Back to home

Legal

Privacy Policy

Last updated: 29 June 2026

This is a plain-language template provided for transparency. It is not legal advice and should be reviewed and adapted by a qualified lawyer before being relied upon.

1. Who we are

TaxNomad provides document-organization software for Spanish autónomos. This policy explains what personal data we collect, why, and what rights you have. As an EU/Spain-based service, we process personal data in line with the GDPR and Spanish data-protection law (LOPDGDD).

2. Data we collect

  • Account details — your name, email address, and authentication data used to sign you in.
  • Tax identifiers — your NIF/NIE and similar reference details you choose to add so your documents and filing periods are organized correctly.
  • Uploaded documents — the invoices, receipts, and files you upload, together with the values extracted from them (amount, date, vendor, category, and so on).
  • Billing data — subscription status handled by our payment processor; we do not store full card numbers.
  • Usage & technical data — basic logs needed to run and secure the Service.

3. How your documents are processed by AI

A core part of TaxNomad reads your uploaded documents automatically. To do this, the contents of documents you upload are sent to third-party AI providers — such as Google (Gemini) and Anthropic (Claude) — which extract details like the amount, date, vendor, and document type.

  • This processing happens with your consent and only to provide the extraction feature.
  • Documents are sent to these providers solely for extraction; we ask that they not be used to train their models.
  • AI output can be inaccurate, so you can review and correct every extracted value before relying on it.
  • If you would rather not use AI extraction, you can avoid uploading documents to that feature.

4. How we use your data

  • To provide the Service: storing, naming, sorting, and packaging your documents.
  • To extract document details via AI as described above.
  • To manage your account, subscription, and support requests.
  • To keep the Service secure and comply with legal obligations.

We process this data on the legal bases of performing our contract with you, your consent (for AI processing of documents), and our legitimate interest in running a secure service.

5. Where documents are stored

Uploaded documents are stored using object-storage providers — Cloudflare R2 and/or Backblaze B2. Access is restricted to your account and the processing described in this policy.

6. Retention

We keep your documents and account data for as long as your account is active or as needed to provide the Service. You can delete documents at any time, and when you close your account we delete or anonymize your personal data unless we are required to keep certain records by law.

7. We do not sell your data

We do not sell your personal data or your documents. We share data only with the service providers needed to run TaxNomad (such as hosting, storage, payment, and AI providers), under appropriate agreements.

8. Your rights (GDPR / LOPD)

As a user in the EU/Spain, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your data (“right to be forgotten”).
  • Restrict or object to certain processing.
  • Withdraw consent — including consent to AI processing — at any time.
  • Receive your data in a portable format.
  • Lodge a complaint with the Spanish data-protection authority (AEPD).

To exercise any of these rights, contact us at support@taxnomad.es.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, give reasonable notice.

10. Contact

Questions about your privacy or this policy? Reach us at support@taxnomad.es.