Factura (operated by Bogdan Sokolov, NIF Z1894474S, Calle Boca Del Rio 2, 1A, 33010 Oviedo, Spain — "we") processes personal data of users of the iq-factura.com service.

1. Data we collect

• Account data: email address, preferred locale, hashed login codes and session tokens.
• Company data: emitter profile (name, NIF, address, IBAN) and the encrypted FNMT signing certificate you upload for Verifactu.
• Counterparty data: contact details you enter to issue invoices.
• Invoices: issued documents and generated PDFs stored in S3.
• Logs: IP address, user agent, request paths, kept for security up to 90 days.

2. Legal bases

Contract (Art. 6.1.b GDPR) for service delivery; legal obligation (Art. 6.1.c) for invoicing records; legitimate interest (Art. 6.1.f) for security logs and fraud prevention.

3. Processors

Amazon Web Services (S3 storage, eu-central-1), our SMTP provider for transactional email, our VPS hosting provider in the EU, Google (Gemini API for address formatting). Data Processing Agreements are in place.

4. Retention

Invoice records: 6 years per Spanish tax law. Account data: until you delete your account. Security logs: 90 days.

5. Your rights

Access, rectification, deletion, restriction, portability, objection — email privacy@iq-factura.com. You may complain to the Spanish AEPD.

6. International transfers

Google (Gemini) may process address-formatting requests outside the EU under Standard Contractual Clauses. No invoice payloads or fiscal data are sent.

7. Changes

Material updates are announced by email and on this page.