Privacy Policy

This Privacy Policy explains how IQ Factura (operated by Bogdan Sokolov, NIF Z1894474S, Calle Boca Del Rio 2, 1A, 33010 Oviedo, Spain — "we") processes personal data of users of the iq-factura.com service.

1. Data we collect

• Account data: email address, preferred locale, hashed login codes and session tokens.
• Company / billing data: emitter profile (name, NIF, address, IBAN), Stripe customer id, subscription status.
• Counterparty data: contact details you enter to issue invoices.
• Invoices: issued documents and generated PDFs stored in S3.
• Logs: IP address, user agent, request paths, kept for security up to 90 days.

2. Legal bases

Contract (Art. 6.1.b GDPR) for service delivery; legal obligation (Art. 6.1.c) for invoicing records; legitimate interest (Art. 6.1.f) for security logs and fraud prevention.

3. Processors

Stripe (payments, Ireland/US), Amazon Web Services (S3 storage, eu-central-1), our SMTP provider for transactional email, our VPS hosting provider in the EU. Data Processing Agreements are in place.

4. Retention

Invoice records: 6 years per Spanish tax law. Account data: until you delete your account. Security logs: 90 days.

5. Your rights

Access, rectification, deletion, restriction, portability, objection — email privacy@iq-factura.com. You may complain to the Spanish AEPD.

6. International transfers

Stripe may transfer data to the United States under Standard Contractual Clauses and the EU-US Data Privacy Framework.

7. Changes

Material updates are announced by email and on this page.