Privacy Policy
How we process your personal data under the GDPR.
Draft document, pending legal review.
Controller
ContaFlow is the controller of the data you provide to us.
Data we process
Account data, usage data and the documents you choose to upload.
Legal basis and purpose
Service delivery, consent for marketing, and legal obligations.
Subprocessors
We share data with the following processors, each bound by a data processing agreement: Stripe (payment processing), Resend (transactional e-mail delivery), Amazon Web Services / AWS S3 (document storage), Meta (advertising conversions, only if you accept the Marketing cookie category), Google Analytics 4 and Microsoft Clarity (only if you accept the Analytics category), and Plausible Analytics (aggregate, cookieless traffic statistics).
International data transfers
Some of these processors (Meta, Google, Microsoft) are based outside the European Economic Area. Where that applies, transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses, as applicable.
Data retention
We keep your account data for as long as your account is active. Documents and fiscal profile data may be kept for the periods required by Spanish tax law after account closure. [Exact retention periods pending confirmation with legal/accounting counsel.]
Your rights
Access, rectification, erasure and portability by writing to privacy@contaflow.pro.
Right to lodge a complaint
If you believe your data protection rights have been infringed, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.
Data protection contact
For any privacy question or to exercise your rights, contact privacy@contaflow.pro. [A formal Data Protection Officer has not yet been appointed; this section will be updated once required under GDPR Article 37 or once one is designated.]
Last updated: 2026-05-26
Back to home