Skip to content

Terms of service

Last reviewed:

Text pending completion

This page still contains owner details or sections that are not completed or reviewed. Pending fields: companyName, taxId, address

1. Provider identification

The DiroTPV service (the “Service”) is provided by [PENDIENTE: razón social], tax ID [PENDIENTE: NIF], with its address at [PENDIENTE: domicilio fiscal] (the “Provider”). Contact: soporte@dirotpv.com.

2. Purpose

These terms govern access to and use of the DiroTPV app (Android app and related services), a point-of-sale software for managing customers, products, sales and invoices. Registering an account means accepting these terms in full, and, when the user acts on behalf of a company, that company accepts them too.

3. Account, company and roles

  1. Each user registers with a personal account (email and password, or Google sign-in).
  2. By creating a company in the Service, the user declares to have sufficient authority to act on its behalf and becomes its administrator.
  3. The administrator can invite other users with other roles. Acts of invited users within the company are attributed to the company.
  4. The account holder is responsible for safeguarding their credentials and for all activity carried out with them, and must notify the Provider without delay of any unauthorised access.

4. Obligations of the customer company

  1. Accuracy of tax data. The company alone is responsible for the accuracy of the data it enters: its own tax ID and address, those of its customers, prices, VAT rates and the applicable equivalence surcharge.
  2. Tax liability. The customer company is in all cases the taxpayer. DiroTPV is an invoice issuing tool; using the Service does not transfer any of the company’s tax obligations to the Provider.
  3. Lawful use. Using the Service to issue false invoices, simulate transactions or any other activity contrary to the law is prohibited.
  4. Retention. The company acknowledges that issued invoices and their records cannot be modified or deleted once issued, under the applicable rules; mistakes are corrected by voiding the invoice and issuing a new one.

5. Veri*Factu

  1. The Service prepares invoices in the Veri*Factu format: sequential numbering, chained hash and an immutable record.
  2. Submission to the AEAT is not yet available in DiroTPV. Until it is, the company remains responsible for meeting any invoicing obligations that apply to it on its own. [PENDIENTE: revisión legal — wording of §5 while submission to the AEAT is not operational]
  3. Issuing an invoice requires a connection to the server, because numbering and chaining are handled by the server.

6. Data protection and data processing

  1. The processing of personal data is governed by the privacy policy.
  2. For the personal data of end customers that the company enters into the Service (name, tax ID, address, email), the Provider acts as processor on behalf of the company, which is the controller. Accepting these terms incorporates the data processing agreement in Annex I.
  3. The Provider relies on sub-processors (hosting and email delivery, among others), listed in Annex I.

7. Price and billing of the Service

There is a free plan and a Premium plan, whose current conditions and prices are on the pricing page. Premium is a Google Play subscription, cancelled from the subscriptions section of Google Play.

[PENDIENTE: revisión legal — conditions for price changes and notice to subscribers.]

8. Availability and support

  1. The Provider strives for reasonable availability of the Service but does not guarantee any particular service level (SLA).
  2. Interruptions may occur because of maintenance, technical causes or force majeure. The app lets you work temporarily offline for sales; issuing invoices requires a connection to the server.
  3. Support is provided through the support channel built into the app, with no response-time commitment on the free plan.

9. Intellectual property

The software, the DiroTPV brand and its contents belong to the Provider or its licensors. The company is granted a non-exclusive, non-transferable, revocable licence limited to using the Service under these terms. The data entered by the company belongs to the company.

10. Limitation of liability

  1. To the maximum extent permitted by law, the Provider’s total liability for damages arising from use of the Service is limited to [PENDIENTE: revisión legal — maximum amount; common practice: the amounts paid by the company in the previous 12 months].
  2. The Provider is not liable for: (a) tax penalties or surcharges arising from incorrect data entered by the company; (b) damage caused by access made with the company’s credentials; (c) loss of profit or indirect damages.
  3. Nothing above limits liabilities that cannot be limited by law.

11. Duration, termination and portability

  1. These terms apply while the company keeps an account in the Service.
  2. The company can leave at any time by following the steps on the delete account page. On termination, operational data is erased or anonymised under the privacy policy, except invoices and their records, which are kept for the legal period.
  3. Before termination, the company can ask by email at privacidad@dirotpv.com for a copy of its data in a structured, commonly used format [PENDIENTE: revisión legal — export mechanics and format]; the app does not currently have a full one-step export.
  4. The Provider may suspend or terminate the Service for a company in case of serious breach of these terms (in particular section 4.3) or non-payment, giving prior notice where reasonably possible.

12. Changes

The Provider may change these terms for legal, technical or operational reasons. Substantial changes will be communicated at least 30 days in advance through the app or by email; continuing to use the Service after they take effect means accepting them. If the company does not accept them, it can leave before that date.

13. Governing law and jurisdiction

These terms are governed by Spanish law. For any dispute, the parties submit to the courts of [PENDIENTE: revisión legal — city of the Provider’s address], unless consumer law imposes another forum.

Annex I. Data processing agreement (Art. 28 GDPR)

  1. Subject matter. The Provider will process on behalf of the company the personal data of its end customers (identifying data: name, tax ID, address, email) for the sole purpose of providing the Service: customer management, sales, and issuing and emailing invoices.
  2. Duration. While the company keeps an account, plus the legal retention periods.
  3. Instructions. The Provider processes the data only on the company’s documented instructions, which are the functions of the app itself.
  4. Confidentiality. The Provider’s staff with access to the data are bound by a duty of confidentiality.
  5. Security measures. Encryption in transit (TLS), access control by company and by role, and backups.
  6. Authorised sub-processors. Hetzner (hosting of the server and the database, in the European Union) and Mailjet (email delivery: recipient addresses, including end customers, and PDF invoices with name, tax ID and address). Google Firebase takes part in Google sign-in and crash reports, as described in the privacy policy. [PENDIENTE: revisión legal — country and transfer safeguards of each sub-processor.] The Provider will give reasonable advance notice of changes of sub-processors.
  7. Data subject rights. The Provider will assist the company in handling access, rectification, erasure and portability requests; the app lets you delete or anonymise customers while respecting the legal retention of invoices.
  8. Security breaches. The Provider will notify the company without undue delay of security breaches affecting its data.
  9. End of the processing. At the company’s choice, erasure or return of the data when the Service ends, unless retention is required by law.
  10. Audit. The company may request reasonable information to verify compliance with this annex.