Privacy Policy

TL;DR: We process data as described below to run the service. We use reasonable security measures to protect it. No system is 100% secure — review this policy, your account settings, and the Terms of Service (including limitations of liability and dispute terms). Use InstaFactura only if you accept these practices.

Effective Date: April 22, 2025
Contact Email: insta.factura.mx@gmail.com
Domain: https://instafactura.com

InstaFactura ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our services at instafactura.com.

1. What Data We Collect

We collect the following types of data when you use InstaFactura:

• Account Data: Email address, display name, optional avatar image. No passwords are stored.
• Communication Data: Email messages we send for verification, updates, or newsletters.
• Uploaded Files: Invoices, receipts and any other files that you upload, which may contain sensitive personal or financial information.
• Session Metadata: IP address, browser type, and timestamps for session security.
• Service Usage Data: Metadata related to your activity within the platform (e.g. number of uploaded files, AI tokens usage).

2. How We Use Your Data

We use your data to:

• Create and manage your InstaFactura account
• Store and analyze your uploaded files
• Improve your financial organization through AI-powered insights
• Communicate with you about your account and service updates
• Comply with legal obligations

3. AI-Powered Processing

We use external AI services, specifically OpenAI (ChatGPT), to:

• Extract and interpret information from invoices using OCR
• Analyze financial data for better user insights

By using InstaFactura, you consent to the transfer of relevant data to these third-party providers for the purpose of processing. These providers may operate outside the EU, in compliance with appropriate safeguards under GDPR (e.g., SCCs).

4. Cookies and Tracking

InstaFactura does not use tracking cookies or third-party analytics. We only collect aggregate access logs and usage statistics via Cloudflare for infrastructure performance and security.

5. Data Storage and Security

• All data is stored on servers in Germany, hosted by Hetzner Cloud.
• Files and personal data are stored in an unencrypted form.
• Access to personal data is limited to authorized team members for debugging or support purposes only.

While we strive to maintain reasonable safeguards, no system is completely secure. Use the platform at your own risk.

6. Legal Basis for Processing

We process personal data based on:

• Your consent, which you grant when you create an account or upload data
• Our contractual obligations to provide the services you signed up for

You can withdraw consent at any time by deleting your account or contacting us directly.

7. Data Retention

We retain your data:

• As long as your account remains active
• Until you request deletion

Once deleted, your data is removed from our systems, though some residual logs may remain for a short time due to backups or operational needs.

8. Your Rights (under GDPR and similar laws)

As a user, you have the right to:

• Access and review your personal data
• Correct or update inaccurate information
• Download a full backup of your data
• Request permanent deletion of your account and associated data
• Object to certain forms of processing
• Lodge a complaint with a data protection authority

To exercise your rights, contact us at insta.factura.mx@gmail.com.

9. Children's Privacy

InstaFactura is not intended for users under the age of 18. We do not knowingly collect or store data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated "Effective Date." We encourage you to review the policy periodically.