Last Updated: 11/21/2025
ELD Technologies SL ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Factumo service.
This policy applies to personal data processed through our website, application, and related services (collectively, the "Service").
The data controller responsible for your personal data is:
You can contact us regarding any questions about this Privacy Policy or to exercise your data protection rights using the contact information above.
When you use our Service, we collect:
Payment card information is collected and processed directly by our payment processor, Stripe. We do not store complete payment card details on our servers. We receive only limited information (last 4 digits, card brand, expiration date) for display purposes.
Under GDPR, we process your personal data based on the following legal grounds:
We use your personal data for the following purposes:
We share your personal data with trusted third-party service providers who assist us in operating our Service. These processors act on our instructions and are bound by Data Processing Agreements (DPAs):
Important: Our primary infrastructure, including all database servers and application hosting, operates within the European Union to minimize data transfers outside the EEA.
We may disclose your data when required by law:
Important: When you add your clients' personal data to Factumo, you act as a data controller for that data. You are responsible for ensuring you have a legal basis to process your clients' data and for complying with GDPR and Spanish data protection law in your relationship with them. We act as a data processor for this client data on your behalf.
Your data is primarily stored and processed within the European Union. All our core infrastructure, including database servers (Supabase) and application hosting, operates on EU-based servers to ensure your data remains within the EEA.
However, some of our service providers may process limited data outside the EEA (such as for email delivery or payment processing support functions). When we transfer your data outside the EEA, we ensure appropriate safeguards are in place:
Data Residency: Your invoices, estimates, client data, and all business documents are stored exclusively on EU servers and are not transferred outside the European Economic Area for storage or primary processing.
You have the right to obtain information about the specific safeguards we use for any international transfers by contacting us at privacy@factumo.com.
We retain your personal data for the following periods:
After the retention period expires, we will securely delete or anonymize your personal data, except where we are required to keep it longer by law.
Under GDPR and Spanish data protection law (LOPDGDD), you have the following rights:
You have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data and receive information about how it is processed.
You can request correction of inaccurate or incomplete personal data. You can update most information directly in your account settings.
You can request deletion of your personal data in certain circumstances. However, we may need to retain certain data to comply with legal obligations (such as the 7-year retention requirement for financial records under Spanish tax law).
You can request that we limit the processing of your personal data in certain situations (e.g., while we verify data accuracy or assess whether we have legitimate grounds for processing).
You have the right to receive your personal data in a structured, commonly used, and machine-readable format (CSV, JSON) and to transmit it to another controller. You can export your data from your account settings.
You can object to processing based on legitimate interests or for direct marketing purposes at any time.
Where we process your data based on consent, you have the right to withdraw that consent at any time (e.g., for marketing communications).
To exercise any of these rights, please contact us at privacy@factumo.com. We will respond to your request within one month (or inform you if we need an extension up to two additional months for complex requests).
We use cookies and similar tracking technologies to provide, secure, and improve our Service. For detailed information about the cookies we use and your choices, please see our Cookie Policy.
Cookie types we use:
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage:
Despite our security measures, no system is 100% secure. If you suspect unauthorized access to your account, please contact us immediately at support@factumo.com.
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will delete such information.
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Any analytics we perform are for aggregate statistical purposes only and do not result in automated decisions about individuals.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.
If you have questions about this Privacy Policy or our data protection practices, please contact us:
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Spanish Data Protection Authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid, Spain
Phone: +34 91 266 35 17
Website: www.aepd.es
Electronic Registry: sedeagpd.gob.es
You also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
📝 Your Privacy Rights Summary
Under GDPR, you have the right to: access your data, correct inaccuracies, request deletion (subject to legal retention requirements), restrict processing, port your data to another service, object to processing, and withdraw consent for optional features. Contact us at privacy@factumo.com to exercise any of these rights.