1. Privacy Commitment & Fundamental Principles
At ContaExperto ERP, we recognize that our clients' financial and accounting records represent their most confidential corporate asset. This Privacy Policy transparently outlines how we collect, safeguard, process, and protect your personal and corporate financial data.
2. Information We Collect
We categorize the processed data into the following three categories:
- A. Registration & Identity Data Administrator full name, corporate email address, issuing phone number, and encrypted password (stored solely via one-way cryptographic hash).
- B. Billing & Subscription Data Company legal name, Tax ID / Corporate ID number, billing address, wire transfer or Mobile Payment reference numbers, and subscription tier status.
- C. Tenant Accounting Data NIIF/IFRS chart of accounts, journal entries, vouchers, bank balances, and fixed asset depreciation ledgers. This data is stored strictly in your dedicated, isolated PostgreSQL schema.
3. Purpose of Processing Data
We use the information collected solely for the following legitimate business purposes:
- Provisioning and maintaining your active multi-tenant workspace and organization database schema.
- Generating trial balances, journals, general ledgers, and financial statements as requested by authorized users.
- Validating and processing subscription orders and reconciling payment transactions.
- Transmitting critical transactional notices (account verification, security alerts, and invoice confirmations).
- Delivering dedicated accounting software support upon explicit customer inquiry.
4. Technical Isolation & Encryption Safeguards
We implement a defense-in-depth architecture designed for enterprise-grade financial systems:
Transit and Rest Encryption
All web and API traffic is encrypted via TLS 1.3 (256-bit SSL certificates). At rest, all database storage volumes and backups are encrypted utilizing 256-bit AES algorithms.
PostgreSQL Schema Logical Isolation
Each connection sets the organization's schema route dynamically (SET search_path = tenant_schema), preventing cross-tenant leakage.
5. Strict Zero Data Selling Policy
ContaExperto never sells, rents, monetizes, or leases corporate or personal financial data to advertisers or third-party data brokers.
We only share strictly necessary information with essential infrastructure partners:
- Cloud Infrastructure: Compute servers and managed databases with ISO 27001 and SOC 2 certifications.
- Transactional Email Services: Secure SMTP dispatch strictly for system notifications and verification tokens.
- Official Rate APIs: Read-only queries to central bank feeds for official exchange rates.
7. User Rights (GDPR & ARCO Compliance)
Authorized representatives of organizations registered with ContaExperto may exercise the following rights:
View and modify tax information, user profile credentials, and accounting settings directly in your admin panel.
Export all accounting ledgers, vouchers, and reports in open standard formats (Excel, CSV, PDF, JSON) without hindrance.
Request permanent, irreversible purging of your dedicated PostgreSQL schema upon contract termination.
Unsubscribe from non-essential newsletters with one single click at the bottom of any email.
8. Data Retention & Secure Purging
We retain accounting records while your subscription remains active or during the subsequent grace window. Following a formal cancellation request, we grant thirty (30) consecutive calendar days for complete data export. After this period, secure cryptographic deletion of tenant schemas and backup records is executed.
9. Data Protection Officer (DPO) & Contact
To exercise your rights or submit inquiries regarding your personal and corporate financial data, please contact our Privacy & Compliance Officer:
Data Protection Office (DPO):
Email: privacy@ContaExperto.com
General Support: soporte@ContaExperto.com