Privacy policy

1. Who we are

BillingSoft provides an electronic invoicing service that generates, signs, submits to the Dominican tax authority (Dirección General de Impuestos Internos, DGII) and retains electronic tax documents (e-CF). This policy explains how we process personal data under Law No. 172-13 on the Protection of Personal Data.

2. What data we process

Account data: the name, email and organization of each user, plus access records (date, time and IP address of sign-ins) needed to keep the service secure.

Document data: whatever our customers include in their e-CF, such as their buyers' name or legal name and RNC or ID number. Here we process the data on the customer's behalf; the customer decides what its documents contain.

Contact data: what you send us through the contact form (name, email, company, phone and message).

3. What we use it for

To provide the service: authenticating users; issuing, signing, submitting and retaining documents; and reporting their status.

To meet legal obligations, in particular the tax rules that require documents to be retained and handed to the DGII on request.

To protect the service: detecting unauthorized access and keeping an audit log of sensitive operations, such as every digital signature.

To reply to whoever writes to us. We do not sell personal data or use it for third-party advertising.

4. Who we share it with

The DGII, to which documents are submitted as the law requires.

Providers of our infrastructure — hosting, database and email delivery — under confidentiality and security obligations. Some of them process data on servers located in the United States.

Authorities, when a law or a court order requires it.

5. How long we keep it

Tax documents and their associated records are kept for the period tax rules require, which we treat as at least ten years. They cannot be deleted during that period, even if the organization stops using the service.

Account data is kept while the account is active and, afterwards, for as long as legal obligations require. Contact messages, for as long as needed to handle the request and any business relationship that follows from it.

6. How we protect it

Encryption in transit, passwords stored with resistant key-derivation algorithms, sessions that can be revoked instantly, isolation of each organization's data, role-based access control and an audit log. Customers' digital certificates are kept encrypted and only used inside an isolated signing service.

7. Cookies

This public website uses no tracking or advertising cookies. The application uses only necessary cookies: a session cookie, to keep you signed in securely, and one that remembers the language you chose.

8. Your rights

You may request access to your data, its rectification, its cancellation or erasure, and object to its processing, under Law 172-13. For data included in the documents of a BillingSoft customer, please contact that customer first; we will support them in handling your request. Some erasure requests cannot be fulfilled while the law requires the documents to be retained.

To exercise your rights or ask about this policy, write to us from the contact page.

9. Changes to this policy

We will publish any change here, with its update date. Significant changes will also be communicated to customers.