RO EN
Start Trial

Privacy Policy

Notarial respects your privacy and the professional secrecy obligations under Law 36/1995.

Last updated: July 2026

1. Principle

Notarial respects your privacy and the professional secrecy obligations under Law 36/1995. The website and API collect only the minimum data necessary for service operation. Notary data (cases, clients, documents, D208) never leaves the notary's machine.

2. What We Collect on the Website

Analytics: Plausible (cookieless, GDPR-compliant). Collects: page views, referrer, browser/OS, country. No cookies, no personal data, no cross-site tracking.

Contact form: Name, email, office name, message. Used only to respond to your inquiry. Not shared with third parties.

"Updates" checkbox: Email (optional, unchecked by default). Used only for product updates. You can unsubscribe anytime.

3. What We Collect via API

  • License key: Stored as bcrypt hash. Plain-text key is never logged.
  • Machine fingerprint: Machine ID for license-seat tracking. Not linked to personal identity.
  • Hostname: Machine hostname (for admin dashboard display only).
  • App version: For update compatibility checks.
  • Platform: macOS/Windows/Linux + architecture (for installer selection).
  • No notary data: Cases, clients, documents, D208, taxes — none of this reaches the API.

4. What We Do NOT Collect

Client data (names, personal ID numbers, addresses), case data, documents (scans, PDFs, XMLs), D208 declarations, tax calculations, calendar/appointment data, checklist content, database contents.

5. Cookies

Website: no cookies. Plausible is cookieless. API: no cookies. JWT tokens for the admin dashboard are stored in localStorage, not cookies.

6. Third-Party Partners

Stripe: Payment processing. Stripe's privacy policy applies.

Cloudflare: Hosting (Workers, D1, R2, Pages). Processes API requests but has no access to notary data.

Plausible: Website analytics (cookieless, GDPR-compliant).

7. Your Rights

Access: Request a copy of data we hold about you (license info, contact form submissions).

Deletion: Request deletion of your account and associated data.

Portability: Your notary data is already on your machine (SQLite, PDF, XML).

8. Security

API: HTTPS only, rate limiting, JWT authentication for admin. License keys: bcrypt-hashed, never stored in plain text. Machine fingerprints: one-way hash, not reversible to personal identity.

9. Changes

Privacy policy may be updated with notice on the website. Material changes will be communicated via email to active subscribers.

This is a summary of the policy. The final version must be reviewed by a lawyer.