1. Data Controller

ALCE Soft (hola@alce-soft.com) is responsible for processing your personal data in accordance with applicable privacy laws.

2. Personal Data We Collect

Email address and name (account registration)
Digital certificate (.cer) and encrypted private key (.key) of your e.firma — only if you choose to store it
RFC associated with your e.firma
SAT portal password (CIEC), encrypted — only if you choose to sign in with it and store it
SAT download request history
Login records: date and time, IP address and browser used
Consent records: what you accepted, when, from which IP and with which browser
Billing events linked to your account: date, amount, payment status and payer email

The last three are collected automatically as you use the service. We keep them for two purposes: to detect unauthorized access to your account and to handle inquiries about charges or about the service provided. We do not use them for advertising.

3. e.firma Processing

Your private key (.key) is encrypted with AES-256-GCM before storage. Your e.firma password is NEVER stored or transmitted. If you select 'Delete when done', your e.firma is automatically deleted once the download process completes. If you select 'Keep', you can delete it at any time from your control panel.

3.1 SAT Portal Password (CIEC) Processing

You may query your documents by signing in with your RFC and your SAT portal password, without uploading your e.firma. That password is encrypted with AES-256-GCM before storage, and is stored only if you expressly authorize it; otherwise it is used once and deleted.

You should know that this password opens your entire SAT portal, including Buzón Tributario, not just the document queries this service needs. We use it solely to query and download your documents and their receipts. You may delete it at any time from your control panel.

4. Processing Purposes

These purposes are necessary to provide the service:

Providing the SAT batch download service
Authentication with the SAT Web Service and, if you authorize it, with the SAT portal
Sending notifications about your request status, your plan and your charges
Subscription and payment management
Account security and handling of inquiries

Additional purpose, which you may refuse

In addition, we use your name and email address to tell you about new features, content and promotions of the service itself. This purpose is NOT necessary to provide the service, and refusing it does not affect your account or what you can use in any way.

To refuse, use the "unsubscribe" link at the bottom of each of those emails, change it from your profile, or write to us at hola@alce-soft.com. Your refusal takes effect immediately and we do not ask for explanations. You will still receive service emails — your downloads, your plan and your charges — because those are part of what you signed up for.

For this purpose we use only your name and email. We do not use your e.firma, your documents, your login records or your billing events for advertising, now or later.

5. Google Sign-In

We offer the option to sign in with Google (Google OAuth 2.0). When using this option, we only obtain your name, email address, and public profile photo from Google. We do not access your Google account, Gmail, Drive, or any other Google service beyond what is strictly necessary to create and manage your ALCE Fiscal account. You can revoke this access at any time from your Google account at: myaccount.google.com/permissions.

6. Data Transfers

Your data is NOT sold or shared with third parties for commercial purposes. It is shared only with: the SAT (to process download requests), MercadoPago (to process subscription payments), Google Analytics (aggregate site usage metrics, see section 9). We never share your e.firma or your portal password with anyone other than the SAT.

Signing in to the SAT portal with your RFC and password requires solving a captcha. You type it yourself: the image is shown on screen and does not leave our servers. If we ever enabled an external automatic solving service, all that would be sent to it is that image — which contains no data about you — never your password, your RFC or your documents; we would update this notice before doing so. If you sign in with your e.firma there is no captcha.

7. Data Retention

Downloaded XML files: 48 hours (free plan) / 7 days (Pro plan)
e.firma: until the user deletes it or cancels their account
Portal password (CIEC): until the user deletes it, or immediately after use if storage was not authorized
Account data: while the account is active
Login records: 24 months, then automatically deleted
Consent and billing records: while the account is active and for up to 5 years afterwards, this being the period during which charges may be disputed or tax obligations clarified

8. Your Rights

You have the right to Access, Rectify, Cancel and Object to the processing of your data (ARCO rights). You can exercise them by writing to hola@alce-soft.com or directly from your control panel (delete account). If you only want to object to news and promotional emails, you do not need to write to us: the unsubscribe link in those emails or the setting in your profile is enough, and it does not affect the rest of the service.

9. Cookies and Automatically Collected Data

We use necessary cookies to keep you signed in; without them you could not access your account or use the service.

We also use Google Analytics, which sets its own Google cookies to measure, in aggregate, which pages are visited and how the site is used. We use this to improve the service; we do not use it to identify you individually, we do not use it for advertising, and we do not sell your information to third parties.

Google processes that information on its servers, which may be located outside Mexico, under its own privacy policies.

If you do not want Google Analytics to measure your visit, you can install the Google Analytics opt-out browser add-on, or block third-party cookies in your browser settings. Declining measurement does not affect any functionality. Session cookies cannot be disabled without losing access to your account.

10. Contact

For any privacy questions: hola@alce-soft.com

Privacy Policy