Privacy Policy
Last updated: March 23, 2026
1. Introduction
At Tolmin, we are committed to protecting your privacy and that of your clients. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our services. By using Tolmin, you accept the practices described in this policy.
2. Information We Collect
We collect information you provide directly, such as: name, email, your organization's information, and billing data. We also collect tax and accounting information you upload for processing, including Excel files, voucher XMLs, tax IDs, business names, and amounts. Additionally, we collect usage data such as IP address, browser type, pages visited, and usage time to improve our services.
3. Use of Information
We use your information to: (a) provide and maintain our services; (b) process and validate tax information; (c) communicate with you about your account and service updates; (d) improve and personalize your experience; (e) comply with legal obligations; (f) prevent fraud and ensure security. We do not sell or share your personal information with third parties for marketing purposes.
4. Data Protection
We implement technical and organizational security measures to protect your information, including: encryption of data in transit and at rest, two-factor authentication, role-based restricted access, regular backups, and continuous security monitoring. We store data on secure servers and comply with industry security standards.
5. Cookies and Similar Technologies
We use cookies and similar technologies to keep your session active, remember your preferences (such as theme and language), and analyze service usage. You can configure your browser to reject cookies, although this may affect service functionality. Essential cookies are necessary for the basic operation of the platform.
6. Third-Party Services
We use third-party services to provide our functionalities: Supabase for authentication and data storage, Google and Microsoft for OAuth authentication, and analytics services to improve the product. These providers have limited access to your information and are contractually obligated to protect it. We may also query public information from SUNAT to validate tax IDs and taxpayer statuses.
7. Your Rights
You have the right to: (a) access your personal information; (b) correct inaccurate data; (c) request deletion of your account and associated data; (d) export your data in a portable format; (e) object to the processing of your data in certain cases; (f) withdraw your consent at any time. To exercise these rights, contact us through the indicated channels.
8. Contact
If you have questions about this Privacy Policy or wish to exercise your rights, you can contact us at privacy@tolmin.com. We will respond to your request within a maximum of 30 days. You can also write to our physical address if you prefer.