Privacy Policy
Last updated: 2026-09-24
1. Who we are
Rocket Platform LLC (“RocketFactura”, “we”, “us”) is a limited liability company organised under the laws of United States, with its registered address at Pending registered address. We operate the RocketFactura website and application at https://rocketfactura.com (the “Service”).
We are the data controller for the personal data described in this policy, except for data that our business customers upload about their own customers, where we act as a data processor on their behalf (see section 9). Contact us at privacy@rocketfactura.com.
This policy applies to visitors and users located in Costa Rica and United States. Where a law gives you stronger rights than those described here, the stronger rights apply.
2. What we collect and why
We collect only the data we need to run the Service. Fields marked as optional in our forms are never required to use it. The table below is our complete data inventory.
| Data | Why we use it | Legal basis | How long we keep it | Required |
|---|---|---|---|---|
| Issuer account email and name | Create, secure, and manage the issuer account | Performance of a contract | While the account is active, then as required for legal records | Yes |
| Issuer legal name, cedula, and fiscal address | Configure Costa Rica electronic invoicing and fiscal records | Legal obligation | Retained per Costa Rica fiscal law for 5 years | Yes |
| Customer name, identification, and email on invoices | On behalf of the business: issue and deliver legally required invoice records | Legal obligation | Retained per Costa Rica fiscal law for 5 years | Yes |
| Invoice line items and amounts | On behalf of the business: calculate, submit, and retain electronic invoices | Legal obligation | Retained per Costa Rica fiscal law for 5 years | Yes |
| Issuer signing certificate and Hacienda credentials (sensitive) | Sign invoices and authenticate required submissions to Hacienda | Performance of a contract | While the account is active | Yes |
| Webhook endpoint URLs configured by the business | Deliver invoice and certificate lifecycle events | Performance of a contract | While the webhook subscription is active | Optional |
| Technical logs | Security, debugging, fraud prevention, and service reliability | Legitimate interest | Up to 90 days unless needed for security investigation | Yes |
We also receive technical data automatically when you use the Service: IP address, browser and device type, pages viewed, and approximate location derived from your IP. We use it to keep the Service secure, to fix errors and, only with your consent, to understand how the Service is used.
The Service is not directed at children under 18. We do not knowingly collect their data; if you believe a child has provided data to us, contact us and we will delete it.
3. Analytics and tracking
We do not use third-party analytics or advertising trackers. We only set the cookies strictly necessary to run the Service, described in our Cookie Policy.
We do not sell your personal data. Where the use of advertising cookies could be considered “sharing” under the California Consumer Privacy Act, rejecting marketing cookies in our banner acts as your “Do Not Sell or Share My Personal Information” request. We also honour Global Privacy Control signals sent by your browser.
5. How we protect your data
We encrypt data in transit and at rest, restrict access to staff who need it, use hosting providers with independent security certifications, and log security events. No system is perfectly secure; if a breach affects your data we will notify you and the competent authority within 5 business days to PRODHAB and the affected persons (Costa Rica) and without unreasonable delay under applicable state breach laws (United States).
6. How long we keep data
We keep each type of data for the period stated in section 2. When it is no longer needed we delete or anonymise it, except where the law requires us to keep it longer (for example invoices and tax records).
7. Your rights
You can, at any time and free of charge:
- Access the personal data we hold about you and receive a copy in a portable format.
- Correct data that is inaccurate or incomplete.
- Delete your data and close your account.
- Object to or restrict certain processing, including direct marketing.
- Withdraw consent where processing is based on consent, without affecting what happened before.
- Opt out of the sale or sharing of your personal data and not be discriminated against for exercising your rights.
To exercise a right, write to privacy@rocketfactura.com from the email address on your account or use the privacy options inside the Service. We answer within 30 days (5 business days for access requests under Costa Rican law) and may ask you to verify your identity first.
Costa Rica: these are your rights of access, rectification, cancellation and opposition (ARCO) under Ley 8968 de Protección de la Persona frente al Tratamiento de sus Datos Personales y su Reglamento (Decreto 37554-JP). If you believe we have not honoured them you may file a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB) (https://www.prodhab.go.cr).
California residents: you may designate an authorised agent to make requests on your behalf. We do not offer financial incentives in exchange for personal data.
8. Marketing communications
We send marketing email, SMS or WhatsApp messages only if you opted in, and every message includes a way to unsubscribe. Transactional messages about your account or purchases are sent regardless, because they are part of the Service. Unsubscribing from marketing never affects those.
9. Data our business customers upload
Businesses that use RocketFactura upload data about their own customers (for example names, phone numbers, vehicle or order details). For that data the business is the controller and we are its processor: we process it only on the business’s instructions, under our Data Processing Addendum at https://rocketfactura.com/dpa. If you are a customer of one of those businesses and want to exercise your rights, contact that business directly; we will help them respond.
10. Changes to this policy
We may update this policy. The date at the top always shows the current version. For material changes we will notify you by email or inside the Service at least 15 days before they take effect.
11. Contact
Rocket Platform LLC, Pending registered address. Privacy: privacy@rocketfactura.com. Support: soporte@rocketfactura.com.