SAFTCheck
EN PT ES IT
Validate now, free How it works Pricing Guides Docs Sign in
EN PT ES IT

Privacy Policy

Last updated: 2026-10-01

Who we are

SAFTCheck is a software product operated by OCmods (Portugal). Primary contact: [email protected].

OCmods is the data controller for personal data processed through saftcheck.com. Full registration details are available on request to any data subject exercising rights under Articles 15–21 of the GDPR: write to the address above and we respond within 30 days. This policy explains what we collect, why, and what your rights are under the GDPR (Regulation (EU) 2016/679) and the Portuguese Data Protection Law (Lei n.º 58/2019).

What we collect

1. Files you upload

  • SAF-T XML files uploaded for validation. These contain customer data, supplier data, invoices, and tax identifiers. We treat the contents as confidential.
  • Edits you apply: if you use the inline editor (paid feature) to patch a NIF, ATCUD or header date, the new value is written to the same uploaded file in our temporary storage. The original pre-edit version is overwritten and not retained. Edits do not extend the deletion deadline.
  • Retention: uploaded files are automatically deleted within 60 minutes of upload by a scheduled purge job. Two exceptions keep a file a little longer so you can use what you paid for: while a payment for it is in progress (up to 60 minutes after you open the checkout) and for 60 minutes after the payment is confirmed. If validation fails with an internal error, the file is deleted immediately.
  • VAT registration check: to check whether the company that issued the file is VAT-registered, we send the NIF from the file header (and only that number) to the European Commission's VIES service. The answer (valid or not, and the registered name) is cached on our server for up to 24 hours.
  • What we keep after deletion: for signed-in users, a summary of each check for the dashboard history: file name, company name and NIF from the file header, fiscal year, error counts, file SHA-256 hash and file size. These rows are deleted automatically after 90 days, or earlier if you delete your account. For visitors who are not signed in, we keep a hash of the IP address together with the SHA-256 hashes of the files checked, for 24 hours, to enforce the daily free limit. The XML contents are never kept.

2. Account data

  • Email address (required to receive magic-link sign-in).
  • Sign-in timestamps and IP address (for fraud and abuse prevention).
  • Validation history rows (as described above) for the dashboard, kept for 90 days.

3. Billing data

  • Payments are processed by Paddle, our Merchant of Record. We do not store credit card details. Paddle's privacy notice applies to payment data: paddle.com/legal/privacy.
  • We retain transaction IDs, invoice references, and subscription status received from Paddle.
  • Buying without signing in: if you buy a Single Fix without an account, we receive the email address you entered at Paddle and create an account for it (or add the purchase to your existing account with that email), so the purchase stays in your history and you can sign in later to see it. You can delete that account at any time as described under "Your rights".

4. Technical data

  • Server logs: IP address, user agent, request paths, response codes. Retained 30 days.
  • Essential cookies: a session cookie (also used for sign-in and to remember a checkout you started) and a locale preference. These are needed for the site to work and are always set.
  • Optional cookies: Google Analytics and the tawk.to live chat. Neither is loaded unless you click OK on the cookie banner. If you click Reject, they are not loaded at all. Your choice is stored in this browser's localStorage (saftcheck_cookie_consent), and you can change it at any time with the Cookie settings link in the page footer. No advertising trackers.
  • Google Analytics 4 for aggregate traffic statistics (page views, referrer, country, device class, and which landing-page FAQ questions are opened). Google's script is not requested from Google at all until you accept. Upload tokens in page addresses are removed before anything is sent. IP addresses are anonymised. Data retention is set to the minimum offered by Google (currently 2 months for event data). You can also install the official Google Analytics opt-out browser add-on.
  • Page assets: your browser loads the page styling and scripts from public content delivery networks (cdn.tailwindcss.com and unpkg.com). Like any web request, these providers see your IP address and browser details. No cookies are set by them.

Why we process your data: legal bases

  • Contract performance (Art. 6(1)(b)): to validate the SAF-T file you submit and to deliver paid features.
  • Legitimate interest (Art. 6(1)(f)): to keep server logs for security, prevent abuse, and improve the service.
  • Legal obligation (Art. 6(1)(c)): to retain billing records for the period required by Portuguese tax law.
  • Consent (Art. 6(1)(a)): for Google Analytics and the live chat, which load only after you accept them on the cookie banner.

Sub-processors

Our infrastructure stack:

  • Hetzner Online GmbH (Germany): application hosting and database.
  • Cloudflare, Inc. (US, with EU data centres): sits in front of the site for TLS encryption, caching and protection against attacks. Uploaded files pass through Cloudflare encrypted in transit; Cloudflare does not store them. Bound by the EU–US Data Privacy Framework and Standard Contractual Clauses.
  • Paddle.com Market Limited (UK): payments and Merchant of Record.
  • Email delivery provider: sends transactional email (sign-in links, receipts). It processes your email address and the message content. Ask us for the current provider at the address above.
  • tawk.to LLC (US): live-chat support widget. Loaded only after you accept optional cookies; sets its own cookies and processes the IP, user agent, and any messages you type into the chat. Bound by the EU–US Data Privacy Framework.
  • Google Ireland Ltd. (Ireland, with onward processing in the US): Google Analytics 4 for aggregate traffic measurement, loaded only after you accept optional cookies. Bound by the EU–US Data Privacy Framework and Standard Contractual Clauses.
  • European Commission (VIES): receives the NIF from the header of an uploaded file to confirm its VAT registration, as described above. This is a public service, not a processor acting on our behalf.
  • Public content delivery networks (Tailwind Labs for cdn.tailwindcss.com, and unpkg.com): serve the page styling and scripts to your browser.

All sub-processors are bound by their own GDPR-compliant terms.

Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and all associated data ("right to erasure").
  • Export your data in a portable format.
  • Withdraw consent for any processing based on consent.
  • Lodge a complaint with the Portuguese Data Protection Authority (CNPD): cnpd.pt.

You can exercise the right to deletion directly inside your account at https://saftcheck.com/account. For all other requests, email [email protected]. We respond within 30 days.

International transfers

Our hosting (Hetzner) is in the EU. Some sub-processors (Cloudflare, tawk.to, Google) are US-based or transfer data to the US, and rely on the EU–US Data Privacy Framework or Standard Contractual Clauses for those transfers.

Changes to this policy

If we make material changes, we update the "Last updated" date and notify signed-in users by email.

Essential cookies only. Analytics and live chat load only if you accept. Privacy Policy.