This is an informational translation provided for convenience. The Spanish-language version is the only legally binding one under Peruvian law. If anything here conflicts with the Spanish original, the Spanish original controls.
1. Data controller
MULTISERVICIOS KADA EIRL (RUC 20612829579), the operator of factsimil, is the controller for personal data collected through this website and the Service. For any questions about this policy, write to info@factsimil.com.
2. Legal framework
We process personal data in accordance with Law No. 29733, Peru's Personal Data Protection Law, its implementing regulation approved by Supreme Decree No. 003-2013-JUS, and other applicable Peruvian regulations.
3. Data we collect
We collect personal data at two distinct points:
- Contact form and access requests: name, email address, company, and the content of the message you send us.
- Service account: name and email of the users you manage within your tenant, your company's legal name and RUC, and technical access metadata (IP address, login date and time) for security purposes.
4. Data we process on your behalf
When you use the API to issue payment receipts, factsimil processes your end customers' data (for example, name, RUC/DNI, and address of the buyer) as a data processor — that is, on your behalf and under your instructions, as the controller of that data. You, as the Customer, are responsible for having sufficient legal basis with your own customers for that processing.
5. Purpose of processing
We use the data we collect directly to:
- Respond to access requests, support inquiries, and sales questions.
- Create and manage your account, and provide the contracted Service.
- Issue factsimil's own payment receipts (for billing the Service) when applicable.
- Prevent fraud, abuse, and unauthorized access (for example, via anti-bot verification on forms).
- Comply with legal and tax obligations.
- Understand aggregate website usage through analytics, to improve it.
6. Legal basis
Processing is based on performance of the service agreement with the Customer, your consent when submitting the contact form, compliance with legal obligations applicable to factsimil, and our legitimate interest in keeping the platform secure and improving the website.
7. Cookies
We use essential, anti-bot verification, and analytics cookies. Details on each one, its purpose, and how to disable it are in our Cookie Policy.
8. Processors and third parties
We share personal data with the following third parties, only to the extent necessary to provide the Service:
- SUNAT, as the legal recipient of the electronic receipts transmitted through your account.
- Infrastructure and hosting providers, which store and process data under confidentiality agreements.
- Cloudflare (Turnstile), for anti-bot verification on the contact form.
- Google Analytics, for aggregate website usage statistics.
We don't sell personal data to third parties or use it for advertising unrelated to the Service.
9. International data transfer
Some of our infrastructure providers and the services mentioned above may process data outside Peru. In those cases, we require reasonable contractual or technical guarantees (encryption in transit and at rest, confidentiality agreements) equivalent to the protection level required by Peruvian regulation.
10. Retention period
We retain your account data and issued receipts while the contractual relationship is active and, afterward, for the period required by Peruvian tax regulation for retaining electronic payment receipts (currently 5 years). Contact-form data is retained for up to 24 months from the last contact, unless you exercise your cancellation right sooner.
11. Security measures
We apply reasonable technical and organizational measures to protect personal data: encryption in transit (TLS) for all communication with the API and web panel, encryption at rest for our customers' digital certificates (.p12) — decrypted only in memory at the moment of signing —, hashed passwords, and role-based access control within each tenant.
12. Your rights (ARCO)
As a data subject, you have the right to access, rectify, cancel, and object to the processing of your data (ARCO rights), as well as to request portability where applicable. You can exercise these rights by writing to info@factsimil.com, stating your name, the right you wish to exercise, and attaching a means to verify your identity. We'll respond within the timeframes set by Law No. 29733.
13. Minors
The Service is aimed at businesses and professionals, and isn't intended for minors. We don't intentionally collect data from minors.
14. Changes to this policy
We may update this policy to reflect regulatory changes or changes in our data-processing practices. We'll publish the current version on this same page along with the last-updated date.
15. Contact and supervisory authority
For questions about this policy or the processing of your data, write to info@factsimil.com. If you believe your rights haven't been addressed, you can file a complaint with Peru's Autoridad Nacional de Protección de Datos Personales (Ministry of Justice and Human Rights).