Privacy policy
Last updated: May 27, 2026
We respect your privacy. Here we explain what data we process, why, and how you can exercise your rights.
1. Data controller
The controller of your personal data is Invoice Generator, reachable at alesx2soporte@gmail.com.
2. Data we process
We process the following categories of data:
- Account data: email address and encrypted password.
- Billing data: company name, tax ID (CIF/NIF), registered address, clients and invoice line items.
- Technical data: IP address, browser, operating system and pages visited, collected for analytics and security purposes.
3. Purpose and legal basis
We process your data to:
- Provide the Service and keep your account running (performance of a contract).
- Meet tax and accounting obligations (legal obligation).
- Improve the product through anonymized analytics and service communications (legitimate interest).
4. Retention
We keep your data while your account is active. After it is closed, billing data is kept for the mandatory legal periods (typically 6 years in Spain) and account data is deleted or anonymized within 30 days at most.
5. Recipients
We do not sell or hand over your data to third parties. We only share information with providers of essential technical services:
- Hosting and database providers.
- Web analytics and product metrics services.
- Payment gateways, where applicable.
All providers meet the safeguards required by the GDPR and have signed data processing agreements.
6. Your rights
As the data subject, you have the right to:
- Access, rectify and erase your data.
- Object to processing and request its restriction.
- Request data portability.
- Withdraw your consent at any time.
You can exercise these rights by writing to alesx2soporte@gmail.com. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing does not comply with the regulations.
7. Security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, accidental loss or destruction, including encryption in transit (HTTPS), secure password storage and regular backups.