Privacy policy

What data we handle

Your account: name, email address, password (stored encrypted, never in clear), preferred language and, if you upload one, your profile photo. If you sign in with Google or Apple we receive the identifier and email that provider shares with us.

Your business data: trade name, legal name and tax id, branches, registers, users and roles, products and inventory, customers and suppliers, sales, returns, expenses, payments and the tax documents you issue. It is yours: we store and process it to provide the service.

Technical data: open sessions, security and audit logs (who did what and when) and, if you turn on notifications in the app, a device identifier so we can send them.

Phone permissions: the camera (scan barcodes and take the profile photo or logo), your photos (choose those images) and Bluetooth (print receipts and open the cash drawer). They are used on your device for those features and for nothing else.

What we use it for

To provide the service: record sales, keep your inventory and accounting, issue electronic tax documents, show you reports and let your team work with the permissions you give them.

To protect your account: sign in, recover your password, detect improper access and keep the audit log.

To charge the subscription and contact you about the service. We do not sell your data, we show no advertising and we do not track you across apps or websites.

Who we share it with

Only with the providers we need to operate, who process data on our behalf: hosting and database, file storage, email delivery, subscription payment processing (Stripe, which handles card data: Rabbixt does not store it) and the electronic tax document provider, which transmits them to the DGII.

The tax documents you issue are sent to the Dominican tax authority (DGII) as the law requires. We may also disclose data when a competent authority legally requires it.

Some of those providers may have servers outside the Dominican Republic.

How long we keep it

While your account is active. Sales, tax document and accounting records are kept for the periods the applicable tax and accounting laws require, even after the account or the business is closed: 10 years for tax records. Encrypted backups are deleted automatically after 30 days.

Deleting your account

You can delete your account whenever you like from the app: Account → My profile → Delete my account. Your name, email, photo, password and every way of signing in are erased, and your sessions are closed.

What your business recorded (sales, invoices, movements) is kept, because it belongs to the business and the law requires us to keep it, but it is no longer tied to your name: it shows as “Usuario eliminado” (deleted user). If you are the only owner of a business, you must first name another owner or write to us to close the business.

Your rights

Under Law 172-13 on personal data protection you may ask for access to your data, correct, update or delete it, and object to certain processing. You make many of those changes yourself in the app; for the rest, write to us.

Customers of your business whose data you record in Rabbixt should go to your business first, which decides what data it asks for and why.

Security

We protect data with encrypted connections, hashed passwords, isolation of each business's data and encrypted backups. No system is infallible; if an incident affects you, we will tell you as the law requires.

Minors

Rabbixt is a tool for businesses and is not aimed at anyone under 18.

Changes to this policy

If we change this policy in an important way, we will tell you in the app or by email before it applies. The date above shows the latest version.

Contact

To exercise your rights or ask about this policy, write to us from the contact page on rabbixt.com.