Privacy Policy
1. Introduction
Heruismo LLC ("Company", "we", "us", or "our") operates the Tellen platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.
By using the Service, you consent to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you create an account, or information provided through Google OAuth authentication.
- Business Information: RUC (tax identification number), business legal name (razón social), trade name, address, and other business details required for SRI compliance.
- Contact Information: Names, identification numbers, email addresses, and phone numbers of your customers and suppliers.
- Product Information: Product names, descriptions, prices, and tax configurations.
- Invoice Data: All information contained in electronic invoices, including line items, amounts, taxes, and SRI access keys.
- Digital Certificates: PKCS#12 certificates and associated passwords required for signing documents with the SRI.
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, and actions taken within the Service.
- Device Information: Browser type, operating system, and device identifiers.
- Log Data: IP addresses, access times, and referring URLs.
- Cookies: Session cookies necessary for authentication and Service functionality.
3. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve the Service.
- Generate and submit electronic documents to the SRI on your behalf.
- Authenticate your identity and manage your account.
- Process payments and manage subscriptions.
- Send you service-related communications, including updates and security alerts.
- Respond to your inquiries and provide customer support.
- Detect, prevent, and address technical issues and security threats.
- Comply with legal obligations.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- SRI Submissions: Invoice and business data is transmitted to Ecuador's SRI as required for electronic document authorization.
- Service Providers: We use third-party services for hosting, payment processing, and email delivery. These providers are contractually bound to protect your data.
- Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.
5. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure storage of digital certificates with encryption.
- HMAC-based authentication between internal services.
- Regular security assessments and updates.
- Access controls and authentication mechanisms.
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Invoice data and related tax documents are retained in accordance with Ecuadorian tax law requirements (minimum 7 years).
Upon account deletion, we will remove your personal data within 30 days, except for data we are legally required to retain.
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Export: Request an export of your data in a portable format.
- Objection: Object to certain processing of your data.
To exercise these rights, contact us at the email address provided below.
8. Cookies
We use essential cookies required for the Service to function, including session management and authentication. We do not use advertising or tracking cookies.
9. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.
10. Children's Privacy
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
11. International Data Transfers
Your data may be processed and stored on servers located in the United States and other countries. By using the Service, you consent to the transfer of your data to these locations, which may have different data protection laws than your country of residence.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the Service or email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
13. Contact
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Heruismo LLC
Email: legal@heurismo.com