Privacy policy — Verificador de Comprobantes

1. Who we are

La Fábrica (Shopify Partners organization no. 5285731), represented by Carl Sauter, an individual based in Costa Rica. Contact: saupra.cr+privacidad@gmail.com.

2. Roles

• The merchant who installs the app is the controller of its buyers' data.
• La Fábrica processes that data on the merchant's behalf, only to verify payments. We are the controller of the merchant's account data (email, domain, plan).
• Our AI provider acts as our sub-processor (section 6).

3. Data we process

• The receipt image uploaded by the buyer, including whatever appears on it (for example name, source account or phone number).
• Order number and amount.
• Reading result: match or not, amount read, date and reference.
• From the merchant: domain, email, plan and billing. If the merchant downgrades and chooses to tell us why, we keep that reason and the optional comment to improve the app; they are deleted with the rest of the merchant's data.
• If the merchant says an agency recommended the app (optional): that agency's code and the date. The merchant enters it in Settings, or the agency does with the merchant's agreement.
• Technical logs: date, errors and the upload's IP address.

We never ask for card numbers, passwords or ID documents. The app does not request or store the buyer's name, email, phone or address. We do not knowingly process data from minors.

4. How we use it

• To read the receipt and compare it with the order (the service the merchant subscribes to).
• To notify the merchant and cancel abandoned orders when the merchant enables it.
• To bill the plan, provide support, comply with the law and prevent fraud.
• If the merchant says an agency recommended the app, to calculate that agency's commission. We only tell the agency the store's domain, its plan and the commission amount; never buyer or receipt data.

We do not use data for advertising or profiling, and we do not sell it or share it with third parties for their own purposes.

5. Retention

• Receipt image: 30 days from upload or until the payment is confirmed or the order is closed, whichever comes first. Then it is deleted.
• Result (match or not, amount, date, reference): while the app is installed.
• Receipt fingerprint (a code that cannot be turned back into the image): 180 days, only to detect receipts reused on another order.
• Account and billing data: for the relationship and the period required by accounting law.
• Agency code: while the app is installed; deleted with the rest of the store's data on uninstall.
• Reports of commissions already paid to agencies: the period our accountant indicates, 5 years until the accountant sets another period, only as accounting records.
• Technical logs: up to 90 days.
• Encrypted backups: rotated and overwritten within 30 days.

6. Artificial intelligence

To read the image we use Claude, by Anthropic, through its commercial API. Only the image and what is needed to extract the receipt fields are sent.

Under Anthropic's commercial terms, API inputs are not used to train models. Anthropic may retain them for a short period for safety and does not use them for any other purpose.

If a reading is uncertain, it is flagged for manual review. No decision is made by AI alone: the merchant confirms.

7. Where data is stored and who else is involved

• Server and database: La Fábrica's own machine located in Costa Rica.
• Connection: Tailscale (United States) carries end-to-end encrypted traffic to our server and cannot read its content.
• Shopify (the store platform) and Anthropic (receipt reading, United States).

We require equivalent security and confidentiality from each of them.

8. Privacy requests through Shopify

• Customer data request (customers/data_request): we gather what we hold about that person and deliver it to the merchant within 30 days.
• Customer redaction (customers/redact): we delete images, results and logs for their orders within 30 days, except what the law requires us to keep.
• Shop redaction (shop/redact): after uninstall, we delete all of the store's data within 48 hours of Shopify's notice.

We verify the signature of every notice and reject invalid ones.

9. Your rights

You may request access, correction, deletion or objection, and withdraw consent (Costa Rica Law 8968 and equivalent laws in your country), by writing to the merchant or to saupra.cr+privacidad@gmail.com. We reply within 30 days. If you are not satisfied, you may complain to your country's data protection authority; in Costa Rica, Prodhab.

10. Security

Encrypted connections (HTTPS), signed upload links that expire after 30 days and accept at most 3 uploads per order, data separated per store, keys kept out of the code, encrypted backups and access logs. If a breach affects personal data, we notify the merchant without undue delay and, where the law requires, the authority and the people affected.

11. Cookies

Only the technical cookies required by the Shopify session. No advertising or tracking cookies.

12. Changes

If we make material changes, we notify merchants by email and in the app before they take effect, with a new version number.