FirmaHoy Privacy Policy

Effective October 23, 2026.

This policy explains what personal data FirmaHoy processes when you use the firmahoy.com website, the FirmaHoy mobile app and its electronic signature services, what we use it for, who we share it with and how you can exercise your rights. It is part of the FirmaHoy Terms and Conditions.

1. Who is responsible

FirmaHoy, Sociedad por Acciones Simplificada de Capital Variable, based in La Libertad, El Salvador ("FirmaHoy"). For any privacy matter, write to soporte@firmahoy.com.

FirmaHoy is the controller of your account, billing and support data, and the processor of the documents and third-party data you upload to send for signature.

2. What data we process

  • Account data: first and last name, email address, company (optional), phone number (optional) and preferred language. If you sign in with Google, Google gives us your name, your email and an identifier for your Google account; never your Google password.
  • Documents and signatures: the files you upload, the fields you place, the handwritten signatures you draw, type or upload, your saved "My signature" and the details of the people you send documents to (name, email and, if you choose, a phone number for WhatsApp).
  • Signature evidence: for each signature we record the date and time, the IP address, the browser or app used, the acceptance of the electronic consent and, when the sender requires it, the code verification. This evidence is included in the document's certificate.
  • Payments and billing: your plan, the subscription status and receipts. Payments are processed by Stripe or n1co: FirmaHoy does not receive or store your full card number, only limited information the processor reports to us (for example, the card brand or the reason a charge was declined). If you request an electronic invoice, we process the tax details you provide.
  • Usage and security: technical logs (IP address, browser, access times, errors) and a browser or device identifier we use to protect accounts and prevent abuse.
  • Website measurement: on firmahoy.com we use tools from Google (Google Ads and reCAPTCHA), LinkedIn and X to measure campaigns and protect forms, and Amazon CloudWatch RUM to measure page performance. The mobile app does not include advertising tools.
  • Support: the messages you send us and our replies.

3. What we use it for

  • To provide the service: create your account, send documents for signature, notify signers by email or WhatsApp, and produce signed documents and their certificates.
  • To keep the signature evidence that gives documents their legal validity.
  • To charge your subscription and issue electronic invoices (DTE).
  • To protect the platform: prevent fraud and abuse, including repeated use of the free trial. For this we compare account signals (for example, email, name and device) using automatic rules and an artificial intelligence model that runs on Amazon Web Services; no account is closed based on this assessment alone without review by our team.
  • To send you service communications (signature notices, billing, security). We do not send advertising without your consent.
  • To improve the platform and comply with legal and tax obligations and requests from competent authorities.

FirmaHoy does not sell, rent or transfer your personal data or your documents.

4. Who we share it with

Only with providers that help us deliver the service, under confidentiality obligations, and only what is necessary:

  • Amazon Web Services (hosting, document storage, sign-in, email delivery and the anti-fraud artificial intelligence model).
  • Google Cloud (custody of the signing certificate key in a hardware security module) and Google (Google sign-in, when you choose it).
  • Meta (WhatsApp), to send signature notices by WhatsApp when the sender chooses that channel.
  • Stripe and n1co, to process payments.
  • The Ministry of Finance of El Salvador, when issuing electronic invoices.
  • Competent authorities, when required by law.

When you send a document for signature, signers see your name, your email and the content of the document. When you sign someone else's document, the sender receives the signed document with its evidence.

5. International transfers

Our providers may process data outside El Salvador, mainly in the United States. We choose providers with recognized security measures and require them to protect the data.

6. How long we keep it

  • Account data, while the account is active.
  • Documents and their signature evidence, while your account exists. If you delete your account they are deleted with it; the copies the other signers already received remain theirs.
  • Billing data, for the periods required by tax law.
  • If you delete your account, to prevent repeated use of the free trial: your email, with no time limit, and your name, the IP address of your sign-up and the identifiers of your browsers, for 2 years. They are used only by the system that detects duplicate accounts.
  • Technical and security logs, for a limited time.

7. Your rights and how to delete your account

You can request access, rectification, erasure, objection and portability of your data at any time by writing to soporte@firmahoy.com.

You can delete your account by following the instructions at firmahoy.com/en/delete-account. When you delete it we cancel your subscription, close your access and erase your account, your organization and its documents. We keep only the data the law requires us to keep (for example, issued invoices) and, to prevent repeated use of the free trial, your email (with no time limit) and, for 2 years, your name, the IP address of your sign-up and the identifiers of your browsers. If you sign up again, your new account will not have a free trial.

8. Security

We use encryption in transit and at rest, access controls, audit logs and a signing key held in security hardware. If an incident affects your data, we will notify you and, where applicable, the authorities.

9. Minors

FirmaHoy is not intended for people under 18 and we do not knowingly collect their data.

10. Changes to this policy

If we change this policy, we will publish the new version with its effective date and, if the change is significant, notify you by email or on the platform.

11. Contact

FirmaHoy · soporte@firmahoy.com · La Libertad, El Salvador.