Privacy policy and personal data processing
Courtesy translation. The Spanish version governs: Faduex operates under Colombian law and the Spanish text is the one that applies to your rights as a data subject. Leer en español.
This policy explains how Faduex processes your personal data, in accordance with Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and the other Colombian rules on personal data protection. By creating your account you give us your prior, express and informed authorization for the processing described here.
1. Data controller
| Controller | Yeison Isaac Llanten Lucio |
|---|---|
| Address | calle 48N #9 - 126 |
| soporte@faduex.com |
2. What data we process
| Data | What it includes | Why |
|---|---|---|
| Account | Name, email, password (stored only as an irreversible hash, never the text), sign-in method (email, Google or Apple) and the date you accepted the terms and confirmed you are of legal age. | Create and protect your account. |
| Preferences | Time zone, reminder time, reminder types and app theme. | Send you reminders at the time you chose. |
| Invoices and payments | Supplier, amount, due date, invoice number, note, repetition, status, amount and date paid and, if you add it, the receipt. | Show your list and work out what is due. |
| Suppliers | Name, senders or domains you authorize and, if you save it, the password of a protected PDF (encrypted and impossible to view again). | Recognize your invoices and open protected files. |
| Forwarded emails | Only from senders you authorize: sender, subject, attachments (for example XML, PDF or image) and the reading result. | Create your invoices automatically. |
| Invoice photos | The photo you upload and the text read from it. | Read supplier, amount and due date. |
| Device | Push notification identifier, platform, app version and last activity. | Send reminders to your phone. |
| Technical data | Server logs: user identifier, requested path, result and time. | Security, abuse prevention and error diagnosis. |
We do not process sensitive data or data of minors. The service is only for people over 18.
3. What we do not do
- We do not sell your data or use it for advertising.
- We do not enter your email account: we only receive the messages you set up to forward to your Faduex address.
- We do not store in your account emails from senders you did not authorize or the rest of your inbox.
- The current version of the app and this site use no third-party analytics tools or tracking cookies.
4. Purposes
- Create and manage your account and authenticate you.
- Record your invoices, read them from emails or photos and calculate their due dates.
- Send you reminders and notifications about your invoices.
- Handle your inquiries, requests and complaints.
- Keep the service secure and prevent fraud or abuse.
- Comply with legal obligations.
5. Who we share data with
We use providers that process data on our behalf (processors). They use it only to provide the service to us, not for their own purposes.
| Provider | What it does |
|---|---|
| Amazon Web Services | Hosting, database, file storage, running the service, and sending and receiving email. |
| Google (Firebase) | Sign-in with Google and Apple, and sending push notifications. |
| Apple | Sign in with Apple and notification delivery on iPhone. |
| Cloudflare | DNS and publishing of this website. |
We may also hand over information to an authority when a rule or a court order requires it.
6. International transfer
Faduex’s servers are in the United States (AWS Virginia region). By accepting this policy you authorize the transfer and transmission of your data to that country for the purposes described. We require our providers to apply security measures consistent with Colombian rules.
7. How long we keep your data
| Data | Period |
|---|---|
| Account, invoices, suppliers and preferences | While your account is active. |
| Deleted account | 30-day grace period to recover it; after that everything is erased. |
| Verification codes | 10 minutes. |
| Notification inbox | 60 days. |
| Forwarded emails and photos used for reading | A short time; then they are deleted automatically. |
| Technical server logs | 7 days. |
| Database backups | Up to 35 days after the data is deleted. |
8. How we protect your information
- All communication travels encrypted (HTTPS).
- Data and files are stored encrypted and each user can only access their own.
- PDF passwords are stored encrypted and cannot be retrieved.
- Files are delivered through temporary links.
No system is completely invulnerable. If an incident affecting your data occurs, we will tell you and report it to the authority when required.
9. Your rights
As the data subject you may, at any time:
- know, update and correct your data;
- request proof of the authorization you gave us;
- be informed of how we have used your data;
- revoke the authorization and request deletion of your data, unless a law requires us to keep it;
- access your data free of charge;
- file complaints with the Superintendence of Industry and Commerce for infringements of data protection rules.
How to exercise them: you can delete your account and your data from Settings, or write to us at soporte@faduex.com with your name and your account email. We will answer inquiries within 10 business days (extendable by 5 more) and complaints within 15 business days (extendable by 8 more), under articles 14 and 15 of Law 1581 of 2012.
10. Changes to this policy
If we change this policy, we will publish the new version with its effective date and, when the change is important, tell you in the app or by email.