Privacy Policy

Actualizado: to be defined

⚠️ Internal draft. This document must be reviewed and approved by a lawyer specialized in data protection in the Dominican Republic before being published officially.

1. Data we collect

When you use Ment, we collect:

  • Account data: name, email, phone, company, RNC.
  • Fiscal data: the invoices you issue through the service, including your customers’ data (RNC, corporate name, amounts, items).
  • Technical data: IP, browser, operating system, pages visited (via Plausible Analytics, no cookies).
  • Digital certificates: the .p12 certificates you upload are stored encrypted with AES-256.

2. How we use the data

  • To provide the service (signing, submission to the DGII, retention of invoices).
  • Operational communications (status alerts, service changes).
  • Customer support.
  • To improve the service (aggregated, anonymous analytics).

3. Who we share data with

Fiscal data is transmitted to the DGII as part of the service (that is the product’s purpose). Beyond that, we do NOT sell or share your data with third parties, except:

  • Infrastructure providers (DigitalOcean) who only process data to provide service to us.
  • When required by a competent authority by law.

4. Security

  • TLS 1.2+ on all connections.
  • .p12 digital certificates encrypted with AES-256-CBC.
  • Databases on private infrastructure with restricted access.
  • Logs do not expose passwords or tokens.

5. Data retention

Issued invoices are retained for the periods required by Dominican tax law (minimum 10 years). If you cancel your account, account data is deleted after 90 days, except for invoices that must be retained by legal obligation.

6. Your rights

You may request at any time:

  • To access the data we hold about you.
  • To correct inaccurate data.
  • To delete data we are not legally required to retain.
  • To export your invoices in XML/PDF.

Write to privacidad@ment.do to exercise these rights.

7. Cookies and tracking

This website uses Plausible Analytics, a privacy-friendly tool that does not use cookies and does not track individually. We do not use Google Analytics, Facebook Pixel, or third-party trackers.

8. Changes to this policy

If we make material changes, we will notify you by email or a prominent notice on the portal at least 15 days before they take effect.

9. Contact

For privacy questions: privacidad@ment.do.