Personal data processing policy

This policy is adopted in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and the other rules that amend them, and describes how GRANFOGROUP S.A.S. processes the personal data of the users of ContaDocu.

1. Data controller

• Legal name: GRANFOGROUP S.A.S.
• Tax ID: 901.991.175-1
• Address: CR 66 46B 05, Santa Marta, Magdalena
• Contact email: soporte@misimpuestosco.com
• Website: https://contadocu.com

2. Data we process

• Identification and contact data: name, email address, phone number.
• Data of the companies you register: legal name, tax ID, address, tax regime.
• Usage and technical data: IP address, browser, access dates, sessions and security logs.
• Payment data: references of the transactions made through Wompi. We do not store card data.
• A record of the authorizations and consents you grant.

3. Purposes

• To create and manage your account, authenticate you and protect the security of the Platform.
• To provide the service: generate, store and send your documents and manage your companies.
• To process payments, issue invoices and handle requests, complaints and claims.
• To send you transactional communications (verification, password recovery, notices about your plan).
• With your optional authorization, to send you news, guides and offers for our products.
• To improve the Platform through aggregate statistics and to meet legal obligations.

4. Data you upload about third parties

When you register data of your customers, suppliers or employees, you act as the data controller and GRANFOGROUP S.A.S. as the data processor. We undertake to process it only to provide the service to you, to keep it confidential and secure, and not to use it for our own purposes or share it with advertisers. Employment data (salary, social security, bank accounts) is visible only to the administrators of each company.

5. Rights of data subjects

As a data subject you have the right to:

• Access, update and correct your personal data.
• Request proof of the authorization granted.
• Be informed about the use that has been made of your data.
• File complaints with the Superintendence of Industry and Commerce (SIC).
• Revoke the authorization or request the deletion of your data when there is no legal duty to keep it.
• Access your personal data free of charge.

6. How to exercise your rights

Send your request from the contact page (topic "Personal data") or to soporte@misimpuestosco.com, stating your name, your registered email, the specific request and the documents you want to rely on. Queries are answered within a maximum of ten (10) business days and claims within fifteen (15) business days, extendable under the terms of the law. You can delete your account directly from the My account section.

7. Transfer and transmission of data

To operate the Platform we use infrastructure, email and payment providers that may process data on our behalf, including outside Colombia, under agreements that guarantee adequate levels of protection. These providers act only on our instructions.

8. Security

We apply technical and organizational measures such as encryption in transit, passwords protected with strong algorithms, revocable sessions, access controls per company, audit logs and backups.

9. Data of minors

The Platform is not aimed at minors and we do not intentionally process their data.

10. Validity

Data is kept while your account is active and for the time necessary to fulfil the purposes described and legal obligations. This policy applies from its publication and may be updated; substantial changes will be notified to you.