Effective date: 2026-05-29
Last updated: 2026-05-29
This Privacy Policy explains what personal data FacturaSv collects, why, how long we keep it, and your rights. FacturaSv is operated by Sivar in El Salvador. Contact: legal@sivar.lat.
We do not sell, rent, or trade your personal data, and we use no third-party advertising or analytics trackers.
FacturaSv uses a single sign-on account shared across the Sivar ecosystem (Keycloak at `auth.sivar.lat`). You can browse without an account. If you sign in, we read your name, email address, and (if provided) phone number from your Sivar account to identify you. We do not store a separate password — authentication is handled by the shared identity provider.
To issue electronic tax documents (DTE), FacturaSv processes fiscal data about the merchant and its customers — tax ID (NIT/NRC or DUI), name or business name, address, sale details, and amounts. These documents are transmitted to DGII / Ministerio de Hacienda as part of the tax obligation; once accepted, the tax authority keeps its own official copy. We retain billing records for the period required by Salvadoran tax regulations in line with applicable tax regulations.
Some Sivar products record events tied to your phone number or email before you create an account — for example, when a merchant sends you an invoice over WhatsApp. These events are kept in a shared identity service so that, if you later sign up, your history can be linked to your account. They are retained for up to 18 months if never linked, then deleted.
You can see what is held and delete it at any time — no account required — at https://identity.sivar.lat/optout.
We process your data on the following legal bases:
The following third-party services handle data on our behalf. Each link points to that processor's privacy policy:
We pass through the minimum data required for each processor to do its job (e.g. the email address itself goes to the email provider; nothing else).
Data retention periods vary by data category. Beyond those periods, we retain only aggregated, anonymized statistics (e.g. monthly active user counts) that cannot be re-associated with an individual user.
If your access is revoked or expires, we retain the associated identifiers for a reasonable period to prevent re-issuance to a revoked identity, then purge.
If Sivar or any third-party processor stores your data outside El Salvador, that transfer is conducted under the terms of the receiving jurisdiction's data protection framework. Our primary hosting and processing infrastructure is documented in the Third-party processors section above.
You can access, correct, delete, export, or object to the processing of your personal data. To exercise any of these rights, email us at legal@sivar.lat. We respond within 30 days. For pre-account data you can also self-serve at the opt-out link above.
FacturaSv is not directed at children under 13 (or the equivalent age of digital consent in your jurisdiction). We do not knowingly collect their data.
All traffic uses TLS. Data is stored on infrastructure with disk-level encryption at rest. No system is perfectly secure; if a breach affects your data we will notify you at your registered email within a reasonable time.
We may revise this policy; the "Last updated" date reflects the latest revision. Material changes affecting signed-in users are communicated by email.
Privacy questions or requests: legal@sivar.lat.
This is scaffolding intended as a starting point, not legal advice. Have it reviewed by qualified legal counsel in El Salvador before treating it as binding. The Russian version ships as a translation of the Spanish source and requires native-speaker legal review.