Privacy Policy

Last updated: 1 February 2026

1. General Information

SME Analytica (hereinafter "we", "our" or "the company") is committed to protecting the privacy of Facturia users. This Privacy Policy describes how we collect, use, store, and protect your personal information.

Company Details

  • Company Name: SME Analytica
  • Email: privacy@smeanalytica.com
  • Website: smeanalytica.com

2. Information We Collect

2.1 Registration Information

  • Company name
  • NIF/CIF
  • Email address
  • Phone number
  • Postal address

2.2 Billing Information

  • Issued and received invoice data
  • Client and supplier information
  • Digital certificates
  • Records of sending to the AEAT, if you activate sending

2.3 Technical Information

  • IP address
  • Browser type
  • Activity logs
  • Cookies and similar technologies

3. How We Use Your Information

  • Service delivery: Generate your invoices and, once available, their VeriFactu records and, only if you activate and confirm sending, send the records to the AEAT
  • Invoicing record: Keep the invoicing record of each invoice (the chained hash and QR code are in preparation)
  • Technical support: Resolve issues and provide assistance
  • Service improvement: Analyse usage to improve features
  • Communications: Send important service notifications
  • Security: Detect and prevent fraudulent activities

4. Legal Basis for Processing

Contract Performance

Processing is necessary for the performance of the Facturia service contract.

Legal Obligation

Compliance with obligations established by the AEAT VeriFactu regulations.

Legitimate Interest

Service improvement, security and fraud prevention.

5. Sharing Information

We do not sell, rent or share your personal information with third parties, except in the following cases:

  • AEAT: Only if you activate and confirm sending, we send the AEAT the invoicing records of the invoices you confirm
  • Service providers: Companies that help us operate the service
  • Legal obligations: When required by law or competent authorities
  • Protection of rights: To protect our legal rights

6. Data Security

We implement appropriate technical and organisational security measures to protect your information:

Encryption

All data is encrypted in transit and at rest using industry standards.

Controlled Access

Access restricted to authorised personnel with multi-factor authentication.

Monitoring

Continuous system monitoring to detect suspicious activities.

Backups

Regular backups and disaster recovery plans.

7. Your Rights

Under the GDPR, you have the following rights:

Right of access
Right of rectification
Right of erasure
Right to restriction
Right to portability
Right to object
Right to withdraw consent
Right to lodge a complaint

To exercise these rights, contact us at:privacy@smeanalytica.com

8. Data Retention

We retain your personal information for as long as necessary to:

  • Provide the service while your account is active
  • Comply with legal obligations (minimum 6 years for tax data)
  • Resolve disputes and enforce agreements

9. Contact

If you have questions about this Privacy Policy or the processing of your personal data, you can contact us:

10. Changes to This Policy

We reserve the right to update this Privacy Policy. Significant changes will be notified by email or via a notice on our website. We recommend reviewing this policy periodically to stay informed about how we protect your information.