Privacy policy

Last updated: 8 September 2026

Who is the controller?

The controller of your data is Conductiva Online Services, S.L. (“Conductiva”), with NIF B65152100 and registered office at C/ de la Llotja, sn, VIT, 08500 Vic, Barcelona, Spain, registered in the Barcelona Commercial Registry, Volume 41388, Folio 9, Sheet B392505, Entry 1.

You can contact us about any privacy matter through the chat on the website and in the program, or by email at privacidad@facturadirecta.com.

Two different types of data: which one this policy covers

• Your data as a user or visitor (the data you register with, your contact and billing details with Conductiva, and your browsing data). Conductiva is the controller of this data, and it is the data this policy covers.
• The data you enter into your FacturaDirecta account (that of your customers, suppliers or employees). You are the controller of that data, and Conductiva acts solely as processor, following your instructions. That processing is not governed by this policy but by the Data Processing Agreement, which forms part of the Service agreement.

What data do we collect?

In general terms, we request the following identification data: first name, surname, trade name, tax ID number (NIF), town, country, email and telephone. Most of it is not mandatory: it is possible to register with just a name and an email.

If you subscribe to a paid plan, we also process your billing and payment data (the payment method details are collected directly by our payment provider and are not stored in FacturaDirecta).

Browsing data is also collected: connection IP, device characteristics, preferred language, location country and session data (referring domain, pages visited, date and time of access).

We obtain it from registration on our website, from our blog, from the application itself (web and mobile) and from our customer service.

What do we use this data for, and on what legal basis?

We do not create profiles that produce legal effects on you, nor do we make automated decisions of that kind.

How long do we keep your data?

For as long as you keep your account or your relationship with us. When you delete your account, the data is blocked and kept for a maximum period of 18 months, after which it is permanently erased, except for data we must keep longer under a legal obligation (for example, tax information or the invoicing records required by the regulations), which remains blocked and solely at the disposal of the competent administrations for the legally required periods. You can request early erasure at any time.

Do we share or transfer your data?

We do not sell your data or transfer it to third parties for their own purposes. We only communicate it to:

• Providers that supply services to us (hosting, email delivery, support, artificial intelligence tools that help the support team prepare their replies, payment, etc.), which act as processors following our instructions. The main ones are identified in the list of sub-processors.
• Public administrations and authorities, when required by law.

We undertake to inform you of any corporate change that involves new ownership of the data you have entrusted to us, giving you the option to exercise your rights.

Is data transferred outside the European Union?

Our main infrastructure is in the European Union. Some specific providers (for example, the Intercom support chat or the artificial intelligence services used for document scanning and to support the support team) process data in the United States. In those cases the transfer is covered by the safeguards of Chapter V of the GDPR: the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. You can find the details for each provider in the list of sub-processors.

Is my data safe in FacturaDirecta?

Conductiva applies appropriate technical and organisational measures to prevent the loss, misuse, alteration, unauthorised access and theft of personal data. All communications take place over a secure encrypted channel (TLS), the servers are hosted in European Union data centres (Google Cloud and Amazon Web Services), access credentials are stored irreversibly and sensitive keys are always kept encrypted.

If you receive an invoice or a document through FacturaDirecta

When a FacturaDirecta user sends you an invoice or shares a document with you through the portal, the controller of your data is that user (the issuer of the document), and Conductiva acts as their processor. To exercise your rights over that data, contact the issuer; if you ask us, we will forward your request to them.

What are your rights?

• Right of access: to know what data of yours we process, for what purposes and to whom we have communicated it;
• Right to rectification: to amend your data when it is incomplete or inaccurate;
• Right to erasure (“right to be forgotten”): to obtain the erasure of your data when it is no longer necessary, when you withdraw your consent or in the other cases provided for by law;
• Right to object: to object to the processing on grounds relating to your particular situation, and in any case to the sending of commercial communications;
• Right to restriction of processing: in cases of inaccuracy, unlawfulness, claims or objection;
• Right to data portability: to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another controller;
• Right not to be subject to automated individual decisions that produce legal effects on you or similarly significantly affect you;
• Right to withdraw consent at any time, without affecting the lawfulness of the processing carried out beforehand.

How can I exercise these rights?

You can exercise any of these rights through the help service of the website and the program (chat) or by email at privacidad@facturadirecta.com. We will reply within one month at most.

If you believe we have not handled your rights correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).